Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File:                     txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier:          sCyWfzlMLAMqouupecG0AkVdYUbSxXGlqQz6/pDZtWQ=
Subject key identifier:   21:D9:04:75:8F:EA:6D:DF:97:F1:91:08:A2:F5:4E:01:52:26:84:6F
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer:       /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial:       0191F9A2AD3DE5D81FB9C94D38ADA160F2BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number:          B1
Signing time:             Mon 16 Sep 2024 07:01:13 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:13 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:13 +0000
Files and hashes:         1: 1-Qi1N7J5muj7jfEmkgOKsHowU5w.roa (hash: 6uP4xqqgeu/Eqc9TBEwh3LfGxhy00gMZFgAl5gZq4kA=)
                          2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: 9IPLmn7UgWxbQVO6P74m3s3bIOCZdvqtez8jSCEKEO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:ad:3d:e5:d8:1f:b9:c9:4d:38:ad:a1:60:f2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
        Validity
            Not Before: Sep 16 07:01:13 2024 GMT
            Not After : Sep 17 07:01:13 2024 GMT
        Subject: CN=21d904758fea6ddf97f19108a2f54e015226846f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:bf:e8:10:d3:95:82:0a:1f:10:36:77:67:
                    36:9a:39:27:6f:b3:a7:01:7d:a9:37:8a:7a:3a:79:
                    e4:83:a7:cb:4a:22:6f:73:ac:b5:a3:60:c6:cd:24:
                    21:89:23:05:20:10:07:2b:12:96:e2:c7:27:28:c3:
                    e8:72:d8:02:7e:99:46:5c:fc:94:a0:63:09:83:dd:
                    b5:2a:ac:d0:62:b7:2d:d6:b9:05:71:61:07:d6:0a:
                    9b:90:8e:e8:4c:8d:a5:58:01:f9:6a:87:2e:d5:73:
                    30:d7:6a:a2:85:7d:39:9e:9f:1d:d8:e1:7d:cc:9a:
                    17:90:7e:21:1e:1a:b7:e0:f1:d1:0f:67:94:75:c5:
                    9b:13:c6:d6:ce:3e:67:95:9d:79:14:4d:e7:6a:8e:
                    74:56:7d:f1:6d:58:b5:53:5a:c4:8c:7b:1a:8b:b5:
                    cf:d5:13:95:b6:f0:a5:ab:c8:5f:48:e2:6f:9e:29:
                    ed:d5:ce:71:5c:09:1e:26:0e:ad:b6:92:93:58:81:
                    6f:60:2c:1f:56:0f:a6:1a:34:c4:7b:df:aa:f3:8c:
                    87:34:f8:dc:5e:93:59:31:72:73:85:ae:0f:99:33:
                    87:88:f3:1e:6e:46:06:97:68:a8:56:1c:c9:a4:ac:
                    94:da:43:20:57:bf:81:95:45:cd:42:8b:c3:d4:de:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:04:75:8F:EA:6D:DF:97:F1:91:08:A2:F5:4E:01:52:26:84:6F
            X509v3 Authority Key Identifier:
                keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:df:cf:71:c1:73:ac:25:d0:cb:ec:f0:8e:50:df:ae:c0:
         d4:90:08:97:57:ef:39:88:7c:62:00:cc:c2:10:5f:fb:79:cf:
         e7:de:ce:2a:ba:0c:c3:c4:45:b3:55:48:56:0b:4f:9f:8f:9f:
         82:62:f3:5a:2e:87:78:7b:99:6e:7f:9d:6b:b7:f5:56:3a:2b:
         88:56:0c:fa:fb:c5:01:b8:d0:0f:ad:8a:ca:4c:e9:c7:58:69:
         58:cf:60:c3:f5:e4:22:47:e7:6a:0f:d6:3e:c2:59:b8:f5:8e:
         46:7a:ef:44:82:ec:f4:9d:e6:1d:9b:0a:e2:0e:ce:75:cc:e9:
         bb:97:a1:e7:51:68:75:8b:4a:89:b8:ed:07:9f:e8:92:25:0d:
         6a:49:72:5a:0f:29:68:ba:e6:ce:cc:f6:6f:73:04:1c:67:49:
         46:95:1e:76:ef:a2:b2:c2:9f:ed:8f:83:99:a9:d3:c0:cc:0f:
         e3:bf:fc:bb:52:11:a4:db:34:02:f0:be:69:cb:04:64:8b:bc:
         2c:60:14:0b:cc:40:04:b2:ad:be:14:d8:22:72:4f:db:98:f0:
         f8:78:9c:e0:f0:aa:46:fe:46:b8:cc:b6:3f:22:01:de:91:9b:
         e4:87:22:1c:7c:2c:fd:4b:43:3d:eb:0f:d7:af:03:51:c5:4d:
         29:1b:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----