Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File:                     x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier:          uZEKrEfUpBUMp/z4WToL/8eo3Fi+2g54aIHmv6RqcS8=
Subject key identifier:   E3:8A:2D:3A:2B:90:74:5B:16:6C:5F:44:D5:30:D4:A9:32:7F:27:58
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       018FB30F16A0CAD1FF914B4F92B3F575F0ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number:          1192
Signing time:             Sun 26 May 2024 04:01:01 +0000
Manifest this update:     Sun 26 May 2024 04:01:01 +0000
Manifest next update:     Mon 27 May 2024 04:01:01 +0000
Files and hashes:         1: D4W-G002BF74Cs4h0QadqDHwSWo.roa (hash: gSFFzrObw0qpxPujGX1JY+3nAcl0sgsYpOFrsdiU9Fo=)
                          2: LyVLOy7rCLdK3-obCpSFHYXBMeE.roa (hash: RDoVykschZIo5fWspdmtEw2ehBRk72grQV7LvV+qO1Q=)
                          3: eJz_w6SWHqgLNn4ulwGV0UOoL28.roa (hash: iy7fjemr2ZhoWQmb9pff9bCJ+GRVAv7cSYXTtJNkF3E=)
                          4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: oY2Yv996ybhmKdgWbbuGy2Ri6gjtdCC2gsHaCHvd87o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:0f:16:a0:ca:d1:ff:91:4b:4f:92:b3:f5:75:f0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: May 26 04:01:01 2024 GMT
            Not After : May 27 04:01:01 2024 GMT
        Subject: CN=e38a2d3a2b90745b166c5f44d530d4a9327f2758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:20:d3:b2:8b:82:c7:2e:ec:e7:9a:46:c8:48:
                    19:c2:e1:94:34:f2:8d:78:c3:31:b5:0b:da:01:f9:
                    56:55:4b:79:ab:af:de:8d:ec:fa:84:88:51:b1:37:
                    10:73:ef:f6:9e:67:74:3d:3f:f9:63:5d:47:7d:16:
                    81:a6:f4:1c:02:0c:64:91:57:29:ca:13:e2:05:f1:
                    50:46:fd:33:53:36:87:81:8d:9f:c4:ba:45:f3:5b:
                    a2:1f:ea:75:38:c5:c5:4b:03:cf:03:80:f9:f9:c1:
                    e6:6e:41:ea:a3:cb:df:47:bf:df:d8:1e:ca:d9:95:
                    5f:fb:81:42:1c:96:5a:69:ae:1b:83:20:84:f8:20:
                    43:e7:4d:fc:d4:bf:ec:02:e3:76:14:a5:43:20:fb:
                    63:c6:3e:cc:99:5b:c3:0f:bd:88:48:69:60:c0:fb:
                    f6:75:87:a8:c4:11:f0:e2:f3:b0:68:7f:e7:bd:89:
                    64:fa:5d:90:f5:3e:00:fd:03:bf:b0:0f:42:d9:50:
                    73:f6:fe:8e:ba:3e:48:b2:87:aa:0a:76:72:7d:9c:
                    77:a2:49:8d:02:68:47:3d:11:57:34:f5:2f:ad:8c:
                    09:d5:02:34:57:9c:95:aa:00:68:fa:6b:99:bc:27:
                    1a:ea:16:8f:03:82:3a:82:f2:68:75:20:2e:7c:91:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:2D:3A:2B:90:74:5B:16:6C:5F:44:D5:30:D4:A9:32:7F:27:58
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f2:3e:cf:e8:cb:41:92:42:eb:b8:8c:96:fe:c2:85:a5:e4:
         d9:d4:93:eb:e5:57:c8:24:43:c5:63:ca:14:e5:a0:34:ec:91:
         fa:67:42:e1:64:fb:e2:f8:4d:45:a4:ff:76:05:6b:20:a7:0d:
         1f:43:5e:f0:df:2e:c6:e8:70:1e:57:1a:d9:73:da:08:f6:a7:
         c0:c8:39:9d:30:8d:0d:c8:43:92:6f:04:30:45:50:89:87:53:
         e2:86:d6:45:81:c2:3d:a0:a0:db:8a:2d:b1:25:52:6a:57:f3:
         e3:35:46:9d:6d:25:03:ef:a6:23:65:3d:b5:48:63:81:63:d7:
         53:78:f0:c7:3b:dd:e9:44:be:ad:95:94:92:19:8d:df:0e:b9:
         4a:e0:44:e7:5a:b6:6c:11:1a:45:99:9e:b6:0a:90:8b:4f:04:
         8e:b0:04:13:86:b9:74:07:fc:d5:af:4d:a3:00:da:ba:4a:8a:
         9c:be:03:b4:53:c5:79:d7:67:30:87:4f:7f:65:c6:61:55:9a:
         21:e6:e7:56:28:de:f4:4c:bd:c9:ee:71:2c:fd:60:1f:04:85:
         a2:fa:f8:74:cf:55:7a:dd:b4:67:2e:4d:fb:5f:e4:60:f0:78:
         94:af:54:96:dd:cd:84:db:a3:3a:60:53:a5:80:26:2d:82:27:
         7c:3f:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----