Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File:                     JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier:          /FnCOY1oulH+IVIV+LVFKiHpC5qbn52kBZAQkNEKegE=
Subject key identifier:   4A:85:5D:DA:7D:46:AB:0D:CF:72:4C:18:43:AA:98:C2:15:35:9D:68
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer:       /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial:       019357D2B5732FBE6B1C0B7D2264A1CB1C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number:          10CC
Signing time:             Sat 23 Nov 2024 07:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:46 +0000
Files and hashes:         1: GmDbKDh135p8vqUOth3V26cDS_s.roa (hash: awMhGS/3JTKZYsVU22oIRwZXERA5MBcBlIgZqYsndoQ=)
                          2: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: iEkhTa1V++CIzKlh6RBCmwm6Mucj+/OrMfKvXmBTv6A=)
                          3: v6YtcQkdJ66EsQ1Widj2ySOGFvM.roa (hash: AOJWj9fShByd7Ki9R0joV5ryj5zLZiX+krPdSp6q5Tc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:b5:73:2f:be:6b:1c:0b:7d:22:64:a1:cb:1c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
        Validity
            Not Before: Nov 23 07:00:46 2024 GMT
            Not After : Nov 24 07:00:46 2024 GMT
        Subject: CN=4a855dda7d46ab0dcf724c1843aa98c215359d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:d1:1c:7a:82:89:e5:65:c0:67:8c:1c:e4:
                    1e:a6:cc:b5:1e:93:f4:d0:91:f4:ef:67:da:9e:08:
                    2c:1a:35:7b:e7:be:b0:c7:ba:18:94:59:84:cd:2b:
                    b2:3c:63:b6:96:63:09:e2:25:46:99:44:f1:46:e2:
                    78:7f:f4:35:6a:6d:0e:60:97:9a:b7:65:7d:03:16:
                    1f:9e:ce:e3:e7:e7:ee:e9:1c:a9:5d:4a:57:2a:d2:
                    69:45:c7:7f:50:fb:bb:2b:ec:bd:e1:12:a3:68:80:
                    ac:e6:5c:de:4f:0d:4f:c5:9c:a2:c5:6e:00:74:05:
                    48:84:05:b0:a8:26:57:3a:22:a7:51:b4:83:e7:7b:
                    08:14:60:b9:04:71:a9:15:5a:c3:4d:5c:46:03:1f:
                    f2:fc:92:f4:95:8b:f1:8d:c4:72:6d:ef:15:c0:19:
                    94:bb:04:21:82:72:b3:72:c9:07:60:42:ca:d2:a8:
                    66:27:42:3c:b4:00:aa:dc:a2:8d:aa:fc:72:4e:a1:
                    2a:cf:05:b3:81:4a:d2:81:a9:b3:65:29:e3:cb:0c:
                    18:d0:46:1f:79:cf:a2:ad:dd:50:08:dc:1d:14:9f:
                    6e:dc:52:45:71:be:9f:df:62:fb:ac:db:58:6c:ec:
                    a6:3f:d5:83:f2:2f:ea:09:98:62:d0:02:60:97:21:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:5D:DA:7D:46:AB:0D:CF:72:4C:18:43:AA:98:C2:15:35:9D:68
            X509v3 Authority Key Identifier:
                keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:2f:13:d2:7c:9e:4b:ae:8e:26:b2:e5:bb:57:d4:bb:4d:
         64:34:c9:97:3b:ae:eb:c9:05:26:7b:c5:16:0c:51:3d:24:c0:
         15:3e:66:02:3a:55:8d:de:72:72:61:1f:0f:fe:ba:92:30:23:
         ec:21:01:76:e1:1a:9e:0d:fa:76:0c:c2:b4:e0:28:6a:73:eb:
         5a:5c:d1:38:79:a5:86:5a:8a:6c:a3:62:8e:c9:3f:74:88:69:
         23:a0:e7:10:bc:d5:12:a9:6b:c7:91:9c:f2:84:01:8e:64:6a:
         07:fa:06:22:ca:aa:a5:4f:a4:ef:7d:24:28:70:ad:26:2d:cf:
         3d:b9:6a:33:da:51:0d:16:23:42:37:44:c5:09:ea:4c:8c:4d:
         67:68:ae:45:17:3b:62:8e:81:e0:ca:aa:80:31:6c:29:2c:aa:
         a1:a1:89:c7:68:6f:b8:1e:3a:14:19:5b:a7:4a:f7:48:91:8e:
         e4:88:7d:97:de:5d:d8:03:c9:30:32:16:25:c8:61:59:a9:e5:
         55:e3:40:90:f5:a5:a4:1c:cf:e4:a5:01:7a:20:1d:82:5a:3a:
         6f:2f:7d:30:b5:17:00:ae:12:eb:12:0f:f3:08:94:eb:2d:8a:
         ef:80:f6:a7:bf:31:18:79:b2:43:83:96:f1:6b:07:e7:7d:8e:
         87:0c:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----