Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File:                     2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier:          ce8JQb0ul9FH8wGJima0cfpopbytTgUaND2hm44VjqY=
Subject key identifier:   05:DA:45:37:9B:0C:68:93:3E:FC:C4:E4:78:8B:D5:A8:02:81:40:A5
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer:       /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial:       018F1E5B46759631DFA73D383BE475312F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number:          0883
Signing time:             Sat 27 Apr 2024 07:00:49 +0000
Manifest this update:     Sat 27 Apr 2024 07:00:49 +0000
Manifest next update:     Sun 28 Apr 2024 07:00:49 +0000
Files and hashes:         1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: 9HxEFPFBwZ47nJLM5d7MlI5YLRgnqf78zZ0VBfNr0z8=)
                          2: gPDc6ZBxxWe07h-VqJNCFEoqkEM.roa (hash: Glxj1otzpAMyG4w7myyT5xZf8H3t/k06JaZpYF4bjGU=)
                          3: lSIEA_iUXjNR0OGAjrLaQS4TOYA.roa (hash: /z4HU8LI8X2cO4Uy7Um8ZmGIiYbSawvJhnA0iQe2cjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:46:75:96:31:df:a7:3d:38:3b:e4:75:31:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
        Validity
            Not Before: Apr 27 07:00:49 2024 GMT
            Not After : Apr 28 07:00:49 2024 GMT
        Subject: CN=05da45379b0c68933efcc4e4788bd5a8028140a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:a0:84:65:8d:e9:c7:ea:c6:9b:ea:70:64:
                    60:61:d4:7f:e0:96:5a:f0:76:8b:20:6e:f4:de:76:
                    6a:38:1a:b6:25:56:31:07:3e:1f:99:2a:57:83:ba:
                    84:11:db:82:2d:8b:b7:ab:f2:14:41:6e:bc:80:6c:
                    f9:d7:f2:a2:92:34:25:c8:2f:6b:eb:cd:c4:26:a4:
                    16:d6:14:17:e2:ff:bb:82:6a:82:be:be:50:4a:1e:
                    0a:51:c9:19:19:cc:cf:26:0f:35:ab:20:72:2a:5d:
                    43:3a:f6:f5:9b:8f:fa:b5:ba:a3:3d:b0:74:c3:b4:
                    f6:fd:fd:82:b2:f3:81:fb:d7:e8:50:69:c3:2e:37:
                    80:b1:5a:ed:06:12:f6:25:12:ea:3e:86:0a:5a:52:
                    d1:e4:51:37:06:43:d8:7c:ed:83:ca:4f:a7:3a:c1:
                    e6:d8:b1:f8:a5:0b:7b:bb:b8:bc:18:81:22:f7:3b:
                    37:f9:17:f2:1a:28:4d:ec:3f:6f:6d:09:53:03:6f:
                    df:23:35:80:1f:f3:b2:6b:9e:c6:95:40:0f:ea:17:
                    6c:17:c1:69:de:d4:34:16:19:92:8d:08:6c:f2:53:
                    b5:cc:a7:5b:9b:a4:54:7b:5b:32:17:5f:bb:79:3d:
                    f9:c6:ff:a9:69:a6:6a:8a:af:52:33:d3:c6:d1:69:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:45:37:9B:0C:68:93:3E:FC:C4:E4:78:8B:D5:A8:02:81:40:A5
            X509v3 Authority Key Identifier:
                keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:05:23:79:f9:77:62:a7:f9:36:79:54:4f:29:ea:b1:99:
         3e:f2:38:fb:e9:25:ac:55:cb:ce:99:1f:9b:19:af:c6:02:03:
         e2:88:2c:62:aa:82:64:85:53:90:98:f1:41:fc:cf:a1:ae:3d:
         bb:d6:26:04:55:13:e6:13:55:bc:d1:df:69:31:71:8a:c9:8e:
         c6:a0:87:95:bf:32:4b:83:93:87:6d:f5:98:89:90:47:f2:d0:
         b5:5a:21:a9:eb:2e:62:f7:47:66:aa:06:88:76:1a:a7:9b:ee:
         d9:f7:51:d3:ee:bd:20:d2:e4:c8:8f:62:2a:0d:2b:b7:51:93:
         f3:7f:ca:2a:f3:09:0b:4b:bb:ef:5d:f8:56:6c:5c:02:06:02:
         19:d7:31:32:20:0f:dc:51:9d:cd:7b:16:3b:9e:8a:3a:dc:fd:
         41:56:f0:c6:e7:20:75:7d:04:1d:43:70:f9:0a:b9:2d:63:ed:
         c4:16:1e:d5:ec:30:c0:b2:ac:08:59:32:c9:fc:14:24:57:04:
         4b:50:d6:82:ee:80:fa:d7:35:6a:a4:01:b6:46:3c:18:52:27:
         27:89:2f:94:0c:4f:fe:d1:6f:44:eb:99:7b:bb:13:8b:18:82:
         8a:5d:22:cd:d9:cd:7c:4c:21:0d:cb:5d:5d:7e:fc:7f:7f:27:
         f1:12:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----