Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          E3QVbvM3hFD/WCKrcfWO8Zoc89xxRDOvNXVBP79o6rs=
Subject key identifier:   ED:71:47:D4:27:BB:A3:CD:AD:E0:C6:80:B6:4D:56:11:39:28:42:3C
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       019356F7079FE88E30FB2BDD236932A54A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 03:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:50 +0000
Files and hashes:         1: AtGQauV6CTkT87C33OkUgR29-80.roa (hash: mQ7oZ8ZiEhjB96qN0IVYJ0rpwHs7PyG1QGiWWyYsjPY=)
                          2: g_UEOf1JT3ofUW4dmkMpzhqrb10.roa (hash: 7eYsAjEZ487J1vsibSNLYBzVHobW9VUWXRFTvPPEWAs=)
                          3: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: 5uKa8/8IAXkwFeb/YiEIoi/2fwCARP84vWUguiKGvW4=)
                          4: xoUCqTRZNhZqRein_zyWrsRqWHE.roa (hash: RLpFV8Zr/LMkBTaTFkn9DJ4T8W/7rBHfgGYXEZc7IFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:07:9f:e8:8e:30:fb:2b:dd:23:69:32:a5:4a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: Nov 23 03:00:50 2024 GMT
            Not After : Nov 24 03:00:50 2024 GMT
        Subject: CN=ed7147d427bba3cdade0c680b64d56113928423c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:a2:51:a7:9d:ed:a0:8f:04:b8:54:62:e6:
                    e8:92:89:96:d5:42:d9:a8:cc:7d:46:92:42:24:61:
                    94:21:0d:56:c6:69:09:11:58:1d:9a:0b:06:37:08:
                    84:bc:8f:10:07:1d:61:67:a9:1e:3a:2c:43:79:c2:
                    86:fd:b1:0d:37:8b:5d:b0:85:2e:15:9e:df:b2:ec:
                    8a:40:e5:3e:82:2b:28:80:74:6e:4c:d5:0e:e3:28:
                    8f:1f:c9:b3:61:e4:37:f2:2c:4e:9b:3b:87:cb:58:
                    6e:cd:4e:c5:a1:01:03:ef:a7:72:68:13:02:2d:17:
                    70:84:00:9f:3b:70:d8:3d:1a:09:7c:ce:a0:9a:4d:
                    a0:6e:42:e6:87:ad:6b:8d:fe:75:d6:8c:d5:43:b7:
                    24:06:59:fe:ae:7f:80:ad:61:e6:e8:29:95:1b:68:
                    12:7d:71:6e:ab:ea:5c:a1:ce:c8:09:e7:d7:47:0d:
                    9d:a9:07:c9:cb:93:48:5b:10:e1:ac:2a:5b:ee:0d:
                    ca:6b:a7:87:06:cf:9a:be:a6:c3:e3:2f:c2:d2:99:
                    7f:be:a4:a2:aa:0f:03:81:47:19:a9:0b:40:8a:a3:
                    dd:ab:9d:02:47:bc:02:93:36:44:b9:4a:72:63:5b:
                    2a:25:72:2a:42:9a:65:28:d4:a4:5f:72:59:82:4d:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:47:D4:27:BB:A3:CD:AD:E0:C6:80:B6:4D:56:11:39:28:42:3C
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:a7:fd:8e:42:fc:6a:ab:66:c2:e6:37:97:19:ab:7a:17:
         bf:d7:03:fc:ea:0d:7f:54:46:d5:16:30:ab:01:35:3f:b1:99:
         3f:01:f1:4e:42:5c:f1:49:21:e9:89:d9:dd:83:60:f8:06:4f:
         65:d1:8b:5b:c1:d5:3c:a6:aa:14:9f:e2:12:b1:99:04:38:32:
         fb:4f:31:43:00:54:21:66:14:54:4c:69:de:d4:e7:b2:41:d8:
         be:e7:45:dd:b3:cc:eb:97:ab:12:f3:c8:07:73:3b:49:6d:c5:
         63:c3:0a:66:92:15:b0:21:f3:3b:63:64:58:c4:86:fc:3d:62:
         66:f3:36:26:16:a7:45:eb:77:e9:e0:de:84:7c:60:a7:04:12:
         50:c1:96:30:ec:aa:44:b9:9b:e2:6f:af:3b:0f:2e:b5:21:39:
         00:4d:07:4c:c7:f9:dc:09:84:0a:40:06:1e:50:83:91:f5:0a:
         aa:77:97:d6:f0:ba:81:c8:6a:99:39:ec:07:19:ed:1b:9a:7f:
         a4:95:da:ec:b5:18:8e:ca:01:72:38:b2:e2:6d:0c:96:72:59:
         13:f3:9d:94:c6:72:ea:e6:d8:74:31:0f:4f:6b:38:37:2e:e6:
         11:8d:56:e8:3a:5a:8b:a2:52:9e:7e:7b:a7:5f:fc:12:41:7c:
         33:60:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----