Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File:                     W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier:          IE9S0Hn4t1g5RKIssq9Vr6TBQatyLt5T6Dpi/Dk2Irg=
Subject key identifier:   C1:F2:C1:91:EE:F2:90:F8:39:A2:8F:E7:9E:17:8D:A7:12:EB:5B:85
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer:       /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial:       018F885ADB09B157BDBD014AED5B800C893A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number:          0123
Signing time:             Fri 17 May 2024 21:00:06 +0000
Manifest this update:     Fri 17 May 2024 21:00:06 +0000
Manifest next update:     Sat 18 May 2024 21:00:06 +0000
Files and hashes:         1: CS52-Q5NuIZJWgCrxtQNy61Otso.roa (hash: UOEoBMWakRPcOeKt6JbAkznZMgyz3b/mORthWrZK5Sc=)
                          2: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: pLbq0BfMsISefEGKVyayX4DkNjV+eMwDCX5nprReZnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:db:09:b1:57:bd:bd:01:4a:ed:5b:80:0c:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
        Validity
            Not Before: May 17 21:00:06 2024 GMT
            Not After : May 18 21:00:06 2024 GMT
        Subject: CN=c1f2c191eef290f839a28fe79e178da712eb5b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:50:d1:7c:89:7c:49:ac:36:7e:99:88:95:
                    a2:21:3f:77:33:7a:14:e9:1f:0c:30:cf:cf:5f:9e:
                    ed:2d:f8:1b:d6:30:a5:f5:33:dc:0c:f4:b3:f5:02:
                    74:b0:46:b0:75:27:9b:93:66:92:35:16:33:07:8f:
                    6a:94:8e:7d:b0:c9:e5:54:33:56:e1:16:bf:bf:5a:
                    b0:f3:18:0a:ae:a9:d5:65:3c:61:73:a5:9d:24:23:
                    2d:7e:71:11:5e:e0:33:40:d1:21:d3:e8:c1:bf:27:
                    31:79:c8:be:a9:19:73:30:3c:55:ab:15:e3:72:94:
                    5f:48:69:0c:c8:e8:3c:96:f4:e9:66:41:dc:f8:cf:
                    ee:a3:3c:a1:b9:fc:3a:88:dc:ec:95:2b:96:1c:a2:
                    1c:36:93:5d:39:0d:65:23:03:24:55:35:37:27:b4:
                    dc:73:fb:6c:9a:84:7d:45:26:0b:96:9a:e3:2f:14:
                    f2:a2:71:97:81:45:4e:88:94:cc:0f:4d:fc:01:a0:
                    d3:a6:1d:1d:e5:9f:a4:3f:64:61:0f:ae:a1:52:62:
                    67:02:cf:4a:ef:60:c9:d6:47:c9:5c:54:b5:ef:ca:
                    e5:3f:63:ef:77:91:c0:cb:1c:e5:3f:e4:be:59:e8:
                    85:9b:83:5f:c2:0d:38:57:40:fe:9c:6b:c7:8e:b2:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:C1:91:EE:F2:90:F8:39:A2:8F:E7:9E:17:8D:A7:12:EB:5B:85
            X509v3 Authority Key Identifier:
                keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:74:4a:59:12:a6:05:81:8e:b9:90:11:d2:c9:59:e3:e8:
         7f:4a:14:64:c6:01:3c:71:d1:46:c9:7e:b3:c2:47:3e:c4:5f:
         6c:4c:18:ba:69:8d:e3:78:ea:3f:ec:5d:de:77:dd:22:d2:4b:
         d3:91:c8:c1:8f:e6:fe:aa:5b:66:9b:01:ec:30:66:e6:6f:f9:
         80:f7:5a:21:c1:df:12:8a:3e:de:a8:97:a6:79:da:dc:bc:e5:
         c2:5a:ac:c3:36:d3:63:a5:07:84:cd:c2:8f:da:06:b6:b4:8b:
         5c:08:60:d9:e4:79:8d:bc:01:37:14:02:a9:2d:97:77:84:45:
         16:eb:ae:e6:98:bd:a8:21:be:2f:5c:d5:b7:cd:8c:50:93:b2:
         36:cf:8b:60:40:d8:53:d9:65:4e:05:9e:96:fc:e6:7e:a5:fa:
         f4:43:28:ae:18:7f:1f:09:9c:2e:57:96:35:5b:5d:e5:18:2e:
         a7:b9:1c:61:de:a6:36:a7:f2:5f:c9:7e:c0:14:db:8f:02:50:
         1b:8d:2c:e8:9e:09:e6:a7:47:89:c0:ae:2f:67:06:d0:32:30:
         14:34:05:cd:b3:dd:f4:a6:d9:ee:b3:34:ec:f5:1b:e1:bd:2b:
         03:40:c4:70:b8:06:82:20:ac:98:ea:5b:1b:20:1e:d0:42:2f:
         fb:ad:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----