Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File:                     s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier:          3sgTwSgpE4ypVNLIcl251+xag4IszcpLT5tx5JRPyvA=
Subject key identifier:   EF:AC:58:E9:11:DD:DD:7B:5D:29:2B:60:4A:F1:B2:09:0C:C8:A1:A5
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer:       /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial:       019359C12D3F5A7E3D5017AA78B149633196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number:          08CA
Signing time:             Sat 23 Nov 2024 16:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:52 +0000
Files and hashes:         1: hQxfl9VW1c9ff536F2XldmsJu-s.roa (hash: FPuJJDHtsMyD9yMVp9zYylaCIHob1AWgrxMtsWNFxHA=)
                          2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: DYsr4zCWvTjYAqhqztoxYYjzg2UBwd+Ibdgw7IMPvRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:2d:3f:5a:7e:3d:50:17:aa:78:b1:49:63:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
        Validity
            Not Before: Nov 23 16:00:52 2024 GMT
            Not After : Nov 24 16:00:52 2024 GMT
        Subject: CN=efac58e911dddd7b5d292b604af1b2090cc8a1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:aa:35:f1:0a:30:b4:c8:21:d2:cc:ae:af:
                    04:b4:76:ad:e6:c3:4b:a0:8e:90:de:06:99:42:ee:
                    e0:95:03:3a:c5:a3:63:e4:0c:68:5f:b3:45:41:ac:
                    c8:d4:07:cd:cf:8c:b9:e0:ae:1d:01:5e:19:66:f0:
                    b7:f7:11:8d:95:85:35:40:8c:29:c2:42:fa:b0:0e:
                    72:8d:f9:91:5a:75:91:ff:9c:7b:4f:29:98:70:05:
                    f3:58:8b:5e:3d:86:94:f2:01:65:a9:a0:51:06:9d:
                    5c:f6:d4:5b:e5:08:f7:5c:f1:fe:37:76:b1:41:dd:
                    c9:9d:b7:84:68:c5:7e:da:5f:a2:20:34:9f:69:f4:
                    70:28:55:60:4b:d8:de:24:bb:e7:b3:85:2f:95:c4:
                    97:af:ac:82:39:d7:0c:96:18:c8:41:34:a8:3e:29:
                    15:f4:9e:08:06:34:de:ec:ca:27:67:55:5c:df:64:
                    f0:6c:b0:39:83:be:5f:70:e8:8c:83:03:6a:c1:f8:
                    94:b2:0b:ea:83:34:f9:18:91:70:bc:a1:41:e0:f1:
                    4a:97:4d:c2:3a:e1:b9:6e:20:58:c8:e5:f2:24:5b:
                    21:ca:07:db:fa:75:af:4c:92:18:16:a9:cd:55:e6:
                    27:31:01:70:28:f2:79:cb:37:78:82:01:bf:73:6e:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AC:58:E9:11:DD:DD:7B:5D:29:2B:60:4A:F1:B2:09:0C:C8:A1:A5
            X509v3 Authority Key Identifier:
                keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:81:98:e1:94:ca:97:51:94:61:3a:c0:bf:94:bf:91:c6:4d:
         3b:35:25:8e:f6:15:5d:36:fb:f8:7e:a3:fa:c5:5a:9b:56:1b:
         30:5c:2d:7b:b7:a1:77:82:4c:64:62:83:be:0e:24:a4:65:97:
         4f:b0:ae:0b:90:b9:f3:81:67:69:06:42:69:22:0c:60:33:13:
         b6:50:82:39:44:69:68:68:39:a4:55:1c:24:28:ae:c7:1c:a7:
         ea:dc:e8:8f:1a:70:1e:87:d6:d6:71:35:1c:05:55:e6:ce:65:
         97:d2:17:42:83:a5:25:7d:ce:74:3c:e8:6b:d3:ac:ad:10:2a:
         25:04:74:cd:94:5c:39:ed:aa:2a:23:1c:63:be:e5:7a:28:6f:
         0e:cf:dd:76:9f:25:03:24:78:9b:74:26:23:13:bc:a4:29:07:
         67:b0:cf:65:55:a1:76:4b:25:2b:b4:78:68:98:40:07:95:aa:
         13:eb:18:19:1b:63:3c:7e:f8:34:58:79:04:51:2f:55:93:9d:
         80:27:d1:df:b0:e4:2c:ee:f4:3f:76:41:82:c4:50:96:01:ed:
         61:f4:7f:93:73:07:f9:a0:82:0b:8c:5a:b8:00:73:73:47:59:
         76:2d:01:6a:a6:ca:7a:45:a2:82:5a:73:08:26:db:76:92:fe:
         0c:3f:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----