Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File:                     1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier:          0hX4yKvC+a6QEca/9dIkz/jSkGful4CO7apcEZjFzX8=
Subject key identifier:   4C:A9:5B:5A:86:F9:D3:D3:45:3B:EB:32:F4:6D:56:DB:C3:42:54:68
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer:       /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial:       019033CDC2A849C474EEC0C5523D40B75C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 04:00:40 +0000
Manifest this update:     Thu 20 Jun 2024 04:00:40 +0000
Manifest next update:     Fri 21 Jun 2024 04:00:40 +0000
Files and hashes:         1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: bFb2KVYlw618P+ACkvZbv5wzbzTrcL3y6nTGb5KKWEI=)
                          2: EWF8zw4zN5FJmet4ofrfKCC2jA8.roa (hash: 1+1bvCf2RXpZrjs99OIGIa6uYnBpSxu5xvbS/gXrMko=)
                          3: NavUETNxuWvL-4kmkPqNflRAVNk.roa (hash: KjBbtnjux2MzXV5ZazIHdUa0Sgwq7kRfpgFCdSricgk=)
                          4: QOg2ZdhMD1vKq4-QzbF77g-idt0.roa (hash: mt8U1G6pjWk6NudykS0RMWQ/5DEoYn7xntWq1VRVoOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:cd:c2:a8:49:c4:74:ee:c0:c5:52:3d:40:b7:5c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
        Validity
            Not Before: Jun 20 04:00:40 2024 GMT
            Not After : Jun 21 04:00:40 2024 GMT
        Subject: CN=4ca95b5a86f9d3d3453beb32f46d56dbc3425468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:70:34:5d:4f:9d:bb:c2:3a:a8:8d:05:df:
                    d2:b6:2d:f2:a6:db:69:84:65:dd:52:ca:3a:06:48:
                    27:b4:34:b6:11:30:41:4f:95:2d:39:84:e2:10:a2:
                    b1:0d:92:61:ae:84:e8:21:cc:98:5b:81:08:43:b5:
                    ee:c0:20:6e:35:f0:30:89:a9:f4:d8:c6:60:95:41:
                    55:bb:65:be:ad:00:23:71:f4:e1:38:7e:2e:70:e4:
                    23:f8:f7:7a:9f:14:f0:7b:a3:6e:8a:1a:fa:8f:31:
                    2d:4d:c9:76:04:79:0f:11:37:07:c3:ea:e4:03:c8:
                    f9:3e:86:33:bf:0b:1e:0b:9b:ea:70:60:28:a9:91:
                    0a:91:2e:37:a7:8b:d5:7d:3c:34:d9:c8:bf:b7:81:
                    a9:b9:0a:43:77:06:ff:26:fb:81:fa:71:75:db:5e:
                    3c:c7:1b:95:ea:a7:c4:26:0b:d5:c2:56:d8:e6:3d:
                    c1:0f:96:67:7f:09:aa:ab:3e:c6:00:16:7b:b4:13:
                    0f:3b:99:9f:db:f5:95:11:e3:06:e7:7c:b8:f2:54:
                    7c:11:0c:af:80:bb:d1:6b:49:0b:32:ec:e2:68:23:
                    7e:a9:30:2a:6a:e6:08:16:ef:9b:e1:bf:34:e4:01:
                    a3:ff:73:ff:72:2c:a1:fc:40:b0:5a:a6:61:c0:c4:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:5B:5A:86:F9:D3:D3:45:3B:EB:32:F4:6D:56:DB:C3:42:54:68
            X509v3 Authority Key Identifier:
                keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:27:40:25:c9:d7:a4:6f:dd:50:ba:27:2c:a0:48:5b:16:
         64:82:6e:f6:01:1b:15:ef:69:8e:f7:11:24:fe:ec:7d:ed:8c:
         7b:cc:0e:2a:d7:c2:0e:1e:c5:94:cd:04:91:5f:af:6f:67:c8:
         f5:d1:bb:aa:cc:0c:f4:5b:91:c9:ec:9a:6f:a5:45:bd:a8:d5:
         0d:fb:df:d4:7e:f8:97:df:71:ac:e4:1a:89:d8:d4:4a:e5:24:
         51:13:3f:b8:f3:a7:f5:28:1f:fd:09:dd:d7:ca:e5:35:d8:28:
         fb:98:2e:9a:e4:8d:c8:9d:e0:df:21:4e:d2:69:8a:c5:2a:f0:
         7f:d6:75:ab:ec:b0:fd:d3:d4:89:fb:08:fc:89:07:55:43:27:
         5f:06:fe:cc:dd:ba:ea:e0:e6:c5:a1:2c:bd:d3:97:59:80:66:
         d3:ab:18:77:2a:8e:38:11:e2:27:e2:30:8c:93:58:cc:91:65:
         e2:4b:b5:eb:1f:75:8e:e3:e7:e6:8d:10:c6:59:72:3b:d3:28:
         f4:1c:bd:3b:aa:14:41:2a:c9:56:4c:e6:75:88:df:72:82:12:
         f0:f0:9a:a3:46:53:86:5e:69:31:00:f9:fd:f9:d5:93:8f:92:
         0a:f9:71:81:a1:73:84:46:fd:f2:ff:76:f6:92:9c:f0:28:0c:
         a8:da:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----