Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File:                     mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier:          yue7ZhFE5kHxaJNDITDzcYNze89OpRK3yUoeg6aMR9w=
Subject key identifier:   DE:C2:8B:9F:D4:AA:E0:9A:41:51:7F:4A:18:D8:C6:7A:95:A1:40:A1
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer:       /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial:       018F87B64C95ECC8A508CE1B6F7E93172E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number:          09B1
Signing time:             Fri 17 May 2024 18:00:22 +0000
Manifest this update:     Fri 17 May 2024 18:00:22 +0000
Manifest next update:     Sat 18 May 2024 18:00:22 +0000
Files and hashes:         1: 7xAxgoq6sDnDILCCeFHwfddJbqw.roa (hash: iDn2SDK5ae5Zete+ySkUdUc1KFrNADky8omviDqTun4=)
                          2: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: /DhUQcUV3lW2W63T3+8xYI+qob5Qz5TgpEX2m7zrNww=)
                          3: xDBiXACMT82UTlxGLvs9fU65jDg.roa (hash: Iev9kr3yjO3MnfQ7mlRykLGCcR5dIO5USx6z6FLf4u8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4c:95:ec:c8:a5:08:ce:1b:6f:7e:93:17:2e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
        Validity
            Not Before: May 17 18:00:22 2024 GMT
            Not After : May 18 18:00:22 2024 GMT
        Subject: CN=dec28b9fd4aae09a41517f4a18d8c67a95a140a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:ea:e1:d4:7d:35:b7:50:84:38:80:ba:f2:
                    5d:b8:1f:7c:a2:49:39:d7:52:8e:80:d2:04:7f:3f:
                    4c:42:f7:b1:a7:0e:30:09:1d:bf:bc:ac:14:db:77:
                    3d:c4:c6:cc:02:5f:ff:39:3e:ac:08:e6:07:14:9b:
                    cc:7c:10:63:5a:2d:3e:6c:2f:85:7b:c1:0c:83:9b:
                    61:19:c7:4e:8b:9e:0e:bb:d2:47:8b:63:c4:c9:7d:
                    47:8e:38:3c:30:bd:b0:75:fc:05:1b:0b:c5:3a:7d:
                    9a:21:3d:45:aa:2a:5d:7c:ac:d8:ce:bd:3a:0c:74:
                    1d:63:a8:06:c8:c4:e1:22:c7:ee:ce:7a:26:39:a0:
                    c5:5f:34:e3:79:da:bd:b7:43:fd:3a:54:24:4f:90:
                    4c:e3:e1:82:23:d7:a6:c1:b7:ac:2a:de:68:9f:53:
                    ff:0f:ed:c5:6d:31:23:9a:84:55:a8:f5:c2:a7:14:
                    8e:03:ae:c2:75:b9:5d:b4:86:12:a2:6f:c4:f1:72:
                    ae:4f:91:41:7e:40:55:45:29:54:81:b0:cd:97:94:
                    88:c3:17:80:d1:f2:20:3d:74:1f:17:32:9c:74:5a:
                    1e:fc:ca:2b:4b:e1:9d:6f:37:e4:d5:8d:34:c1:c9:
                    9b:3e:0f:f1:42:10:ca:db:05:d8:c8:f6:a8:87:e5:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C2:8B:9F:D4:AA:E0:9A:41:51:7F:4A:18:D8:C6:7A:95:A1:40:A1
            X509v3 Authority Key Identifier:
                keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:29:3e:69:04:88:e3:17:b7:16:21:dd:9a:78:96:cd:58:c5:
         4c:52:21:7d:a1:27:84:1c:d8:98:e8:be:45:ac:fd:a4:b5:ea:
         f0:c7:b3:b0:e1:df:3c:f4:98:0c:f2:01:73:b7:b9:3a:9c:ff:
         6f:ee:67:38:a0:51:28:72:97:17:e5:d6:74:57:6c:21:d2:a4:
         dc:f3:16:5d:ed:26:4e:a7:79:71:d4:b3:54:95:45:0f:b1:fc:
         42:ca:5d:ed:ca:66:4a:ce:d5:92:7a:09:21:ab:66:07:09:80:
         14:ff:44:0e:cf:cf:f3:ea:78:62:ad:bc:1b:c3:fd:5e:a5:84:
         49:bd:19:d5:57:fa:6b:44:15:f0:64:ee:b4:44:2a:7f:2b:a3:
         18:56:e1:d4:8e:e8:31:8e:ab:26:0c:c7:28:8d:04:eb:a2:ea:
         7d:47:be:eb:db:12:ad:59:07:5a:31:d7:84:43:ad:00:99:48:
         fb:11:2d:34:0f:7b:14:0d:a8:92:76:85:dc:16:a2:26:1a:38:
         9c:0b:66:3f:cf:79:05:df:b0:64:4e:6d:66:8e:e7:6e:cc:9b:
         4b:5a:a5:bf:c6:9a:62:d3:c5:b0:50:ab:b1:16:f3:6d:b5:03:
         42:2e:23:24:a6:6b:ed:5b:4a:af:50:b9:68:b3:8d:e9:35:bb:
         82:37:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----