Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File:                     eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier:          BGIi9JNazcfvBHwXMGcRHzUk9zP9akmLTSQE8xhT/7g=
Subject key identifier:   E6:56:10:DC:3B:12:96:C2:38:1D:10:1B:0D:95:D9:C5:45:38:EC:73
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer:       /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial:       0191FAB4F5C0D0BD07F37B3B9EB50B6C2627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number:          011A
Signing time:             Mon 16 Sep 2024 12:00:48 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:48 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:48 +0000
Files and hashes:         1: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: ZhLyTa/lM0cmGDAVGlDTRbbrMRmhvd2y1fEYOhl/AqU=)
                          2: s5IRxlvMo8xiVJeaYMqOUmHdfBg.roa (hash: qJdErmiify4l1mHmmkOi7MD2JkNkIwX2ifbCPQ8BhmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b4:f5:c0:d0:bd:07:f3:7b:3b:9e:b5:0b:6c:26:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
        Validity
            Not Before: Sep 16 12:00:48 2024 GMT
            Not After : Sep 17 12:00:48 2024 GMT
        Subject: CN=e65610dc3b1296c2381d101b0d95d9c54538ec73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:33:a6:55:33:78:d1:9e:7c:3d:48:31:43:cd:
                    05:b8:02:2e:07:fc:49:3f:3b:97:f5:e7:fb:11:ab:
                    7f:79:27:ca:60:02:9b:3e:1d:5d:93:57:bd:31:65:
                    44:5b:21:21:4b:a5:2a:2a:15:9c:81:f1:67:d9:ab:
                    0b:b9:63:27:c7:0f:9e:8e:ad:82:e9:f4:da:f2:86:
                    b1:d4:ad:ab:4b:b8:3f:09:c3:78:04:eb:62:0d:9b:
                    3b:39:db:a6:70:11:02:c2:38:66:a0:ad:17:ba:89:
                    e6:bf:c8:c9:e3:27:3b:46:b7:8c:b8:3a:fd:67:93:
                    d7:3a:c9:75:82:e8:cc:99:c1:85:8c:8e:e0:37:38:
                    16:0a:a1:f8:3a:69:7c:4e:31:24:19:af:97:c1:b9:
                    fb:86:93:2e:fe:54:e9:1c:74:31:b3:fc:97:c0:15:
                    dd:6c:a7:05:1a:44:34:42:54:a3:a8:22:f0:ee:75:
                    cd:7c:ed:78:4f:08:ea:3a:84:65:88:9e:e9:0a:2a:
                    64:9c:f0:a9:b1:d6:b6:ed:ec:54:28:d4:ae:f0:70:
                    ab:31:fc:23:53:f2:79:75:0f:aa:7a:a7:d8:e5:0c:
                    78:ed:62:30:57:36:ca:39:fd:b7:21:c0:e8:5d:24:
                    61:39:fd:66:0f:95:6c:31:84:23:de:4f:18:7b:df:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:10:DC:3B:12:96:C2:38:1D:10:1B:0D:95:D9:C5:45:38:EC:73
            X509v3 Authority Key Identifier:
                keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fb:3f:8f:59:d1:fd:1b:6b:ab:81:0a:b5:28:0d:e1:6a:09:
         9b:18:67:cd:15:55:13:03:af:9c:a8:a9:9d:74:a7:c4:c1:55:
         62:3f:6e:f1:85:df:75:42:c6:46:df:a1:75:17:de:85:db:b8:
         9e:05:e9:26:8d:11:b3:97:91:80:40:f3:d6:a7:ec:86:78:d9:
         24:d1:f9:90:ed:1b:23:81:bd:a2:85:ac:47:57:7e:2c:5f:a7:
         3f:27:c2:24:b9:ef:9b:df:a2:df:65:a0:7d:2a:60:41:8d:17:
         40:28:87:e9:2e:05:16:8a:7c:94:d5:99:35:cc:3c:0c:3d:f8:
         5a:1d:e4:93:76:fd:0a:52:f8:5a:85:6c:a1:e6:36:2a:14:f2:
         22:2a:83:6d:fe:fc:d4:e2:88:55:bd:2b:c6:c6:28:1c:01:4c:
         ef:58:14:09:89:2f:7c:b6:18:69:b3:fb:37:0f:33:23:9f:5d:
         19:c9:24:d5:a4:43:19:0e:8f:58:90:ec:2a:e9:ec:84:6c:7f:
         0c:5c:5a:48:30:71:2b:01:af:d4:ae:80:d5:31:f6:29:fc:80:
         de:bd:9f:b7:37:de:16:39:4c:a8:15:79:7d:04:9c:51:6c:3e:
         b2:e3:f9:18:53:75:08:6e:4a:69:8a:bb:38:ec:44:01:af:50:
         b7:85:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----