Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File:                     fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier:          LkS0s6X+hfdQVbv3uqR0wF47y+72SExU6WXi9SQv+Sk=
Subject key identifier:   DB:79:64:11:9A:25:FC:42:73:8C:EF:49:45:C5:43:19:2E:F7:88:3A
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer:       /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial:       018F893710D1E498A19537FC29C23A147F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number:          0599
Signing time:             Sat 18 May 2024 01:00:38 +0000
Manifest this update:     Sat 18 May 2024 01:00:38 +0000
Manifest next update:     Sun 19 May 2024 01:00:38 +0000
Files and hashes:         1: 8uxKFQLV3HV7vEx1lvVuKvBpyf4.roa (hash: oZJmpkuuIunIB8+2Ss2UVVZCnn33Xx3obI2MsnwpRQU=)
                          2: S3o-bkK1F9rvq2-xPTn1Gd5eQ3Q.roa (hash: wev6Z+HBEmjPjPP6rlwv3ces9MjrBONw7VISCE+w+3k=)
                          3: eg9DvnW0ac_YOHepddU_YfDKsR4.roa (hash: B1U0chK1lOVCivTDXCQ/WadPEcbia0qHcJVWVvw2ztY=)
                          4: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: Gs73vJ4/sUHhi48zbm2va7PAHTd8B7dwnmsRsbzv/7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:10:d1:e4:98:a1:95:37:fc:29:c2:3a:14:7f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
        Validity
            Not Before: May 18 01:00:38 2024 GMT
            Not After : May 19 01:00:38 2024 GMT
        Subject: CN=db7964119a25fc42738cef4945c543192ef7883a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:bc:57:6e:b9:bf:59:81:4a:2b:31:30:c8:
                    ec:b0:f0:34:c8:ba:98:91:85:ef:b3:0f:d2:8e:42:
                    51:f0:23:19:00:f3:72:bd:b9:a8:ed:f3:bb:c0:00:
                    97:f5:33:ee:46:06:eb:7e:f4:3b:eb:d5:33:4a:a1:
                    69:77:48:89:f3:74:c9:12:08:73:87:31:15:49:67:
                    8c:92:f2:27:42:04:ef:46:80:5f:bd:5f:ee:bc:84:
                    b5:98:15:23:40:34:f1:54:f1:c5:d0:8b:77:f7:42:
                    4b:e3:6c:eb:7f:05:51:c8:40:1b:58:07:83:7c:98:
                    2e:51:ee:fd:a4:b8:82:fc:93:0c:85:93:47:94:2c:
                    ec:61:81:6a:6c:61:84:f0:b0:cc:75:4a:6d:10:01:
                    02:60:81:9f:00:e2:ba:35:27:9d:44:27:b3:79:a8:
                    ef:f5:15:65:45:01:9a:1a:7d:9c:c9:8b:fc:7c:1d:
                    c3:d1:76:87:82:f0:ab:3e:ea:ef:27:d0:7c:c4:22:
                    42:c3:cc:f0:dc:52:c9:e2:a3:57:82:25:91:5a:b1:
                    12:56:ab:af:11:d5:b1:ad:5d:6f:3f:07:58:dd:2a:
                    88:c9:84:45:81:f4:ab:41:09:93:ce:a5:40:99:cd:
                    3e:21:dc:25:c7:dd:dd:e5:10:67:25:d8:54:27:5a:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:79:64:11:9A:25:FC:42:73:8C:EF:49:45:C5:43:19:2E:F7:88:3A
            X509v3 Authority Key Identifier:
                keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4e:e1:8c:4b:a9:95:50:55:1e:e5:84:f4:42:54:26:52:f5:
         60:5b:0d:80:63:c9:63:3d:e1:b9:21:a7:a0:4c:7e:2b:8f:bc:
         50:4f:e7:33:11:44:7f:b4:c5:c9:7d:3b:0a:e8:3e:44:b0:2c:
         63:ce:41:5d:37:0f:87:70:c2:4a:ac:bf:4a:c7:18:2f:f3:b2:
         8d:dc:8a:7a:c6:d0:ef:d1:2c:86:dc:8a:fd:df:b4:40:9b:21:
         ac:7d:e7:23:96:37:a8:27:fd:d3:2a:21:31:50:a2:3a:bd:11:
         14:b8:b5:3d:d1:1e:da:6b:f1:1f:2b:af:21:bb:7e:c7:a2:26:
         e1:b3:1a:e2:07:5b:b2:7a:5a:cf:e1:c0:6d:a0:0a:76:11:e1:
         62:6a:e4:71:85:54:b7:b2:b2:4d:05:ee:d0:36:5e:d2:35:f3:
         52:48:16:0c:ea:16:5f:bc:37:79:6b:85:9b:f0:96:b8:22:fe:
         14:a2:c2:6b:0d:12:49:fa:db:ec:14:a6:f2:6d:75:ae:ce:53:
         2e:94:8a:ac:18:61:29:81:71:fa:dd:b0:b5:4d:93:35:1c:38:
         4b:f5:66:79:07:e5:22:e9:25:27:8d:26:ee:17:d0:7a:99:ee:
         69:25:56:75:ab:97:00:31:c5:25:c0:bb:89:1f:3e:60:38:dc:
         4f:09:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----