Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File:                     q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier:          Fa2RTDzTiSs1NZ7w/hgC1SahfqXnq0C7ZB+9Da1fxK0=
Subject key identifier:   70:1D:6C:8D:F4:23:34:CC:15:EA:EB:74:D7:01:0B:99:B1:E3:8D:3C
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer:       /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial:       01935A6749EFD2CDFD7B7386E25C8BB9421B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number:          04BE
Signing time:             Sat 23 Nov 2024 19:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:18 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:18 +0000
Files and hashes:         1: awRI-yZjhCrwkBxvflQ96py528I.roa (hash: NOcmotxNQ+7MKKVh76cnZHAYwH87rKrgslevl9MQndU=)
                          2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: 0UJYUCSaTege/NQyKtzUOD8TI9BaSAeqS0xpYbIH9Vw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:49:ef:d2:cd:fd:7b:73:86:e2:5c:8b:b9:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
        Validity
            Not Before: Nov 23 19:02:18 2024 GMT
            Not After : Nov 24 19:02:18 2024 GMT
        Subject: CN=701d6c8df42334cc15eaeb74d7010b99b1e38d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:a9:c9:2d:79:10:43:34:46:24:a2:11:0f:
                    35:c4:8a:9a:59:74:d8:3d:04:ad:c0:4d:bc:a4:cd:
                    2b:06:a1:b8:68:ae:41:60:07:a9:59:bf:b8:a8:01:
                    68:42:51:ef:23:74:c7:62:86:4a:08:f4:25:2b:84:
                    48:c1:97:6c:55:b7:fa:1c:43:df:a4:1a:e1:55:32:
                    c2:2a:c1:37:d3:38:f8:2d:34:38:88:9f:78:d7:d4:
                    37:f5:3a:e2:39:f4:aa:2f:5c:d5:8b:aa:8d:76:cc:
                    f1:6c:0e:2b:62:89:37:51:c8:76:6c:6f:b5:da:94:
                    f7:e6:9e:e6:be:71:51:2a:23:53:dc:33:d3:e2:bb:
                    bc:93:0e:61:b1:0e:8b:28:f5:28:7c:5c:46:10:0b:
                    fe:50:25:50:eb:0d:17:a0:9f:03:78:90:e4:9b:63:
                    c8:22:68:77:14:90:33:1b:b3:d2:9e:e4:ee:2c:47:
                    73:87:bc:23:79:ec:6e:03:23:cd:20:59:63:e9:55:
                    4a:6f:07:f3:74:d4:29:86:93:6f:c9:85:f2:f5:71:
                    79:be:2e:a6:54:89:44:d0:c7:e1:00:e1:c8:f1:11:
                    cb:22:68:f0:c5:21:78:df:57:a9:3d:8a:65:20:bd:
                    9e:2d:49:c7:9e:ca:dc:86:8d:b1:c7:d8:14:28:bc:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1D:6C:8D:F4:23:34:CC:15:EA:EB:74:D7:01:0B:99:B1:E3:8D:3C
            X509v3 Authority Key Identifier:
                keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:6e:7c:9d:50:51:6e:7a:f8:9d:62:d7:62:e5:2d:8a:49:e6:
         8c:60:6b:57:fe:47:bf:17:29:fc:b5:1b:9a:c9:8b:cf:1c:40:
         ec:df:43:ae:15:e5:49:53:b8:13:40:c7:ec:76:de:fd:3d:b1:
         c4:81:51:39:f9:56:dd:ff:68:04:46:aa:b6:dc:c3:f9:dd:be:
         cf:55:66:cf:a4:c0:55:c4:70:a4:1d:f7:d8:eb:32:a4:7a:b3:
         0e:ca:b7:81:00:c5:f3:1e:ed:43:d7:92:e5:af:a6:30:85:06:
         c2:c5:22:8a:d1:d1:7f:13:03:c7:06:4f:3b:ac:45:9a:3c:c4:
         87:88:08:5d:37:a6:b5:a4:3c:42:47:67:bd:e5:35:25:46:49:
         1a:3c:8a:08:55:c3:a6:66:35:d5:46:6b:a4:08:cb:21:01:cf:
         79:d7:25:d8:cd:0c:71:f7:ab:81:96:b7:7b:7e:07:b7:8f:31:
         7b:94:46:b5:2a:a5:d2:2d:5f:64:93:4d:63:ed:87:61:5c:25:
         72:dd:53:1a:3b:59:17:6b:fd:ee:c8:97:3b:bf:ba:e8:e5:a8:
         d7:24:f2:19:dd:72:ac:63:20:1f:cc:43:c2:37:9f:39:0b:39:
         a1:f3:61:ad:9b:60:de:15:0a:c3:bc:c6:55:3b:09:0a:4d:7d:
         d5:0a:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----