Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File:                     K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier:          k5M8lIBUAkZJH6kyhilRnF1DH+rXJ2GZre7xOjPYxsw=
Subject key identifier:   CB:23:26:7B:2A:43:3C:03:78:86:7D:D0:E7:31:A1:B5:E7:5F:D2:1A
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer:       /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial:       019350F4951E50EAA9D8299BD6B845F2D3DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number:          090F
Signing time:             Thu 21 Nov 2024 23:00:26 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:26 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:26 +0000
Files and hashes:         1: CJ4N0Q9kxz8qHPOIwkhDsbB4Lbk.roa (hash: Rc7F/UarTXIhzSmof4SDK+QfoCOb4yfJ3ZVqMR9CtE0=)
                          2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: 63c/kIqr+hNNHjrs5YjJWBd24O8jTHa85qXp9quT5q8=)
                          3: Z4NOFYYk4RzpPX66ta_3-E_fPZY.roa (hash: Raq4KrmkYE0fIRsUFR1EIMoYTODFKHYRyhepPWtx7Rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:95:1e:50:ea:a9:d8:29:9b:d6:b8:45:f2:d3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
        Validity
            Not Before: Nov 21 23:00:26 2024 GMT
            Not After : Nov 22 23:00:26 2024 GMT
        Subject: CN=cb23267b2a433c0378867dd0e731a1b5e75fd21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:17:8c:56:f5:b4:13:84:c8:6f:ea:01:2e:46:
                    c9:2c:9b:8e:fd:b0:87:bd:0f:f5:68:c5:81:89:1c:
                    6b:d3:35:5d:4d:f3:2a:f7:25:9c:7d:28:cc:12:af:
                    49:3a:63:4a:cb:80:b9:8c:a7:ac:42:5c:a8:21:b4:
                    c2:34:5b:2b:b1:3c:dc:08:0c:57:a8:84:1a:a6:c9:
                    cd:43:2c:a6:58:47:f9:3d:a4:4f:7f:c6:f7:0f:34:
                    01:01:78:86:a3:64:2b:44:2c:40:ab:83:3b:1f:38:
                    6e:2f:f7:05:9c:11:0a:1c:f7:6f:c4:1f:15:e7:01:
                    e5:f9:d4:65:f2:6d:31:26:29:77:0e:56:06:84:36:
                    9d:02:b5:28:f8:34:e5:85:da:fc:0b:16:e8:8f:0d:
                    11:a4:57:45:73:13:96:da:4a:6d:51:69:1e:93:e5:
                    6d:8d:f4:c9:d7:9f:d6:83:b0:1a:c8:58:a8:32:a7:
                    a7:a1:77:14:df:0b:c7:06:ff:9c:18:59:d6:46:1c:
                    68:72:fb:08:2a:d8:a2:b6:11:9c:29:0e:56:d1:8a:
                    63:fe:a2:6e:e8:47:a5:49:33:cb:79:0c:32:da:80:
                    b3:e6:36:2f:7f:d0:e7:cb:d7:36:03:e7:c5:96:ea:
                    72:ab:17:c3:2e:ba:5f:83:51:48:01:bc:03:f1:4d:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:23:26:7B:2A:43:3C:03:78:86:7D:D0:E7:31:A1:B5:E7:5F:D2:1A
            X509v3 Authority Key Identifier:
                keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:a8:6f:53:69:3c:b1:56:b8:6a:03:26:d7:9e:88:0d:1b:
         d9:3c:f2:3f:8b:06:fb:18:ce:41:5f:5a:55:6c:6a:5d:47:ec:
         9f:ac:10:99:8f:6e:8f:96:c3:11:5d:8c:60:5b:b1:58:d4:92:
         fb:6e:1c:ea:4c:fe:ce:02:bb:76:64:19:7f:ef:69:d2:93:aa:
         09:cb:eb:4e:4e:ba:83:2a:f7:77:50:41:e6:fd:89:e3:bd:3d:
         95:94:bf:b1:22:bf:14:43:0e:c8:68:68:1c:8c:b4:1b:96:87:
         88:ad:56:6e:c0:be:b0:5a:ed:5d:d0:53:87:ce:55:f0:86:aa:
         a4:c7:1f:46:8a:42:1e:a3:3d:fe:40:19:f6:ed:de:2f:9d:6d:
         37:44:c7:4f:da:ef:83:db:82:ef:39:d7:19:fd:b8:ce:72:23:
         d9:19:9d:6d:e7:e8:ca:ac:64:f0:2c:ac:87:48:15:e0:f8:f6:
         54:08:5b:03:69:aa:c2:4c:2e:cf:29:61:d7:2b:c4:42:64:ae:
         82:56:62:68:3f:9d:0b:c3:8a:8e:2f:48:20:6e:33:32:2a:5d:
         83:66:1c:27:3d:0f:73:6d:21:db:af:66:69:ab:25:c4:26:2f:
         4a:06:50:9d:7d:05:50:83:e1:90:b5:c3:8b:4c:aa:16:b9:e1:
         f3:19:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----