Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          Wkt9mgjzKkeJ0S+Iq8Gxe+zvSKtbGwIQ4AlsOLrNp+U=
Subject key identifier:   BA:64:54:9B:1F:5C:71:BF:D1:47:3D:A9:98:5F:D9:A9:A4:B9:47:2A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       018F7CFBD9028DB33FD171E6D32B86281B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          0E8A
Signing time:             Wed 15 May 2024 16:00:30 +0000
Manifest this update:     Wed 15 May 2024 16:00:30 +0000
Manifest next update:     Thu 16 May 2024 16:00:30 +0000
Files and hashes:         1: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: X7B8c1eUPVEUBp7g6EoYEFX+LKREyVOHn54KDF5pdDo=)
                          2: N91h4j_yISK-BxsPaFXPeKumKOo.roa (hash: ANe+z5YXVLMK8rGFWTFz8CKin02kLx4UiCpMo4rXHxk=)
                          3: i5m0_9VRpMw3juBk3T5Pq_dc-Pg.roa (hash: LF3d2u7DW7Bue9rCJmo4eoV5xtr5xfJUHN8pQjd6O/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:fb:d9:02:8d:b3:3f:d1:71:e6:d3:2b:86:28:1b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: May 15 16:00:30 2024 GMT
            Not After : May 16 16:00:30 2024 GMT
        Subject: CN=ba64549b1f5c71bfd1473da9985fd9a9a4b9472a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:1c:1e:a4:2a:d8:15:5a:70:09:d1:f0:d1:
                    91:26:2c:4b:a1:f6:f6:db:ef:73:d0:47:de:89:23:
                    e9:79:2b:3a:9a:de:4d:50:46:5b:ed:ec:cb:4c:21:
                    5f:63:6f:90:cf:db:ad:e0:e4:cc:31:60:c3:f3:8b:
                    3f:f2:61:9b:fd:c9:8c:f9:55:87:65:e8:e0:f4:17:
                    18:5f:2f:2d:f0:d2:13:0f:61:b1:01:b3:15:23:e2:
                    2b:f5:dc:7b:32:be:41:6b:e0:dc:e6:2b:65:ea:e0:
                    81:8b:4d:1e:32:c3:83:6b:5f:ef:0b:8d:33:37:df:
                    8c:1a:cb:ab:43:d2:f4:86:24:21:c9:32:c1:4d:44:
                    35:4b:1b:8b:d7:e7:a4:04:ad:24:80:18:7f:b4:75:
                    fc:9b:58:19:eb:f7:e7:c8:e1:95:0f:fb:44:a9:04:
                    96:24:15:f9:f9:69:96:81:fd:c4:89:fb:67:60:c1:
                    ed:02:b6:6e:2f:e0:d3:de:a3:59:91:fa:d5:a7:0c:
                    89:5d:64:30:39:19:4d:85:bd:0d:0f:01:7e:56:75:
                    0a:67:42:e7:b2:4c:2c:30:4c:37:47:f3:14:72:d9:
                    37:d8:19:5b:ac:39:e2:c2:33:0a:25:6c:9c:84:d9:
                    40:48:da:d8:d9:28:b9:14:f8:0a:fc:9b:8c:02:6f:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:64:54:9B:1F:5C:71:BF:D1:47:3D:A9:98:5F:D9:A9:A4:B9:47:2A
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:35:15:f6:a5:9f:36:e7:ae:66:36:ab:f0:0e:06:72:c9:00:
         11:5c:d8:1e:95:0d:01:a2:e6:1d:47:f6:49:c1:59:b5:55:b3:
         80:d1:ee:39:33:3a:a6:41:64:35:09:72:37:5c:df:97:03:07:
         fe:fc:b1:ef:57:a0:05:00:1b:80:48:b1:76:f0:75:58:d8:a3:
         e6:a1:0f:ca:0c:12:1c:28:19:74:cf:7c:d6:4c:e1:61:67:16:
         e8:8f:f0:f5:24:7f:ec:0e:c2:8b:9a:4b:d4:45:6f:16:f2:e7:
         02:2d:1f:94:5b:6e:f9:2d:c1:fa:e4:16:af:b3:2f:35:05:df:
         ad:48:9c:17:2a:0e:fe:ba:1a:c9:d2:06:12:49:a8:b5:32:34:
         7c:e5:69:b4:f0:73:93:3b:36:5e:e2:55:f6:2e:9f:b8:0e:39:
         a3:20:a1:d5:a3:02:7a:d8:c8:67:eb:84:5b:d3:7f:39:ac:97:
         38:d8:10:46:d6:a0:45:7a:19:e1:4d:7d:57:28:74:45:5c:97:
         0d:aa:e7:3e:5c:e4:b5:4b:2a:a8:84:9c:01:d2:c4:2f:dc:51:
         62:e7:ae:5d:63:33:33:e5:ba:92:fd:df:3c:35:24:ab:60:07:
         97:a7:6b:43:3f:e6:81:25:21:56:d2:fc:72:84:35:af:f0:a2:
         12:ed:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----