Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File:                     oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier:          icWoENL3nXm7hLClVFdU1+M2m6EJF8+KojfScbW4WS8=
Subject key identifier:   8D:E6:EC:2E:34:82:50:55:0B:37:36:FF:3D:C5:91:E0:94:0D:58:6F
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer:       /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial:       019352073831A41ED9EE810F6446AB430F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number:          0E15
Signing time:             Fri 22 Nov 2024 04:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:25 +0000
Files and hashes:         1: d-swVZ6s8_CIyC__i_sA_O1swd8.roa (hash: qCypOvLibuKP2E68GRothmm8lo6B/mICB0EA5T+oEpI=)
                          2: gdXpdvEUcuDJqJKHVPoJ7ZcSKg4.roa (hash: 7/sv4/tvbjwOgaSFBGDjtMlWShEwPtxWendJmB37GNo=)
                          3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: K2V/r+zOQdGE0UYC5505tZ5u3B9oLaWYDHNAUoSk4GA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:38:31:a4:1e:d9:ee:81:0f:64:46:ab:43:0f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
        Validity
            Not Before: Nov 22 04:00:25 2024 GMT
            Not After : Nov 23 04:00:25 2024 GMT
        Subject: CN=8de6ec2e348250550b3736ff3dc591e0940d586f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:1f:dd:c4:47:79:f8:20:28:77:79:a3:50:
                    9f:2e:b4:de:b7:0e:24:9a:85:c7:45:54:bf:e4:fe:
                    71:99:31:2f:1b:90:1f:5f:2b:c4:62:5e:ca:16:64:
                    c6:5e:0c:fe:de:2e:2d:dd:86:ac:79:43:d3:07:53:
                    1e:2a:1e:a7:ed:f4:7d:d2:7c:ab:d0:63:7f:73:be:
                    0c:6d:f3:3d:b3:12:9d:69:b3:cc:a9:19:e5:5d:f3:
                    de:d3:2b:cb:c7:6f:13:7b:25:d4:07:d6:64:66:0b:
                    d3:b4:f9:ce:e1:4d:d6:35:a4:22:b0:e5:79:bb:a2:
                    68:f5:ae:d8:b5:c3:de:a2:d5:8d:27:33:ff:e2:14:
                    48:eb:86:ff:6e:d6:9e:06:cc:cb:36:8c:f1:60:4d:
                    89:63:94:b8:b7:95:d4:26:98:47:78:90:99:02:56:
                    80:d0:a4:6d:f3:a2:fe:97:29:49:29:e4:40:f4:fc:
                    d3:24:ac:64:cf:ae:de:36:7c:41:82:f8:95:de:1d:
                    06:98:66:04:87:be:06:c6:6a:dd:d3:87:f3:56:81:
                    19:49:91:de:ee:86:3b:14:47:df:cf:b8:a7:2e:99:
                    b8:76:66:0e:7a:a2:21:55:75:b1:d8:86:40:cb:bd:
                    f3:5e:23:1b:9c:ab:8f:0e:19:79:53:49:41:c1:9c:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E6:EC:2E:34:82:50:55:0B:37:36:FF:3D:C5:91:E0:94:0D:58:6F
            X509v3 Authority Key Identifier:
                keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:5f:e9:5c:cc:6e:a8:b6:2e:08:b3:96:56:4d:a2:c5:4d:
         6f:99:bd:ff:38:81:b5:33:1c:14:89:5e:a9:ac:e4:9c:c6:c9:
         52:72:7e:32:86:be:1e:37:08:02:6d:04:0a:0f:59:33:b9:70:
         53:37:13:d9:df:8e:d1:82:5f:09:0e:83:81:b2:46:3d:c9:00:
         03:2b:f3:6a:c0:39:68:49:ce:b9:55:1c:80:8c:3e:15:e2:80:
         3c:35:55:1a:b4:26:e2:94:60:e5:69:78:5a:ae:a4:0d:a0:ce:
         6a:63:4c:88:50:f8:cb:e8:73:f1:dc:ce:4f:8c:bd:a8:f4:a1:
         42:95:ae:6c:c1:05:f3:f1:f6:06:48:23:60:4f:31:9d:7f:58:
         39:f3:e6:1f:ba:ba:36:17:db:9d:62:7e:36:cf:92:2c:bc:6a:
         b5:eb:f9:ae:47:70:ff:e1:f0:91:8c:09:d7:f3:3a:1d:75:1b:
         a9:9a:0b:13:12:74:15:c9:38:e1:23:9e:27:92:aa:db:0f:b2:
         d1:53:87:07:f8:69:d2:e5:55:20:96:13:4e:bb:27:59:6b:1a:
         51:ff:e2:2f:41:84:1a:00:6e:a9:fa:ee:37:e2:ef:5d:e2:8f:
         51:80:03:d8:ab:23:9b:e7:af:c3:18:a5:aa:af:0c:37:da:81:
         31:e1:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----