Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
File:                     Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft (raw, json)
Hash identifier:          ITWvkA3bzV1f/Wba35H76LAEce3oeY0VPYHsRzkk7u8=
Subject key identifier:   50:49:B9:11:62:6F:C5:88:5C:43:01:4F:99:B7:B5:02:49:D6:43:86
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Certificate issuer:       /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial:       018F90F0924B4954477E8891248E977A8781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
Manifest number:          117E
Signing time:             Sun 19 May 2024 13:00:36 +0000
Manifest this update:     Sun 19 May 2024 13:00:36 +0000
Manifest next update:     Mon 20 May 2024 13:00:36 +0000
Files and hashes:         1: Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl (hash: pvru6ISkpQM8LCzFWJLU5eUDWX1vNVucHti4Fzd3kBY=)
                          2: X0ik40-oEWGT7u3_M27w748unWI.roa (hash: 3/CQHXXZIuUecTHL0jMbXmXJO1pXMh63DpIxQephcq0=)
                          3: a56R_9RTmMQijvX9kAXFXdjldxg.roa (hash: i6uJOhNBcfVibpoqUaUOHSeVZR/CT+/3WISvQLIDp1U=)
                          4: hWcSbzfDGlM24LksvcC_koM4ym4.roa (hash: AfpY1SzkCCvNJjLxAsRIAvcZIWqg20zwrNG0Aj2T7ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f0:92:4b:49:54:47:7e:88:91:24:8e:97:7a:87:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
        Validity
            Not Before: May 19 13:00:36 2024 GMT
            Not After : May 20 13:00:36 2024 GMT
        Subject: CN=5049b911626fc5885c43014f99b7b50249d64386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:9d:9d:7e:36:fd:a0:0e:42:68:61:16:db:
                    42:1f:98:88:58:bb:a2:2c:df:a2:32:b6:56:4d:e6:
                    04:0e:32:05:fb:02:77:2b:83:0a:2f:50:e0:46:d0:
                    74:c5:17:56:bf:ca:6d:0a:e7:53:53:b3:ec:89:f4:
                    c6:d8:1c:c8:90:7b:20:3f:80:d5:3a:5b:27:1f:4f:
                    1d:72:3b:6a:ed:86:f7:38:82:23:82:d1:7a:de:d4:
                    37:9e:6c:44:0f:de:c6:11:5c:2b:f6:99:df:00:cf:
                    a3:0c:1d:ef:42:88:4c:16:75:03:16:81:7f:2f:30:
                    c6:e4:f4:d7:22:f5:49:a3:06:ad:75:16:18:bc:e6:
                    a9:18:4e:bf:b9:59:b2:75:76:31:bf:14:a0:33:b5:
                    10:b5:60:22:17:7f:c6:01:f6:4e:db:02:b6:bc:06:
                    f2:20:17:52:2b:19:7a:6c:e1:f1:77:64:26:c7:8a:
                    71:97:df:d9:87:f4:66:8b:cf:43:0f:69:ff:14:e3:
                    7c:7a:9c:e1:8a:5b:df:09:1b:62:8e:66:82:f4:3f:
                    3f:32:87:c7:5f:63:3a:92:0f:83:d0:d9:4d:60:19:
                    4f:60:b0:80:fb:e7:10:d5:ec:c5:c7:64:51:e6:20:
                    f6:25:fa:1e:e8:7c:cf:19:fc:2a:59:88:fa:1a:c2:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:49:B9:11:62:6F:C5:88:5C:43:01:4F:99:B7:B5:02:49:D6:43:86
            X509v3 Authority Key Identifier:
                keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:10:98:39:f0:a6:48:f0:15:90:f3:1c:4a:8c:ef:4e:2f:ed:
         50:81:1b:bd:71:84:27:3e:9e:08:8c:7a:5a:47:10:e4:f6:4d:
         0c:c6:8e:4a:af:a0:be:9e:ad:e6:49:a3:a0:65:38:60:c9:af:
         7f:c4:4d:77:55:f4:f8:8a:fa:6c:7d:bc:b3:26:86:cd:e6:0a:
         e9:ca:b0:94:05:87:c5:6d:eb:7b:16:f3:18:73:84:ec:b9:c3:
         57:46:2a:69:33:13:b2:69:37:01:b3:d8:5b:6b:fd:5f:55:e6:
         c3:52:ac:f4:a6:48:92:62:34:5e:b3:96:f1:57:cc:ae:71:b8:
         3f:87:cc:ac:44:08:11:ef:04:c8:16:7a:a3:2a:35:49:b9:dd:
         46:00:8b:21:5d:37:db:f6:41:dd:6c:e9:7f:26:11:14:dc:ec:
         8b:3c:81:4a:ec:43:d0:7e:ec:10:73:4f:fd:12:28:c2:31:1e:
         41:b1:a0:13:d8:82:82:fb:4b:1f:8f:3d:4c:02:49:c0:63:45:
         85:e9:d8:40:b5:87:fd:e6:56:e3:8e:84:e3:e1:b3:c0:4d:18:
         e2:ad:00:4b:3e:0a:2e:82:e6:3b:92:f9:94:19:d0:d8:84:f5:
         a8:d0:7c:2b:60:95:ba:98:69:ea:d4:5f:66:c2:5a:01:26:76:
         8e:57:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----