Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File:                     5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier:          5anoUurFugQf5B0NqhEsru8UMMigY7AANlIIVApNLdg=
Subject key identifier:   73:2A:71:3D:A8:40:5F:B3:26:11:4A:D5:DD:49:5E:69:99:EB:A3:4B
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer:       /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial:       0193568B148930CC70A5E004CFEB8AA2DF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:02:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:55 +0000
Files and hashes:         1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: 2hMw29zllU8lRjHgK9RIunSNy4uE7UivM7p/fs9h19Q=)
                          2: C5-P9s8jIdVihKqMBbMkDDAMSZE.roa (hash: Ae1F7wCFyE846aDiZty8QY1uHOuEm6MsWveGkN3W+sg=)
                          3: KuVaD5b6TwFNAgxCjYNE-_8uAOw.roa (hash: vgRtNq+eiEAorToMcucP+Zw4x4yJ7B+sfs6iS4tRRlw=)
                          4: vvIf2rS14u3krjjWjlzkRR8MHKo.roa (hash: YvDjt09diDJ8RcEhkNcl/baCg2kusdUTnxTpd1MZOP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:14:89:30:cc:70:a5:e0:04:cf:eb:8a:a2:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
        Validity
            Not Before: Nov 23 01:02:55 2024 GMT
            Not After : Nov 24 01:02:55 2024 GMT
        Subject: CN=732a713da8405fb326114ad5dd495e6999eba34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:1b:39:58:74:4f:57:98:f5:f4:19:4f:a9:
                    53:16:56:6a:1e:0b:c7:67:3a:f6:cf:a9:6a:2c:04:
                    8b:ec:6e:c6:72:66:ee:79:11:29:07:f2:7d:04:dc:
                    1a:6e:cc:f5:3d:07:94:08:8f:d8:fa:be:e9:cc:f5:
                    2f:9e:85:68:d6:34:8b:b1:ab:ee:0f:f1:00:e7:ec:
                    19:4f:ea:36:4e:06:e9:10:b0:22:bd:7c:f0:3d:0c:
                    af:30:82:d0:a6:82:42:5b:08:67:64:d7:ce:43:d5:
                    ff:d8:f6:c8:0e:00:e7:78:e8:f2:e3:1a:7e:41:0e:
                    79:e0:d9:f5:b0:18:c3:d7:ab:49:97:ea:25:51:c5:
                    f5:45:e6:f0:5d:60:c1:1c:ba:19:4a:fa:ff:6a:ff:
                    88:38:46:05:f1:37:8f:f7:0a:bd:e5:8e:3c:e8:8a:
                    c6:95:59:5e:7d:09:b2:7a:00:0f:3d:5d:3e:5b:45:
                    d4:4d:52:19:71:ff:4c:f0:d1:28:bd:93:24:c4:c6:
                    9e:88:55:3c:b2:ea:df:b4:ec:08:6b:a8:5d:67:3f:
                    fe:7e:b6:83:66:a5:1f:f5:3f:e0:4a:06:2d:61:a8:
                    1d:ba:32:2a:93:59:67:33:44:4f:52:6d:67:d5:1d:
                    4d:86:d0:b9:44:5f:dd:94:05:f5:38:e1:7f:74:65:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:71:3D:A8:40:5F:B3:26:11:4A:D5:DD:49:5E:69:99:EB:A3:4B
            X509v3 Authority Key Identifier:
                keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d8:f9:55:8a:d7:4e:56:fb:f3:6f:b9:94:41:ed:19:44:2e:
         30:0e:03:67:2c:e0:c9:71:89:04:76:a7:bd:09:1b:60:08:72:
         3c:4b:a8:ab:be:38:f6:8c:4b:0c:e1:33:96:e0:7d:9c:b9:9d:
         cd:33:e2:7f:37:3c:ff:9f:19:a6:a4:ac:57:e7:05:d5:f7:04:
         79:f0:6d:60:4c:b9:f5:2d:a8:b9:a9:0c:e3:4d:a6:f8:c6:14:
         df:ca:eb:ce:98:07:d6:1c:aa:7c:55:66:4c:38:54:78:e4:2e:
         03:82:bb:29:e8:6c:51:ce:2b:3e:9c:c4:9d:d9:ea:86:f1:31:
         28:88:9c:b9:e8:62:57:d3:30:49:f3:30:04:3f:32:d4:02:4b:
         9d:ce:10:06:b0:8a:72:3e:5f:5d:1f:7c:22:d4:fa:46:d9:30:
         2e:67:18:a0:ad:32:a1:70:8c:2d:f3:0c:1c:38:bf:c1:6c:87:
         d9:42:29:07:ad:90:95:88:4f:22:81:f4:96:97:7e:a7:4e:4c:
         db:a4:8c:11:dc:d9:32:03:0d:d5:d2:37:c2:e8:94:fd:5d:c7:
         82:5d:5a:89:09:cb:9c:d4:93:0a:cb:a0:43:6b:4b:66:65:e4:
         02:33:01:5e:1c:72:cd:bc:ee:26:ea:06:5f:11:d0:bc:85:60:
         1d:71:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----