Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File:                     O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier:          BZzusN2jkbETLAt2boMX4HvEFgWDfY46QEiMiylu3vE=
Subject key identifier:   C1:A9:B7:B5:EE:9D:58:E0:52:0D:C9:7A:51:3C:59:8F:FB:92:E0:54
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer:       /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial:       019356898BC5EE1D4150E2C3752FACE03BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number:          01C6
Signing time:             Sat 23 Nov 2024 01:01:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:14 +0000
Files and hashes:         1: 9wUo-5Us6Bd2F54HoqAXzoRUlls.roa (hash: U/1Lcq/tG+SNCtM+mXPQRM4DFim3q6jog0Fv/psttzo=)
                          2: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: LOMnzfRsIwbMlAeHw0rG3S0H095dVz4IVhGLUThrWoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:8b:c5:ee:1d:41:50:e2:c3:75:2f:ac:e0:3b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
        Validity
            Not Before: Nov 23 01:01:14 2024 GMT
            Not After : Nov 24 01:01:14 2024 GMT
        Subject: CN=c1a9b7b5ee9d58e0520dc97a513c598ffb92e054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:e8:b5:73:d7:07:77:40:05:bc:b6:01:2d:
                    5b:6f:1b:4a:e0:2b:ae:85:1c:f2:86:10:39:b8:81:
                    fe:1e:16:ea:37:f8:06:29:36:0a:66:16:66:70:1c:
                    c2:39:2e:d8:bd:e0:f5:8d:e7:c5:f4:75:a9:d2:6a:
                    a4:36:a2:9b:29:1a:cb:f7:52:2e:a0:76:1e:82:47:
                    02:fe:32:0b:09:a9:04:bc:46:c9:99:f0:8e:42:fc:
                    ad:d8:14:6f:71:f0:6a:00:e2:b0:bf:b5:2e:90:80:
                    f9:29:15:3b:bc:d5:fd:d6:5c:39:b1:16:81:c5:53:
                    13:9f:44:56:1e:be:72:7a:2b:31:87:6d:5c:f6:5f:
                    9a:94:d6:c6:fd:a2:fb:f5:81:a8:12:79:52:25:e5:
                    01:4e:1e:4d:a2:76:03:f1:b2:da:d8:aa:97:9f:45:
                    79:7b:be:52:4a:b0:13:c7:e5:e9:21:fd:36:d8:0d:
                    31:44:4b:7e:0c:4e:04:cd:d4:57:db:61:40:04:ff:
                    c2:89:a1:fb:6e:8c:9a:0e:f5:33:59:84:52:ee:9b:
                    18:9c:3c:66:8e:d1:2b:40:da:51:40:9a:38:d9:36:
                    1c:c1:a3:c6:a1:22:1e:bf:a9:fb:57:a1:22:fe:04:
                    8f:2f:71:17:59:2f:b1:7e:41:d6:f3:8a:99:18:3d:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A9:B7:B5:EE:9D:58:E0:52:0D:C9:7A:51:3C:59:8F:FB:92:E0:54
            X509v3 Authority Key Identifier:
                keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:2b:cf:1b:2e:05:45:62:0d:24:09:46:f4:64:04:69:91:
         b6:24:9b:05:3b:22:9f:42:41:b7:d5:f5:da:f1:74:1f:a7:52:
         75:6b:43:8e:1b:15:90:03:21:4f:3d:0f:4d:df:3e:e1:76:90:
         a7:3f:12:e5:2f:b6:0e:e4:fe:f8:39:3d:3e:7a:11:36:3f:d0:
         48:94:ed:d2:f6:4c:bc:80:12:c9:be:15:55:33:fa:bb:5d:fd:
         8c:ad:13:16:8d:16:c1:7f:b0:6a:05:f2:2c:45:c7:11:f4:cb:
         cb:58:69:62:8a:e6:98:87:fe:44:47:f0:0e:af:0e:5b:55:98:
         72:42:dd:d9:54:30:82:b0:85:b6:56:3f:8a:ba:34:67:f5:67:
         a9:c6:82:3c:d3:9b:16:57:51:77:7c:4c:95:66:3a:19:eb:54:
         52:05:59:52:d3:09:2a:70:79:2c:dc:e9:86:3f:a9:58:5d:de:
         93:33:a2:22:3c:12:65:1c:ba:6f:98:1a:9d:d5:56:c3:b3:db:
         97:22:0e:5a:2a:ba:80:24:88:9e:8e:23:68:84:95:89:bc:a5:
         fc:ff:35:46:8a:74:69:f1:30:65:eb:94:ed:79:7a:bc:b3:e8:
         ed:b5:73:3a:c6:ce:02:29:b9:a5:4b:95:18:f0:92:54:20:cf:
         40:e7:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----