Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File:                     g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier:          JN04Ile7bBfeJu7pdXIe+UjkfKD+rKc4FHq5X86Ours=
Subject key identifier:   AD:3E:B4:AF:79:57:AE:E2:9C:DC:70:FD:3F:09:C9:2F:8D:88:26:68
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer:       /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial:       01901CA120AF8FFF0F22957A3ECA18C7D9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number:          0526
Signing time:             Sat 15 Jun 2024 16:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:39 +0000
Files and hashes:         1: NEHQMYap5FrR6FYqHT-d4kdm-_U.roa (hash: I7aMCvc+/pPI4I46Eh+dzA6n80szj18LrT+Juvcmhqs=)
                          2: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: 3IWEYTrT9MGbCtM/Kjsy3GQBHInjAIfiqoPYuDWHB1o=)
                          3: kT_NY9s7Qw6Ffd7yzN0Jg4ttJUc.roa (hash: C2dwrKZrq6nEkTsop2ZbcZiHe17i99lFXDxWhqf5hv4=)
                          4: pY1u4MzG93-h9h-OhqQJiRyWEug.roa (hash: /UpLrAi61KehMgEKuJqTh/e1EarWGThBGRGhE4jWFW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:20:af:8f:ff:0f:22:95:7a:3e:ca:18:c7:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
        Validity
            Not Before: Jun 15 16:00:39 2024 GMT
            Not After : Jun 16 16:00:39 2024 GMT
        Subject: CN=ad3eb4af7957aee29cdc70fd3f09c92f8d882668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:a4:fe:fc:ed:65:fb:e4:ad:43:53:0e:5f:
                    48:39:e1:a2:f1:ed:7b:91:83:48:05:44:0f:86:64:
                    f0:75:e2:bf:3a:4d:3f:c3:a6:3e:8c:cc:63:3e:59:
                    d5:31:87:66:c7:42:f2:c3:6e:70:15:9f:94:b3:e5:
                    2c:06:f2:6a:15:d5:c3:f8:6b:6a:16:83:53:2f:ea:
                    f5:dd:8e:15:2e:9b:45:ce:fa:df:e3:dd:74:b2:4f:
                    65:ec:71:a4:aa:ee:56:bd:0d:9c:5a:d8:0a:bb:4a:
                    0a:9a:98:36:a1:09:5e:d0:ea:ab:c9:6d:e9:2f:63:
                    2f:d3:c6:d5:c1:cd:c3:3a:ff:a7:96:66:51:a1:38:
                    ba:ec:43:2c:79:68:b3:5f:5b:8d:9e:53:83:9d:38:
                    4c:45:d0:16:de:90:24:6e:93:52:a8:50:eb:44:d8:
                    13:f1:a4:1c:50:79:d6:d9:cd:71:43:2d:0b:c9:14:
                    19:a1:65:1c:70:1d:84:2b:fc:f2:66:ba:10:94:5d:
                    82:8a:67:4f:d7:77:de:88:1a:97:ef:e5:61:fd:6f:
                    5f:ab:2d:75:8e:24:2a:a2:34:76:1f:c5:5f:51:ba:
                    e1:67:bc:91:7a:3b:6e:57:f4:9f:1d:5b:90:f7:c3:
                    92:9b:c5:e0:48:c9:b8:44:53:95:cf:9f:34:21:20:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:B4:AF:79:57:AE:E2:9C:DC:70:FD:3F:09:C9:2F:8D:88:26:68
            X509v3 Authority Key Identifier:
                keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:2c:81:c7:2f:47:9a:b4:69:53:aa:97:f0:ef:43:15:1c:
         61:99:40:5f:c4:9b:f9:28:af:bd:2c:d3:01:38:06:14:11:5f:
         71:1c:90:8e:76:b0:95:50:a6:14:02:ed:37:88:9b:eb:55:d0:
         5e:a9:35:60:31:47:b6:bc:45:4c:7a:76:5e:e2:52:a4:eb:41:
         73:cf:95:c6:da:00:3a:b3:04:d4:54:32:90:b4:a4:86:aa:fd:
         28:25:95:0e:36:bc:8d:89:a9:b8:db:b6:29:32:2e:c9:21:ab:
         45:9c:52:3f:3f:1f:1c:e4:49:c8:3a:d5:b6:bc:f7:73:fd:91:
         c2:d8:b6:b6:af:5e:11:46:52:17:eb:f4:1b:76:d2:b0:81:49:
         ed:7d:78:ef:86:7b:f1:c1:73:8a:9b:22:80:6e:8c:18:3d:47:
         f1:7e:44:0f:50:8b:2d:b4:f5:66:d9:c4:93:0b:40:0b:8b:8c:
         cb:97:46:55:2d:25:8a:af:4d:3a:ff:ed:a7:84:9b:aa:3e:36:
         58:da:ba:29:fb:80:4a:57:e3:78:f1:3e:8d:78:2d:e4:a5:f8:
         96:ff:cd:13:93:3f:a9:fc:23:1f:b5:ed:7f:04:73:ba:9e:85:
         be:ae:2f:9d:e8:3a:22:55:9a:f8:c5:04:d3:48:6a:ac:4b:d6:
         b1:45:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----