Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File:                     SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier:          gSiW8Z8P3CQRL1M8m/ObCQaUpIsRIVNhwovTXxlExnw=
Subject key identifier:   10:2E:A6:C9:79:ED:70:ED:59:E6:12:AB:C5:4D:9C:0B:24:39:01:8A
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer:       /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial:       018F874ADD808697A61C1E0E7C15B971580F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:03:01 +0000
Manifest this update:     Fri 17 May 2024 16:03:01 +0000
Manifest next update:     Sat 18 May 2024 16:03:01 +0000
Files and hashes:         1: CbnkuGa-vRt817TPJQiKWPsPIsM.roa (hash: rqAibwp4yOWuz88x7rlZJtulRS8+09gC1Nq6isozT/U=)
                          2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: OWNcqlYV3BQIgF5HOX7TrbtZl7pE+epILfPun4tvxgs=)
                          3: kVplrTYwIku3PnCn94k1sRRPa1E.roa (hash: yT8R8lNkk0W6gyWY7sB/MAb5u7EuYLkrxNJmvAuDrqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:dd:80:86:97:a6:1c:1e:0e:7c:15:b9:71:58:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
        Validity
            Not Before: May 17 16:03:01 2024 GMT
            Not After : May 18 16:03:01 2024 GMT
        Subject: CN=102ea6c979ed70ed59e612abc54d9c0b2439018a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:1a:1a:e5:6c:3d:82:86:67:c3:65:e1:61:
                    74:82:38:18:70:86:d1:6a:ea:c0:00:17:76:0c:f6:
                    d0:9f:12:88:40:f0:ff:43:94:3c:47:05:ca:68:37:
                    c0:0f:23:98:ab:a6:ec:79:fb:61:4b:62:30:d3:4e:
                    36:cf:e1:b9:fb:03:e2:69:65:cb:6e:13:a3:c5:34:
                    8f:d9:a2:17:7b:65:f2:f7:bf:d4:09:e1:68:35:a0:
                    6f:0e:74:08:50:8a:4a:1c:fa:86:83:a6:f6:f0:3b:
                    26:61:77:19:44:e8:e7:4d:ea:56:07:21:9d:57:45:
                    ed:e8:cd:f8:61:c6:bb:1b:65:29:34:72:b7:f6:eb:
                    18:49:40:b3:f4:90:bc:86:df:db:26:2a:7b:08:75:
                    dd:e1:21:3f:55:5b:9e:fb:e0:a8:46:26:05:0d:83:
                    51:66:8e:a4:ed:0d:20:a7:86:50:49:74:4a:da:4d:
                    fa:c3:8f:6f:42:91:0e:83:6d:ff:5d:74:8c:4a:bb:
                    ee:76:e2:cf:aa:cd:86:5b:ee:0c:c4:bb:36:2b:3e:
                    62:61:16:52:8c:1b:9b:ba:65:58:06:fa:ce:cb:62:
                    d5:e2:ca:1a:53:80:d9:f7:55:8e:7c:ba:fd:5d:8c:
                    d2:cc:37:1d:7c:23:ae:ae:24:f5:25:7f:5c:4e:c7:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2E:A6:C9:79:ED:70:ED:59:E6:12:AB:C5:4D:9C:0B:24:39:01:8A
            X509v3 Authority Key Identifier:
                keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:15:43:0e:9a:4e:df:a5:5d:f1:65:f0:09:04:96:a4:bc:a6:
         e2:0c:dd:c7:91:c6:88:57:76:1d:25:b3:1c:0d:af:1b:69:23:
         10:81:d4:78:53:da:f3:17:e6:fc:c7:9c:b1:42:6e:cf:72:d1:
         de:7c:5c:bb:73:3d:89:fc:9a:be:a8:29:70:4f:e8:b5:45:65:
         ba:a2:bc:d5:d0:04:4a:cf:0f:11:a6:29:12:6e:69:30:ca:51:
         3c:69:c3:da:78:90:67:98:5d:80:52:53:bf:71:4b:b2:1e:d1:
         b3:98:66:fd:89:58:b5:2c:b3:82:49:91:5c:2f:eb:f1:b6:b8:
         b5:a0:30:35:4c:11:9b:05:8e:88:30:33:bc:89:c4:51:ba:50:
         b7:59:6c:d0:d5:fe:1b:af:90:57:b3:b4:21:c9:09:ee:52:c3:
         a7:da:cf:0b:b0:6a:0b:27:7b:19:49:01:06:92:98:6f:50:52:
         2e:9d:1b:f0:de:39:17:d0:93:3c:2f:87:0c:70:fd:4f:ee:53:
         57:1e:fe:66:95:ce:9d:15:c6:da:71:c8:4b:84:d0:e9:d0:1e:
         f6:8c:a6:53:d1:ab:ff:25:0e:a0:1e:97:bd:e6:e3:7c:84:b5:
         cb:65:3e:48:f9:45:2e:78:ae:91:4b:e3:7e:de:2c:25:58:86:
         f5:8c:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----