Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File:                     vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier:          wCmObEq/qWFk8XXjacWrhyUVha/bzg5BMlr5U2eP/6c=
Subject key identifier:   F6:15:59:59:47:AE:5E:AA:B7:BA:4D:C2:BD:B4:9D:28:10:C3:5E:FA
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer:       /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial:       018F87B6C06AD314DDC660ED7F2ADDBBD83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number:          0C4C
Signing time:             Fri 17 May 2024 18:00:51 +0000
Manifest this update:     Fri 17 May 2024 18:00:51 +0000
Manifest next update:     Sat 18 May 2024 18:00:51 +0000
Files and hashes:         1: 1ciI79KYHCe2Vo4qE38XSx28Yrs.roa (hash: x7alw0dP5Q2mfJ4KyR2Cj6RNJoPmF5BoAqTmHel+jhc=)
                          2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: /wNxBbjvJo4dqU/lHmF4IJSvtnhlsYOrN9l81EpIn5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c0:6a:d3:14:dd:c6:60:ed:7f:2a:dd:bb:d8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
        Validity
            Not Before: May 17 18:00:51 2024 GMT
            Not After : May 18 18:00:51 2024 GMT
        Subject: CN=f615595947ae5eaab7ba4dc2bdb49d2810c35efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:a3:a1:f0:6e:fb:a3:8b:c6:83:32:76:d6:
                    e3:4d:04:95:87:6e:59:89:2b:99:d1:ac:97:56:d7:
                    73:66:22:d9:9a:d9:e4:3c:a2:f1:fe:60:11:a6:d1:
                    79:69:2c:b0:cc:6b:34:bc:c1:20:84:e1:dd:a8:19:
                    55:d7:b9:9f:7a:89:de:f7:0c:37:da:33:80:9e:62:
                    3e:ad:ec:83:fa:ee:28:b3:e2:92:32:62:03:56:84:
                    1d:95:08:ed:20:6b:80:e0:85:f3:20:3e:db:4c:17:
                    2a:ad:ba:52:bd:51:4d:7d:45:eb:3a:67:a2:6d:b3:
                    a0:eb:34:3d:f6:26:28:28:48:49:51:3b:5e:0b:51:
                    aa:04:c4:1c:0c:07:b5:5b:23:5d:c6:59:a4:50:d9:
                    4f:51:71:a9:3c:28:fa:64:3c:a7:eb:bd:ce:aa:2e:
                    69:d1:5b:1a:10:ed:fa:9c:0e:3b:97:bf:aa:56:aa:
                    b2:6e:53:06:2a:fa:85:36:94:c4:75:8a:b5:f1:bf:
                    37:9d:dc:35:4b:da:1b:36:88:ad:26:cd:a9:06:e1:
                    0f:c6:a7:1b:b6:fa:29:2a:8c:6b:ec:e9:1e:2b:b3:
                    eb:f0:84:2d:b5:48:0f:40:2b:9a:f7:a3:b1:28:e8:
                    2c:3e:70:8e:89:48:4c:cd:2e:28:3d:0d:72:5a:77:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:15:59:59:47:AE:5E:AA:B7:BA:4D:C2:BD:B4:9D:28:10:C3:5E:FA
            X509v3 Authority Key Identifier:
                keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:fd:ce:86:a0:e2:17:c4:69:e0:ed:bd:83:47:e4:64:18:
         60:35:a1:07:bd:8f:be:45:bb:72:ae:1a:93:5b:9b:82:d4:84:
         d9:1c:70:08:54:a7:09:54:ec:76:eb:96:7e:2e:32:15:7d:bb:
         66:1f:25:06:7a:57:18:4d:a5:17:16:7c:68:b3:c3:24:ff:a3:
         ae:f7:4c:88:6d:4f:be:6f:d6:87:6e:ba:92:15:3f:34:1d:cf:
         0c:66:dd:c2:d1:13:58:6f:00:b2:50:99:5f:3f:43:3f:48:5f:
         56:27:f6:62:5e:cf:02:91:75:e6:13:fe:a3:c5:66:c9:c6:3e:
         d9:f3:1a:7e:aa:c9:af:23:63:ac:4d:f9:34:f8:87:94:c6:1e:
         b8:47:ff:e5:b3:66:92:0a:65:03:e2:4c:37:36:f1:e5:7b:2d:
         d3:fc:f3:b4:d8:52:f5:6a:ad:82:96:e1:c6:cf:86:8d:3e:d1:
         76:99:f3:5b:b3:b7:ec:5b:26:55:88:59:cc:2e:6c:65:f1:41:
         38:ae:c1:3e:99:f0:27:5e:92:a5:a5:52:bd:9f:81:22:2e:e4:
         dc:2e:a8:2f:7b:f2:6f:6a:5e:32:0f:81:bb:1f:e9:65:47:33:
         0f:3e:e0:e3:7d:35:7d:26:93:5f:a3:be:2e:1d:a2:9b:12:be:
         dd:57:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----