Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File:                     VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier:          ASotNAcUjcDDHINceEXkvff64dhLPSE11bOAU+jPXQY=
Subject key identifier:   03:A5:2C:40:4B:99:B0:70:A8:3B:91:C8:00:AD:37:D8:70:50:0B:32
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer:       /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial:       019369D974F1572766E1F52246506AE367B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number:          10A5
Signing time:             Tue 26 Nov 2024 19:01:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:19 +0000
Files and hashes:         1: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: PNKwYY9XJH0r0F3JpHwTyzpzCItcTZ+vmzzA5Cgnw6Y=)
                          2: s9JoBZl9UHbnwAnPB0a4_m6BPPQ.roa (hash: sAKxnf7d5dGUPw65F4xiL4N5UtZw60JZF6k7aN2fn6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:74:f1:57:27:66:e1:f5:22:46:50:6a:e3:67:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
        Validity
            Not Before: Nov 26 19:01:19 2024 GMT
            Not After : Nov 27 19:01:19 2024 GMT
        Subject: CN=03a52c404b99b070a83b91c800ad37d870500b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:71:61:48:ee:86:24:90:0c:50:7e:37:36:
                    6b:e0:e1:3e:a7:73:b3:4d:fe:c6:24:f7:0b:6a:fb:
                    d6:d8:82:d4:21:97:e9:73:c8:7d:6f:4b:57:83:c1:
                    c9:95:7e:9e:11:88:8b:c9:b6:68:64:9b:88:f5:66:
                    2f:84:26:58:2b:9f:86:4f:d0:a1:80:2e:2f:1a:70:
                    13:70:96:35:7d:74:ef:71:ca:0b:68:c7:4b:66:56:
                    d2:c5:a7:90:78:e1:e9:75:a9:55:53:51:33:18:9d:
                    44:96:0b:55:49:7b:1a:84:7e:b3:50:bf:b5:c4:72:
                    4a:88:00:ff:6a:4e:dd:73:04:3e:d9:6c:ab:e0:5d:
                    8e:fe:6c:c7:25:0d:01:60:2a:4e:84:c4:d2:6e:46:
                    c3:f5:4e:40:e9:67:d1:57:d4:b2:2d:b3:3a:08:04:
                    d5:d5:d3:f0:b2:3d:6e:36:8e:d9:de:08:3c:e6:57:
                    4e:5b:5e:be:95:82:94:4e:01:d2:20:91:1b:83:32:
                    59:17:27:2b:95:05:b6:50:36:fb:b8:84:01:29:78:
                    99:0c:cf:df:d2:27:00:37:4b:c4:31:13:3c:f7:77:
                    74:eb:be:0a:b5:6a:cc:8c:4f:4b:be:65:9a:de:59:
                    9c:e9:10:1e:f8:f1:cb:2e:d8:8d:e0:73:f6:c3:24:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:2C:40:4B:99:B0:70:A8:3B:91:C8:00:AD:37:D8:70:50:0B:32
            X509v3 Authority Key Identifier:
                keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c5:1c:d8:c3:ae:a4:0d:aa:19:fa:05:34:ff:0e:7c:86:17:
         9f:bb:39:c8:5f:b6:25:b3:7c:2f:fb:dd:05:00:67:2f:d3:9a:
         69:a8:14:06:28:cc:fc:d4:a6:9f:71:13:f3:8d:d1:81:a5:69:
         f5:1b:47:a4:fe:7a:6f:83:06:21:22:09:4f:c6:cb:47:7e:71:
         a4:64:d8:ba:2f:26:02:ca:6c:8b:78:e9:f0:35:66:4c:5d:83:
         79:1a:68:68:1a:b5:1f:c4:f5:3b:c4:30:2a:d8:f1:d3:2a:a3:
         3b:9d:39:1e:d5:39:7a:1c:0b:1b:88:ac:55:e0:72:ca:20:21:
         59:47:f8:e1:59:4b:7d:52:fd:be:40:21:8f:67:f2:53:64:0e:
         d8:20:54:84:c4:be:41:cd:70:1e:5a:08:8a:27:c9:5c:15:27:
         37:8b:4c:f6:f9:ce:78:a4:33:d8:ea:c2:8e:f0:6c:8f:f0:5f:
         a7:8e:0f:24:07:fd:64:f3:38:8f:fd:40:e0:93:1b:b5:75:ac:
         76:8d:27:0b:9e:79:4a:ce:08:00:15:a4:d7:35:d5:c7:b3:a2:
         1d:33:f8:08:85:51:92:cc:65:77:5e:69:98:09:d3:d6:b7:12:
         5e:8b:d9:73:7a:ab:77:e4:93:03:ef:04:2b:60:3e:2d:5d:85:
         b9:b7:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----