Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          /03mr8hUHMDtvrY8WMgkx+RfReNKZJwM1bVJcj9rwBs=
Subject key identifier:   BB:D6:81:02:FC:B1:ED:23:05:F7:1B:6E:13:0A:1B:A6:F5:11:61:78
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       0193549AF62C7AC078B51FE3E590BC9B0B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:01:01 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:01 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:01 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: Ct8Xa/BOsSVcTEq2x9+ZQkVFAhLmLvoQorgy38JU++Q=)
                          2: JFyMNggmUl0xfEZpt3nb7EyStwQ.roa (hash: dfxocIqn7rUjXkDRloSWAT2UfkDKSNu4GiqvpBjMgBQ=)
                          3: yLzrDp2Fk69zZmFlYknZxn0mQ0c.roa (hash: i/fQTRbEJRJk7RvyK0xpkXzoI6sUonZCjsp8cMPw5aA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:f6:2c:7a:c0:78:b5:1f:e3:e5:90:bc:9b:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Nov 22 16:01:01 2024 GMT
            Not After : Nov 23 16:01:01 2024 GMT
        Subject: CN=bbd68102fcb1ed2305f71b6e130a1ba6f5116178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:cc:0c:d6:96:db:da:4a:5c:01:98:d7:66:
                    52:90:d8:66:8b:86:b2:01:5c:ec:78:d8:da:b0:a4:
                    a6:60:79:14:f1:d6:0a:bf:5c:a6:ad:c1:cc:80:a6:
                    f6:78:9a:a2:9c:8e:9d:a7:31:01:24:2e:0b:d8:7f:
                    32:49:90:fb:a9:31:79:53:24:f1:e4:56:e8:e0:5c:
                    62:7c:e8:e9:60:42:53:19:a0:8d:7a:49:04:9e:c1:
                    45:25:c6:3a:cf:9b:c0:e5:e9:53:66:21:76:89:79:
                    52:71:bc:00:ea:c5:d6:84:9f:c4:4f:73:9c:ad:c3:
                    3a:d1:f5:c4:c0:d0:db:ed:65:28:f0:a4:90:08:74:
                    1f:b1:83:d8:95:3f:48:1f:d2:55:0c:73:da:31:0a:
                    32:b9:01:ca:19:31:26:49:f4:ab:b8:5d:c9:12:ae:
                    ce:98:03:42:60:d5:b2:5a:5a:79:76:32:7e:eb:b8:
                    e5:c1:54:37:c6:0b:6c:ae:3d:d2:dc:3a:82:86:db:
                    7b:81:5c:57:ce:f9:dd:cd:e0:d6:92:82:48:08:b1:
                    cd:c8:18:79:a4:18:0e:32:eb:d5:20:6e:4b:30:ce:
                    2f:12:ba:7c:31:c1:f7:80:38:1a:5c:21:a7:16:f9:
                    85:e2:68:2a:cc:46:e4:ab:75:19:06:8b:eb:e7:96:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D6:81:02:FC:B1:ED:23:05:F7:1B:6E:13:0A:1B:A6:F5:11:61:78
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:eb:b0:9d:b1:2a:85:f1:6e:6e:ad:f6:8a:f5:58:50:34:4d:
         e6:4a:0e:86:0d:63:ed:ed:5c:3f:d9:2d:39:a9:ac:c6:ff:7e:
         fe:89:5d:22:71:c5:29:36:59:66:df:f4:43:f5:dd:d7:4e:e4:
         1a:45:ac:ec:e3:ce:f7:5b:94:82:e5:67:28:48:de:df:00:1d:
         3e:77:52:6c:f1:92:bf:9c:c2:d5:0d:6b:f2:b4:92:c3:69:e1:
         a9:4e:c8:bb:d9:68:f2:09:86:ca:83:5c:02:6c:d1:6d:b9:68:
         77:24:17:7b:3d:ff:75:1d:a7:98:7b:83:9a:ff:a7:1b:18:2a:
         3f:c7:fe:09:42:bc:ba:84:27:f0:7f:77:a0:34:c2:05:c1:e1:
         8a:9c:71:2e:4f:4b:f6:87:47:e1:85:08:13:90:27:2c:6e:fc:
         b2:b9:75:8c:f6:7b:31:50:77:7c:f7:da:6f:3e:a8:e6:2c:27:
         2f:8e:09:62:06:14:ae:1d:76:ba:9f:be:53:13:a8:b6:f8:6b:
         85:9e:4c:fd:67:d8:68:12:b5:c0:59:11:87:cb:33:52:11:a6:
         a3:0f:0c:2d:28:59:f2:98:13:2b:46:63:5e:1b:d1:35:20:da:
         b5:da:18:75:9e:a0:50:af:04:0a:8d:b6:b0:5f:a8:21:ef:36:
         4d:ef:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----