Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File:                     lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier:          HispikU370TP7GkrqHW0XqpQgFoIWahQhEgj627PYME=
Subject key identifier:   4C:A1:F9:14:7B:05:25:99:EC:39:52:B0:6D:7C:45:72:75:79:EA:3F
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       01901DED1BF930553E8A6EF19E4DEE07CE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number:          1026
Signing time:             Sat 15 Jun 2024 22:03:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:16 +0000
Files and hashes:         1: 18GFSfVDvqQuZheKb96BDaq3jP4.roa (hash: xENSuwYUl2OB7NBM0STzwtRhv0QHOBt0poeVLnBlCnc=)
                          2: KKkvJ1iVL8xE2-f7FDajzWDu9OQ.roa (hash: dyVx9gWb5taOJQDkinh9/eKM53Z31nY8oYv3kZmSJVs=)
                          3: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: Y7rgb66GGub5pb8G34kN4/MtuqkzXKCjQfV5iMk4Zsw=)
                          4: lgAnQt3KAbpdlD8J1OO4FdFMwOk.roa (hash: 7pk69z4q6deJEpcl7lC4V+u5M7x52KL5CSMwMrKW1yE=)
                          5: yLO3bqawGbMdqWu9QS44380lAFI.roa (hash: 7Ug0vJYcHts6Y+bv8Z7OpxQNFuagow5lxKmt2gZy3eA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:1b:f9:30:55:3e:8a:6e:f1:9e:4d:ee:07:ce:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Jun 15 22:03:16 2024 GMT
            Not After : Jun 16 22:03:16 2024 GMT
        Subject: CN=4ca1f9147b052599ec3952b06d7c45727579ea3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:24:4b:4c:84:79:59:c3:56:2e:fa:b7:8d:9d:
                    c4:a1:78:77:66:77:6a:34:b7:c7:95:b3:21:16:f9:
                    ca:48:9a:37:84:93:c4:5e:40:49:d9:84:17:73:2f:
                    d8:8c:44:74:92:d2:8a:a1:5f:24:96:47:0a:c5:05:
                    a0:2c:9c:7a:63:09:68:93:0f:62:87:91:b9:69:0f:
                    55:fc:cf:08:be:4e:24:93:e0:ed:a2:ee:11:52:43:
                    fc:b6:0b:67:f1:fc:66:02:4e:d2:ac:b7:8a:26:3a:
                    ae:83:66:73:b6:e4:25:d9:e1:20:50:f2:d9:75:9e:
                    46:a8:7a:5d:39:04:5f:d4:bc:d8:81:fc:a1:0e:22:
                    09:b8:4f:66:56:2b:4c:63:d2:e2:78:2c:7b:a3:70:
                    b3:50:a6:38:74:2d:22:69:2f:c9:04:6d:e6:33:5d:
                    66:4b:f3:80:c8:63:0a:d9:b8:6d:9c:50:fe:e9:a1:
                    a3:ed:0f:ec:54:c0:79:6b:9b:32:ed:f8:83:44:32:
                    76:59:84:3d:f7:fc:77:ca:84:d8:db:28:ee:41:72:
                    22:10:7b:81:04:cc:81:db:fc:1c:38:5a:f6:7b:c6:
                    7f:31:cc:82:03:51:85:00:47:8e:61:92:12:92:df:
                    97:b0:c9:f2:4c:65:d9:11:96:ab:aa:d1:5b:17:b6:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:F9:14:7B:05:25:99:EC:39:52:B0:6D:7C:45:72:75:79:EA:3F
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:27:a6:18:47:f8:de:fe:8e:e6:b6:a6:ae:96:00:93:3c:96:
         64:d3:e0:91:33:b1:e3:68:52:bc:f8:79:04:c7:b8:b3:d8:37:
         fb:f5:68:6c:51:68:c0:76:31:41:3d:e0:6c:d5:0f:97:ae:73:
         15:95:fe:63:19:0d:71:5d:b9:c9:b9:7c:92:af:1b:6a:23:e3:
         6b:e2:56:fb:c7:22:dd:c9:13:bf:65:eb:f5:5b:5a:ce:26:35:
         19:2f:5e:5c:bf:ef:6e:67:23:e2:79:1b:63:f4:8c:89:ec:06:
         42:bf:1e:85:2e:64:5f:77:43:22:65:18:3f:f2:4a:2f:d1:b3:
         75:25:08:a6:74:df:80:6a:8c:c8:9d:47:78:ff:cc:c0:ac:04:
         25:df:a5:0b:dd:04:8d:e8:60:ec:c9:87:c0:c8:9f:8d:ae:01:
         81:d3:ee:ad:76:fa:1a:1e:95:a0:e8:63:12:5b:70:42:27:39:
         01:67:ef:61:aa:26:67:04:cf:2d:be:ab:40:f2:76:12:04:da:
         b0:ad:a5:9e:ca:7c:b4:9f:d9:2f:47:bd:ab:f1:c4:4c:98:5c:
         da:38:dc:b2:59:56:d7:94:c4:9c:a6:13:c3:1e:13:8c:2f:c4:
         39:56:66:91:dd:93:c9:2d:61:76:7f:d7:c9:b4:fe:83:4f:62:
         17:29:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----