Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File:                     ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier:          XKTZf4ur4bxsId+O08ORMIHiP7h3/YKB8IS4sUm2kWY=
Subject key identifier:   5C:60:F6:F5:18:50:6E:60:DC:FD:0E:B4:40:C1:0A:C5:1E:36:EC:72
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer:       /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial:       018F8749BDF8916D88FED8192D9FFC5A230E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: oBS3-lZP2Q3tilv8crVHAGmD68A.roa (hash: tm2C5CN1AfN18rAff6l9lZkxh5r69jWjXFyTjlNjtYo=)
                          2: wFii1jfmUMdvpxY-CWUztGp1p94.roa (hash: viJZbmmrzW6Gf2QJ6u/10+RZWrbvE3ygezyFqQpp5SU=)
                          3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: +7yTfISlFFxhHdQGWNFPrmS6KaVPpJE1cIaUVv1AgYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bd:f8:91:6d:88:fe:d8:19:2d:9f:fc:5a:23:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=5c60f6f518506e60dcfd0eb440c10ac51e36ec72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:58:8c:8c:3c:9c:4f:1e:3d:88:93:d9:6b:
                    1b:d5:aa:66:94:4b:e2:04:56:d9:fc:2a:c1:1d:a9:
                    78:2c:c7:51:19:2e:a7:1b:fb:a9:ba:78:20:75:0d:
                    94:86:0b:da:c0:e0:65:f4:a7:2f:a6:ef:41:07:0b:
                    e8:fc:95:0e:f0:a0:92:38:f9:0d:46:62:6d:8f:5e:
                    52:f0:64:22:4e:a5:01:57:3e:1d:ed:0b:7e:7d:15:
                    0a:71:74:b1:37:cc:48:97:2b:83:b4:a9:ab:52:1e:
                    45:43:23:5d:f9:34:a2:79:39:16:a8:27:9a:b5:a3:
                    9a:f1:8f:7f:ab:7b:0d:14:13:8f:1f:2a:42:7f:35:
                    28:8f:76:92:71:35:03:98:38:c5:c1:40:b5:6f:23:
                    8f:f0:ef:f7:2b:4c:b3:1f:ab:51:6e:a5:8d:68:de:
                    68:c3:2a:ca:ef:55:2a:72:38:3f:3f:5a:97:be:06:
                    6c:5b:2b:d4:9c:3c:9b:d1:3e:a0:42:3a:f0:ae:39:
                    97:ab:b0:3d:fd:e5:4d:38:36:17:55:4f:2e:a1:c3:
                    68:95:a0:15:08:01:c5:02:e8:d5:9e:16:b7:91:44:
                    7c:77:17:ad:e9:13:11:fb:d6:35:aa:4f:ff:1e:dc:
                    ec:2b:0c:b9:6a:b1:d4:f8:3a:66:6e:19:2f:9d:10:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:60:F6:F5:18:50:6E:60:DC:FD:0E:B4:40:C1:0A:C5:1E:36:EC:72
            X509v3 Authority Key Identifier:
                keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:be:b2:7b:95:cd:37:2b:ee:05:13:6a:13:8a:a9:d2:2b:64:
         6c:b9:51:a0:df:3d:8f:e2:cb:1e:66:85:73:2f:93:cb:50:f5:
         ee:d4:7e:d6:73:89:07:05:c3:46:55:f0:a3:ba:85:9c:38:60:
         85:a4:4b:74:1e:d4:15:ba:d2:6c:e0:53:2b:66:12:a4:3f:b1:
         d4:12:f8:cb:c2:e2:0d:da:64:2e:c3:29:c9:dd:e5:f8:ee:9f:
         03:68:ce:c6:85:9e:01:67:00:6d:69:01:90:fa:c8:76:7d:09:
         e9:c4:be:97:05:3a:d4:cb:11:a1:b7:29:d7:ab:c6:be:9e:01:
         99:00:38:6c:41:11:40:19:86:a1:20:fe:7c:92:77:89:53:0c:
         58:e9:ca:71:51:53:ef:e5:37:b6:e2:fe:e0:f3:e1:1b:4b:fc:
         85:4c:e2:1a:a8:26:ed:9d:04:38:3a:f8:a7:1a:a3:10:a1:e5:
         53:42:b3:bd:ef:ce:4f:92:b1:d4:b2:bf:50:ee:ed:5d:45:81:
         e3:96:b4:2e:f0:96:ba:6f:0a:0b:4c:5b:c2:00:5c:65:4c:08:
         72:f2:34:aa:f3:20:e0:ee:a6:b2:f2:d9:4a:61:cf:c4:17:c4:
         00:f0:5a:f5:2a:8c:46:83:30:63:a5:9e:7a:46:9a:b3:9e:cf:
         56:44:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----