Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File:                     9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier:          yO/tmQpXa9QD+OQvFE8f9vyQ42Ykf/TKHVCGhvmOSxg=
Subject key identifier:   CA:DE:49:D2:A2:11:1F:55:57:C4:87:00:2E:94:D2:C0:08:13:4E:E1
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       018F885B489EFA2257577C05F9F68D9D4C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number:          1185
Signing time:             Fri 17 May 2024 21:00:34 +0000
Manifest this update:     Fri 17 May 2024 21:00:34 +0000
Manifest next update:     Sat 18 May 2024 21:00:34 +0000
Files and hashes:         1: 3-gUUhs043PndYYhjrlEp2Ow18c.roa (hash: a0SBAr/YmywFQRVwimVni4Qs3Y9UXXQE7R16hJqWN6k=)
                          2: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: 5coqj2e09vaEWvJPCVGxTYqWRmgcUnEIpwLvnyUOTA4=)
                          3: ORHwXtHEUQVnycTjYyyfc1Cr2nI.roa (hash: jnu/sgcOnyOGtZg+Ww45radV0Dtf8Zy8q8rUuzlmnfo=)
                          4: SnQyc28uJ6gsDY-MTz6cRI4qo2o.roa (hash: onG9pXBaGelyIrfUtnfCDXFcnOFxvs9n2wreFS9OlHc=)
                          5: cQrqr0C1Z-YpiH72k29CLlGMtz8.roa (hash: 4kel2/bKPsPvmI8Z5FZu8vl9bOIRd4CxPi9yV0WRojo=)
                          6: dSva_x_94t83ukqVVkBgQeOGMIM.roa (hash: 6W4MEELcaPllSideN4eiFRuVV6jEqpFRNnHWibzsyog=)
                          7: pFIBpkBbl6SdbnzieNcHwh4TB4c.roa (hash: KUZcxXn5O8nYgS0DSgdg7W7XdJIbPcE5aAmCDDsk5PY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:48:9e:fa:22:57:57:7c:05:f9:f6:8d:9d:4c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: May 17 21:00:34 2024 GMT
            Not After : May 18 21:00:34 2024 GMT
        Subject: CN=cade49d2a2111f5557c487002e94d2c008134ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:78:83:76:02:d0:fa:04:43:36:12:d5:5b:
                    7a:d4:23:bb:bf:65:94:cf:8c:c8:62:ab:dd:b0:c5:
                    3f:a1:f8:f5:63:2e:bb:04:1f:29:af:6e:81:0e:41:
                    84:e8:2e:2e:4d:12:16:01:d3:1b:b7:97:34:a8:33:
                    1e:58:64:72:fe:cf:91:cf:e2:6a:42:52:62:0c:9b:
                    dc:79:60:9e:2d:11:cd:08:a5:fe:ca:4c:26:c0:4c:
                    e0:f7:94:a6:ed:aa:d8:25:6b:cc:90:54:1e:29:1e:
                    78:18:f4:d6:ea:6c:cf:64:66:04:64:84:db:99:31:
                    33:a3:7a:35:d7:94:a9:7a:bc:c2:ce:2f:e9:cf:06:
                    3d:88:6f:9e:4b:5f:8a:ab:e6:71:43:18:d4:5e:55:
                    91:a7:21:71:80:d7:96:91:83:7a:53:76:0a:70:b8:
                    3b:d4:cf:65:30:3c:aa:8f:6b:bc:82:71:bb:6e:14:
                    aa:fa:20:7f:11:d5:f0:0b:21:20:f6:c1:a6:a9:d8:
                    73:96:4b:23:6f:1d:ec:b1:6e:d9:2b:2d:19:3b:39:
                    bf:46:80:fe:41:a1:32:87:02:5f:9c:e3:ac:3f:c0:
                    3b:7f:a8:37:c1:d7:c2:fa:c8:35:80:e2:27:9a:45:
                    26:43:57:30:1d:26:68:be:ff:ad:c4:e2:4c:a9:18:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:49:D2:A2:11:1F:55:57:C4:87:00:2E:94:D2:C0:08:13:4E:E1
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:55:69:e3:87:5e:8a:e8:3c:c5:e3:7b:8a:97:d7:d8:2a:a4:
         75:7e:af:f7:a3:99:b2:5e:d1:53:15:d8:32:9e:83:ec:00:68:
         75:72:08:bf:27:05:ec:e0:e1:7e:3e:1b:70:61:25:ee:cb:b2:
         f4:39:b1:18:41:db:d1:cc:94:d7:8b:df:08:6a:ff:87:dc:7b:
         e3:7e:27:9b:40:5c:d8:ae:13:5e:6a:b3:f4:d2:f3:bf:16:6d:
         73:91:09:37:67:49:13:e1:87:66:b9:6c:c2:cc:e8:aa:cd:08:
         3b:ec:53:33:57:f1:08:fc:7c:ec:10:c1:5a:d0:b5:cc:8f:66:
         7f:e0:2b:8d:93:9b:30:5c:e3:b4:e5:32:fd:75:fd:53:c2:fd:
         9a:4a:24:80:31:3d:ef:cf:27:99:ef:c6:43:36:e9:21:25:f5:
         b3:39:e4:4b:35:5c:5c:ea:be:a5:0e:e0:21:e8:1a:ff:45:b1:
         5a:57:c3:f9:4b:66:e6:e6:c7:df:54:4a:66:ec:d5:5b:26:6f:
         85:61:a3:a6:93:5b:a2:3f:af:e0:a7:be:5a:15:b3:ac:20:80:
         9a:fe:c6:f8:84:19:2f:c8:4b:f4:05:8a:0a:c8:38:8e:62:75:
         81:1d:e0:dd:25:3c:ce:1e:cc:6e:93:48:d6:3f:f2:9a:0f:9b:
         8c:ab:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----