Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          9+kJg4vqkWEDDdMd7zWMXLXWB3WnUeoLGQOpdCbl0Wk=
Subject key identifier:   18:AE:B6:6E:08:9A:9C:61:E3:68:C3:20:8B:1E:68:F5:C7:B2:98:D9
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       018F8447C507B0367D856FCE7979FC15C551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 02:00:46 +0000
Manifest this update:     Fri 17 May 2024 02:00:46 +0000
Manifest next update:     Sat 18 May 2024 02:00:46 +0000
Files and hashes:         1: Wn9BzW1rRoxcggvpXQjthajhz8U.roa (hash: +RDJWWjKD3e+EnVyN1/7s2gSA8MmupbCWJ8I8qR+VFg=)
                          2: XiDpk0CbAmTYXQSxE8ULZhQLORs.roa (hash: 02Z00Cyfu0jFMrfS9y2om7ORFMWSQGLOwVA9B9eFBBM=)
                          3: dz6319_oh7a8EOnulUasXBM6IKc.roa (hash: 6YjjtasBk/Hsdf5RhQk2vR7ANyqy5i5x6liE9ePnA10=)
                          4: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: PXA0xi63yJoxLmNrhroNHz8G88n0RVCn3BSqZ0GfRT4=)
                          5: hZERIeEx05bz1vj-XMRwC3m5lQ4.roa (hash: qQCRMSP5o75B6cqNJmTIg+rnVMhrxKdKDk3UGMZ2RnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:47:c5:07:b0:36:7d:85:6f:ce:79:79:fc:15:c5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: May 17 02:00:46 2024 GMT
            Not After : May 18 02:00:46 2024 GMT
        Subject: CN=18aeb66e089a9c61e368c3208b1e68f5c7b298d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:f2:68:a4:fd:c1:0a:34:a8:bb:7e:1a:dc:
                    75:17:58:fd:38:0b:40:e9:3b:85:49:fa:88:d2:38:
                    20:c1:1d:84:e8:d3:95:f0:61:2b:40:d8:39:65:c8:
                    0b:64:6a:63:97:83:90:80:65:63:25:d0:24:7d:ce:
                    97:6e:c7:63:d4:d9:c3:2b:0d:9f:eb:20:7d:6d:54:
                    2c:c4:6d:36:9a:fe:d9:55:f3:2b:7c:e9:11:e6:d1:
                    88:de:cc:e2:73:1e:ae:9e:0a:35:cb:76:7d:3e:c1:
                    24:bb:2f:40:71:6d:4c:c5:89:31:2a:65:83:c9:0b:
                    94:59:ee:6d:b1:34:f2:d3:cf:33:64:e2:90:a5:ff:
                    ce:a9:c7:da:a1:a8:8e:3e:4f:4c:2b:46:dc:2b:ad:
                    d3:a3:49:7b:ea:18:9d:0f:00:3c:16:33:e8:02:00:
                    10:62:e7:c9:7b:63:d9:06:fc:d7:2f:27:5e:70:b1:
                    0f:e8:af:3c:e0:cf:7a:cc:21:6b:42:97:b6:5f:76:
                    7e:88:79:16:50:13:1b:69:9e:79:c9:02:78:94:da:
                    5d:63:2e:c6:d3:de:72:de:3e:ec:a7:fe:53:58:dd:
                    0d:81:ed:56:0a:5d:08:ca:2a:49:ee:5f:06:89:12:
                    7a:14:50:0a:54:7d:8b:55:91:4b:36:96:25:74:79:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:B6:6E:08:9A:9C:61:E3:68:C3:20:8B:1E:68:F5:C7:B2:98:D9
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:46:31:7e:d2:9c:c5:e2:14:75:c7:08:fd:b9:0e:1b:bb:
         6a:21:f7:2f:bf:07:fc:13:3c:66:1a:bd:e2:4f:58:1b:b6:52:
         30:8f:8d:4f:1a:f5:4d:b9:66:19:b8:28:68:91:bd:81:fa:9b:
         97:ff:7a:68:54:a2:12:6f:10:1e:10:73:b0:16:e4:aa:96:a9:
         7f:3c:fc:54:5c:66:ce:c1:e6:b3:33:ac:24:04:78:e6:7c:f7:
         64:bd:42:bd:64:92:92:53:4f:14:2e:ae:e8:b8:93:13:24:86:
         ee:e0:98:fe:ea:48:d7:d2:3a:8c:ef:0a:40:a3:5b:01:0c:a0:
         d7:d7:6c:a7:f8:ea:3e:8e:d7:f4:37:ba:cb:8e:bd:20:7d:d6:
         3d:7f:3c:a0:46:cc:b3:17:7a:5d:57:90:d8:e3:9b:38:75:7f:
         30:d0:76:68:95:a4:2c:64:11:9d:71:8b:33:16:f3:6a:0d:49:
         23:34:6f:b7:91:02:bd:4e:88:b1:ae:19:a0:18:2e:9c:a5:67:
         d2:68:53:a7:1f:f0:a1:8b:4c:d2:34:51:b6:4d:8c:97:ca:ef:
         c4:c7:2b:4e:b8:26:4c:2f:5a:3f:4d:e9:e9:1c:81:52:59:9f:
         57:e2:70:11:3e:f5:8c:4f:d4:e2:89:75:25:f3:fb:69:00:12:
         2b:49:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----