Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File:                     _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier:          UMbq/xeh/j5SYHirXdMLJLyIqhFTi5fNgthukPUrQvA=
Subject key identifier:   84:7E:75:61:83:F4:40:49:76:48:F1:4C:7F:D1:BE:0C:A7:F4:6E:0C
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer:       /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial:       018F94CE4924CB6BF554394E25EA7686364E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number:          0D5C
Signing time:             Mon 20 May 2024 07:01:38 +0000
Manifest this update:     Mon 20 May 2024 07:01:38 +0000
Manifest next update:     Tue 21 May 2024 07:01:38 +0000
Files and hashes:         1: MwggX9A4oq6sPQWwjwAxysuhltU.roa (hash: Ed1xayX+bLzMdp8GzNeQJO8AYUVWFr9qRi6mbKbyybI=)
                          2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: tWmZv2gqhpeJyzCU12wqN3LkHvyNMfxHX1+7WS/KdNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:ce:49:24:cb:6b:f5:54:39:4e:25:ea:76:86:36:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
        Validity
            Not Before: May 20 07:01:38 2024 GMT
            Not After : May 21 07:01:38 2024 GMT
        Subject: CN=847e756183f440497648f14c7fd1be0ca7f46e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:45:15:79:cf:09:54:c3:c6:d6:7a:1b:7f:
                    5a:3c:b8:a6:c7:22:d2:5a:a4:44:1d:71:3a:b2:f9:
                    13:24:95:b0:63:90:b3:48:68:0d:d2:34:7b:6f:63:
                    09:90:8b:88:64:fb:49:dd:13:9b:10:8b:84:a0:da:
                    01:29:7f:b1:9f:cd:3f:79:60:76:d1:32:7e:99:1f:
                    6a:48:55:9e:2e:39:65:b7:c0:c3:0e:a6:e3:38:26:
                    d4:19:0e:af:c8:54:a8:83:2f:b8:64:d0:eb:ce:8f:
                    90:50:a2:19:7c:d0:76:5c:fa:55:29:3c:6f:3c:fb:
                    7f:30:a4:2c:7f:65:91:8d:05:3f:4b:ef:b6:75:c1:
                    a8:84:3b:0b:ef:93:92:9c:12:2f:18:36:ce:05:e4:
                    f8:cc:2f:cd:c4:57:6d:d4:54:00:53:c0:51:c7:8e:
                    c1:2d:d9:89:30:cc:4b:03:70:fa:de:47:41:cc:e4:
                    d1:0a:11:0e:cd:83:41:5b:70:5c:f7:62:48:8a:92:
                    50:71:2d:16:33:87:cb:81:41:0b:7e:8e:9c:fa:67:
                    b8:0c:8b:d0:00:d4:2b:0f:e4:2c:31:03:f4:b5:aa:
                    66:76:67:f8:c3:9b:ae:06:a9:c0:0b:ae:15:e0:a7:
                    8e:af:2b:d4:fc:bf:6a:01:fa:7f:49:e2:16:25:84:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:75:61:83:F4:40:49:76:48:F1:4C:7F:D1:BE:0C:A7:F4:6E:0C
            X509v3 Authority Key Identifier:
                keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:05:0a:e5:96:0d:df:5a:0a:af:c9:7e:15:43:02:5d:c9:
         37:c0:f6:1e:26:a3:e6:8d:d4:b5:4d:32:21:27:3c:c9:bd:a5:
         d8:0a:9e:7c:a1:25:3d:f7:7b:51:23:74:cd:30:0e:86:b2:2b:
         9a:c1:d5:1b:d0:0a:56:75:41:06:91:5a:a3:20:c9:e2:d5:67:
         1a:50:f8:9c:60:87:6b:68:0c:ca:48:25:4c:07:d1:01:50:8c:
         d3:f7:60:54:51:e9:0d:a8:4c:92:50:ca:ea:08:d5:14:e7:f1:
         20:ee:de:d5:a8:f6:38:42:d0:07:ac:c6:66:00:99:e1:b6:23:
         c2:3e:da:2b:ad:c1:bb:f4:27:7c:6a:88:73:d9:29:87:3c:7a:
         12:dd:62:6f:0c:bd:87:6a:3d:b5:f2:61:df:06:d7:61:d1:60:
         ff:b3:7c:d6:6b:27:19:49:87:d1:0f:7e:0e:1c:74:9e:ee:39:
         0b:b0:71:5c:2d:38:ec:a5:ea:da:6e:86:49:bc:d7:75:02:98:
         94:33:31:4f:b7:fc:41:7b:c9:ce:b8:20:71:7b:f1:5d:b4:96:
         4f:6d:71:da:d9:ff:3a:4c:30:50:e8:65:4e:cd:e1:ff:9b:33:
         e6:43:d8:9f:0e:98:81:5e:56:1b:01:b5:62:46:6d:92:c8:9c:
         16:94:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----