Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File:                     KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier:          olHQDKSRgU65cyNqIK3GkSduxUd8F+uBd/TSgwXXeVQ=
Subject key identifier:   9A:14:03:02:49:D2:B1:4E:EA:3F:55:CA:A9:93:03:59:B4:2B:AC:AC
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer:       /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial:       0193568A6908B55545B0B93FBB21F5C5B64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number:          09A4
Signing time:             Sat 23 Nov 2024 01:02:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:11 +0000
Files and hashes:         1: 1Y2y71CVt0KNemOKKt7NPHBv7-A.roa (hash: vxHv6lV5aywAePlUb1KkJGXbS5/RqFWRxCbQlzTondU=)
                          2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: +61N2m30DFQUYhSflrURQVVSAt5ANWfT+1qGoORnx+c=)
                          3: wDMlnlmhoCkHUVzuzwnMH-P3aos.roa (hash: LKT45jAG/plgZwMmjUjDiwus+uavnaWh3HjxDTdaWa0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:69:08:b5:55:45:b0:b9:3f:bb:21:f5:c5:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
        Validity
            Not Before: Nov 23 01:02:11 2024 GMT
            Not After : Nov 24 01:02:11 2024 GMT
        Subject: CN=9a14030249d2b14eea3f55caa9930359b42bacac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:e1:56:29:e1:bb:d4:2e:09:c6:92:9e:3d:
                    dd:b5:b7:53:c9:e1:cc:51:9c:de:89:db:63:0f:86:
                    3c:c6:d6:16:5e:a8:43:61:1e:a3:84:54:f8:d7:db:
                    5a:dd:1d:c5:7c:ff:f9:5b:f6:70:1c:48:c2:98:ba:
                    1b:f6:ce:a8:bb:ed:53:55:16:97:65:1f:8f:03:37:
                    70:cd:00:fc:a0:93:94:6c:fa:c5:e1:f2:57:1c:a9:
                    c9:e2:7c:f1:91:cd:d2:59:b6:29:37:be:de:ad:a2:
                    63:fd:bb:ff:34:85:b1:a5:41:14:cd:70:eb:ba:7e:
                    73:a3:53:4a:8b:75:d5:18:f3:7a:2a:b8:84:16:2d:
                    11:07:5c:53:47:e7:3e:59:57:e0:cb:cd:e9:c3:73:
                    60:d8:58:4b:32:14:9f:33:71:bf:ce:3d:e0:32:a5:
                    f1:90:0c:ee:cd:f5:1e:1f:29:49:cc:13:59:ac:b7:
                    3c:19:af:8e:9e:b4:1a:b3:05:88:b5:d0:d2:d5:4e:
                    73:9f:96:07:3d:46:08:31:6b:aa:68:33:ba:53:f5:
                    f7:e6:22:b8:6b:82:e6:4b:44:5c:fc:7c:4c:a4:29:
                    b3:67:b3:ab:48:36:8a:d0:7d:cf:dd:46:7c:2a:10:
                    ac:0c:9e:38:ab:00:12:90:b3:eb:ff:04:4b:12:d4:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:14:03:02:49:D2:B1:4E:EA:3F:55:CA:A9:93:03:59:B4:2B:AC:AC
            X509v3 Authority Key Identifier:
                keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:22:9c:c8:6f:b2:b4:10:04:63:69:10:d1:10:c1:dc:cb:
         2f:19:fe:cf:48:c9:9c:84:d1:d3:9f:8b:5f:93:56:bc:10:1c:
         86:6a:46:0b:10:b4:7d:e4:b3:4d:dc:83:40:93:21:62:fc:f0:
         3f:21:5c:c1:aa:99:9e:5c:40:df:30:13:07:5d:48:c6:b9:3b:
         a5:73:e8:96:36:cd:a7:c0:c9:85:76:f7:a0:e1:66:ca:f7:84:
         4c:bc:32:dd:a1:8f:a5:89:34:b3:7c:99:20:32:f2:e1:45:f3:
         69:e8:f2:6d:81:27:a9:09:72:8e:80:6a:11:25:64:33:a8:ad:
         01:d5:02:6a:a1:1b:5e:aa:87:d5:2e:d3:a4:df:6e:98:f5:5d:
         73:0c:1c:c8:a6:18:b6:c0:cb:b8:39:50:38:ba:27:f4:e3:55:
         6b:22:d6:11:f7:d1:63:3a:c1:f7:85:64:2a:60:59:36:96:f4:
         50:f6:b6:9e:17:2e:64:55:34:36:6f:9c:71:84:df:d7:b5:65:
         41:d7:7f:60:bf:0c:14:30:44:a8:25:73:5d:91:af:a4:a8:14:
         55:66:e8:e2:ba:74:ee:a4:cb:60:06:94:d0:10:64:79:39:ec:
         02:7b:5e:3d:16:c1:15:30:b3:b6:18:87:da:59:3e:d0:0f:5a:
         b7:ac:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----