Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File:                     XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier:          yKtaHH0qYhep1STOS6cKJ6Fj2HDh9DnpDotNYmd17dA=
Subject key identifier:   03:C0:A1:E2:0C:74:1D:68:63:08:0A:C7:E0:F0:C1:58:37:FC:63:D8
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer:       /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial:       018FB6B539491FA6F281579956E94E66D12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number:          09EE
Signing time:             Sun 26 May 2024 21:01:20 +0000
Manifest this update:     Sun 26 May 2024 21:01:20 +0000
Manifest next update:     Mon 27 May 2024 21:01:20 +0000
Files and hashes:         1: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: GKt3t3p3UUvyl5HWaj7TgWxWDQkIxDMeQcgdmlscXpk=)
                          2: _Y8CXxWQXCx60kx34wzvwcPiND4.roa (hash: K1df3+nprg2E+DL4nyKtfbz1t/nI4savr4ymfB12WOE=)
                          3: oyyimdUDIRHklKAxJbbZcxc7pAU.roa (hash: 3I5ZqXgKXKubGhqzITL1QGecRubtmyYRohfJGKub0RM=)
                          4: rIaJuOye-KwMQizwOMJmgYsq7U4.roa (hash: swzf2w7YkekDJOCAUcDooLBgfpMJrExvcuugV5bkr2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:b5:39:49:1f:a6:f2:81:57:99:56:e9:4e:66:d1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
        Validity
            Not Before: May 26 21:01:20 2024 GMT
            Not After : May 27 21:01:20 2024 GMT
        Subject: CN=03c0a1e20c741d6863080ac7e0f0c15837fc63d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:cb:0e:ce:73:da:81:72:3a:85:ca:3b:4b:
                    a7:52:4b:b9:ba:e9:be:91:62:a7:ba:d4:28:98:83:
                    6a:60:8f:5e:64:b2:ec:04:4e:83:d1:0d:46:88:92:
                    bd:1d:e4:15:e9:f1:a6:6a:d5:22:f7:35:7d:b7:3d:
                    97:73:93:5b:bc:d6:a1:23:99:2c:60:35:22:65:a7:
                    6f:13:92:61:44:8f:e8:99:3a:49:4c:4a:62:6d:8a:
                    a5:a1:31:b0:c8:97:99:32:f4:43:74:d5:1d:ce:6d:
                    0f:d0:4b:9a:26:bf:1f:4c:69:d9:ac:4f:4b:06:2f:
                    b2:24:72:fe:c6:7e:51:e0:61:a3:ef:07:1f:41:8a:
                    90:0d:33:25:e6:84:b7:b6:d8:24:00:59:31:25:85:
                    6a:c3:73:e5:fd:f9:53:ea:9a:d8:bd:e5:03:60:84:
                    e1:8e:66:87:83:44:f4:e4:49:43:22:82:21:8b:da:
                    e3:45:20:39:8c:3f:d4:b8:c7:6f:bd:c4:15:8e:a3:
                    5a:dd:d8:6b:e7:c4:34:b9:5d:4c:6b:13:a4:67:8b:
                    dc:aa:8b:c1:50:99:76:b0:df:29:65:00:ea:d3:8a:
                    d6:56:6b:91:0d:d8:41:dc:40:10:0d:cf:f1:47:fe:
                    b8:e0:e0:4d:66:7a:0f:4c:d1:1a:72:13:05:39:69:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:A1:E2:0C:74:1D:68:63:08:0A:C7:E0:F0:C1:58:37:FC:63:D8
            X509v3 Authority Key Identifier:
                keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:2c:1c:f1:bc:79:47:2b:ef:9e:6f:35:51:4b:3d:76:28:
         c2:1d:06:05:63:18:39:14:1f:f2:eb:6d:8d:72:ca:19:ba:03:
         2a:a7:4a:4a:67:82:9e:2c:cb:17:ae:ee:63:08:82:2a:6c:c4:
         6a:bf:51:56:81:56:05:11:3f:3c:a2:e8:43:b0:d2:27:3e:ed:
         70:3c:6f:4f:61:f9:c5:74:f9:b6:27:da:f8:c8:03:27:c1:63:
         48:db:af:64:86:ed:1d:21:65:1a:df:5e:96:46:32:0a:c5:5c:
         be:03:55:8e:bd:ba:f0:49:37:9d:f2:b0:25:d9:45:fd:23:64:
         60:59:c1:9f:2a:7a:c3:4f:4f:5f:e1:f1:7e:c7:29:26:cb:a3:
         f0:ed:21:0d:12:ba:46:ce:73:e4:1b:21:7d:60:d2:41:cc:d4:
         cd:ae:ae:1c:e6:c0:89:5a:6f:4b:d4:20:3c:74:9a:e2:3d:76:
         2a:89:f7:8a:68:f8:74:9d:a3:a9:c9:dd:95:5d:4f:e0:54:ba:
         cd:77:24:ae:93:27:ed:b6:3a:f5:29:a0:d9:7e:f9:92:45:85:
         62:1c:6a:a3:38:ab:ba:f7:19:be:e2:99:af:89:2d:a0:ea:67:
         ce:6f:41:82:0f:e2:9a:da:09:32:9f:dc:f6:04:f4:cb:9a:d6:
         55:29:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----