Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File:                     zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier:          fFKdgKsjioXzc5GxINi8T60RlnlJy+gn1tppPZnoAmU=
Subject key identifier:   93:F1:50:D1:ED:69:D9:03:20:E3:C6:C0:1C:F1:4E:D7:B4:85:70:DA
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer:       /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial:       018F836E04311444C65C966D991A10CFC5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number:          0A1F
Signing time:             Thu 16 May 2024 22:02:56 +0000
Manifest this update:     Thu 16 May 2024 22:02:56 +0000
Manifest next update:     Fri 17 May 2024 22:02:56 +0000
Files and hashes:         1: NF0WiVichU4Hzas4KR8KZ4I9BeE.roa (hash: npm1VOf53UEHnd/3tPy4HPSN0yfFxBCjznojWF6z1TQ=)
                          2: PE1jTTTKhVoADwLETi9da5d4fmk.roa (hash: USdFHz3SWwtpdA4/68fEf2km23+hbaxfFQHur77pGRM=)
                          3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: 36m0iTuta5thNNnUzlYsVaoyzJJlZ26/sh1pf1tEjfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:04:31:14:44:c6:5c:96:6d:99:1a:10:cf:c5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
        Validity
            Not Before: May 16 22:02:56 2024 GMT
            Not After : May 17 22:02:56 2024 GMT
        Subject: CN=93f150d1ed69d90320e3c6c01cf14ed7b48570da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:9f:27:19:90:11:47:ee:48:38:11:db:ef:
                    5c:72:6f:c6:be:9d:2d:ed:64:89:ba:29:5d:8c:22:
                    dd:58:f9:8b:74:e2:b4:2d:7b:a9:c2:5b:1f:d9:6d:
                    24:35:6b:41:d9:d1:06:f9:6b:87:68:90:22:40:52:
                    38:37:9c:66:24:55:5b:29:f8:70:71:14:33:e5:5e:
                    91:b7:d5:eb:75:5d:16:6d:c8:df:f5:ea:bb:c3:f0:
                    59:8c:24:d5:5c:43:8d:6d:4a:af:06:14:56:51:a3:
                    9e:35:51:6f:f4:45:4c:63:54:e8:49:59:16:12:78:
                    9d:bf:79:99:8e:62:f9:41:48:01:a0:14:cb:c0:1c:
                    57:82:b3:33:28:01:c4:ba:d3:57:58:a6:96:de:9e:
                    c0:5d:11:03:a1:35:6a:d9:9c:29:d1:10:7c:28:51:
                    73:9d:1a:98:fd:b4:d6:de:54:7c:1c:95:93:74:2d:
                    d3:12:3d:44:c7:f4:43:2d:87:cc:ea:b0:de:3e:99:
                    46:30:a2:8a:75:f8:a7:af:3c:f9:8e:d5:ce:b3:b1:
                    38:a4:8e:70:ae:73:5c:00:0b:ed:80:8d:05:c7:2f:
                    f6:c7:01:2f:c9:0e:d8:66:2a:19:16:f5:64:ab:a3:
                    a9:98:78:66:50:30:df:38:3a:aa:9a:0b:93:c1:28:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F1:50:D1:ED:69:D9:03:20:E3:C6:C0:1C:F1:4E:D7:B4:85:70:DA
            X509v3 Authority Key Identifier:
                keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c0:b9:40:1c:ab:fc:86:b1:34:8a:c8:7b:9a:3f:4c:c6:bc:
         f2:f6:6a:7a:9e:78:5a:24:cb:96:44:d8:2c:cc:a4:1c:97:9d:
         e8:f8:c6:73:99:ae:c6:f9:55:9a:5b:96:a0:22:14:18:e8:b9:
         f4:6a:d5:de:e6:d6:c9:46:6e:46:41:e2:ed:bd:6b:da:19:88:
         93:1b:79:62:ea:01:81:e3:8a:68:05:63:28:5e:5a:19:24:3d:
         fb:4d:5e:0d:70:c8:87:d4:d5:9d:77:ee:4c:cb:e1:7c:a2:2b:
         67:69:67:8a:c5:aa:d0:8e:51:27:67:13:d0:49:16:d8:f4:64:
         d1:17:0c:2f:93:bb:c0:de:73:a5:97:7a:6f:8e:61:85:bd:f7:
         03:f8:eb:e7:7f:a4:59:f3:1f:6b:fa:74:59:3c:fb:16:45:7b:
         3d:dd:4e:53:00:01:0b:52:75:c7:f9:2a:36:0e:64:a3:c3:fd:
         b2:ba:c3:a3:34:58:f1:b0:37:30:63:aa:b2:7e:ab:f4:49:fd:
         50:d5:ec:64:b1:4b:2b:59:d9:de:85:51:8e:3c:96:97:13:2f:
         ca:6e:34:b1:25:3e:8b:20:f6:c1:e7:79:6c:af:33:13:58:a1:
         d6:a2:27:73:e4:f9:2d:cb:f3:87:ca:64:54:f2:16:64:20:f9:
         8e:83:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----