Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File:                     AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier:          DOkZ2fTwiY/S8axkKhmzHD5YXt8RXYYXUWM3LZDVzAM=
Subject key identifier:   D9:24:C7:40:BD:6F:07:2C:D7:23:4C:8B:D7:2D:8F:76:A1:CB:BD:87
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer:       /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial:       018FB7920D7BECF4198E0B0D506E1E262ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number:          1191
Signing time:             Mon 27 May 2024 01:02:33 +0000
Manifest this update:     Mon 27 May 2024 01:02:33 +0000
Manifest next update:     Tue 28 May 2024 01:02:33 +0000
Files and hashes:         1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: H/lbi7/YWWgutpHF5xgHnBAKEayaU3kOTwwYbaAM94E=)
                          2: SLpacYxLDR6HZqU33sCM_nchnFw.roa (hash: zbLfuZ4mdi6onwzhwgO99oUjoOjUtNP72P4Bx7/TsSE=)
                          3: z7vwqQUPJWbko3zUKZUHXjrcSm0.roa (hash: 0w1OOInCXIvuSZx0x099MMF8hkKlGVaNhUM421/JaLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b7:92:0d:7b:ec:f4:19:8e:0b:0d:50:6e:1e:26:2a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
        Validity
            Not Before: May 27 01:02:33 2024 GMT
            Not After : May 28 01:02:33 2024 GMT
        Subject: CN=d924c740bd6f072cd7234c8bd72d8f76a1cbbd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:d4:45:1e:5a:76:55:ce:f7:13:12:2a:4e:
                    a2:80:40:6b:91:53:4a:63:3d:b3:9e:07:24:78:03:
                    b5:a8:05:64:f1:a9:6e:3c:6f:36:4a:94:e8:4c:f1:
                    33:95:58:d6:da:18:f7:da:8a:9b:70:bb:ac:4e:bd:
                    e3:1a:99:82:fe:24:d1:e6:e4:1e:2e:94:bb:0d:06:
                    36:1a:6b:78:6e:91:2b:65:2d:11:cf:84:0b:a8:5b:
                    19:95:13:97:e0:82:f8:32:85:99:62:5a:4c:93:38:
                    0a:00:02:f6:c9:b8:68:07:c9:e1:a8:e8:f3:31:a2:
                    08:99:6f:ee:64:3b:17:84:ec:f7:6f:cb:25:ad:07:
                    e9:25:56:4c:d6:b9:db:68:a5:ca:ef:e6:ac:bf:5d:
                    44:7e:f6:49:0d:a8:55:5b:14:ea:51:b9:21:a2:15:
                    c3:e2:30:c9:c7:8f:83:cd:73:fb:14:34:b1:d9:f1:
                    36:50:cb:24:97:82:58:22:53:9b:51:77:73:fc:00:
                    78:96:03:73:75:5e:d6:06:fa:60:d6:07:f9:f0:c5:
                    c8:b7:e4:81:91:7e:34:94:4b:de:ef:61:1e:ca:cd:
                    89:79:98:16:52:27:2a:19:53:e4:b5:4d:8f:8d:74:
                    0b:18:4f:62:6b:3f:3a:11:21:5b:29:39:7a:95:b7:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:24:C7:40:BD:6F:07:2C:D7:23:4C:8B:D7:2D:8F:76:A1:CB:BD:87
            X509v3 Authority Key Identifier:
                keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:a0:d7:ed:48:3b:63:a1:c1:b9:1c:a6:53:f4:ab:7e:98:
         a8:44:8f:cc:82:21:ec:7a:f2:5a:68:e9:24:75:e8:e8:78:64:
         9e:c1:e6:e7:32:9a:6c:5f:f6:19:13:17:6d:3f:c2:32:d4:88:
         7b:d5:00:39:55:94:ca:bd:3f:9b:3e:5d:d9:64:b4:66:85:57:
         76:ae:3d:b6:c2:2c:75:71:33:96:5f:a6:41:59:ac:17:8e:47:
         8b:10:71:c3:dc:b9:c3:11:73:0b:51:63:a3:e6:24:81:4d:8e:
         58:92:77:64:66:3d:78:46:01:53:30:e4:ab:69:23:68:3e:84:
         2f:0f:94:b5:b0:45:c1:99:d7:94:67:10:39:ac:d9:cf:4c:63:
         ac:25:e9:ca:bb:42:7f:01:be:bf:76:f9:65:a0:9b:b7:c1:55:
         90:df:8a:d3:c1:da:33:92:ad:12:e6:aa:4e:9f:c1:0c:86:8f:
         42:52:1d:36:dc:46:2a:27:67:0e:b0:b5:2f:95:66:3b:75:d3:
         6d:46:b6:f7:b2:64:51:43:17:2d:db:0e:9e:6d:cf:4a:53:f1:
         d6:ca:35:9d:bc:24:fb:a1:2f:d2:a0:aa:6b:67:b3:2a:10:e3:
         9e:41:16:5b:35:51:8f:ba:fb:73:ab:60:2a:28:ff:f7:ea:e3:
         05:bc:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----