Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File:                     u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier:          Qc4Mp2vXxtwPiTRum0FZucXRNO3PVVwRXU7OdH/wWUM=
Subject key identifier:   49:B4:CD:66:2B:6E:C7:6D:10:B8:84:F7:22:25:C7:66:A6:A3:41:51
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer:       /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial:       018F98AB40319CA77464D9EFC9529F7728A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number:          0E9E
Signing time:             Tue 21 May 2024 01:01:50 +0000
Manifest this update:     Tue 21 May 2024 01:01:50 +0000
Manifest next update:     Wed 22 May 2024 01:01:50 +0000
Files and hashes:         1: G3EXCjWzNbf1OUMTAU5RPsU7nWk.roa (hash: G4Xt9Jy6j0QGf2SOYxyL1n9XimHtadTCNkniTTBQGDk=)
                          2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: aGdpGJBligA3f55aRMnED+fpx8o1yGaW3X/LM5RRFJc=)
                          3: w6tXki7XyTThSkpxNr4x988KgJM.roa (hash: 69VBdr0KGUnHLsYO5nw6msSO5Q4pY/8Ppfm+lfb6xik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:40:31:9c:a7:74:64:d9:ef:c9:52:9f:77:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
        Validity
            Not Before: May 21 01:01:50 2024 GMT
            Not After : May 22 01:01:50 2024 GMT
        Subject: CN=49b4cd662b6ec76d10b884f72225c766a6a34151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:5c:7d:bd:d3:27:c7:4a:03:2e:9d:b6:c9:
                    a0:8d:48:64:82:f3:5d:24:4f:a2:59:3c:f0:70:85:
                    f9:4b:57:3c:24:24:e3:b7:70:40:64:88:c4:60:e1:
                    b2:19:61:d7:b6:7d:ac:5f:08:20:ad:13:78:23:88:
                    3e:14:85:5e:bf:97:25:f1:2d:ca:4f:a6:f7:a4:65:
                    dd:d0:27:27:37:d6:49:80:02:4e:70:fe:1e:72:a5:
                    d5:4b:39:26:07:5f:d0:25:41:91:c8:d4:af:70:d1:
                    64:9a:31:99:4a:13:21:bc:b3:46:c9:72:8d:d1:1d:
                    54:64:45:f2:15:68:d3:ca:91:85:fb:95:84:40:38:
                    b6:a1:ce:df:d2:7a:8a:fb:64:43:bb:31:48:59:98:
                    c6:6f:9b:54:44:3a:93:fe:79:a4:8d:9b:53:8b:fd:
                    e7:f5:74:04:79:cb:e1:20:17:25:7b:9f:51:35:28:
                    d7:a8:e4:60:6d:18:3c:79:5b:d0:42:8a:3c:7e:4a:
                    2b:7d:9c:85:8a:e9:b3:18:82:ac:d3:41:e6:14:e5:
                    08:13:5b:e2:62:b7:ee:4d:4b:ac:19:f1:ca:07:bb:
                    4c:e8:e3:a4:1e:64:1c:fc:f0:ae:02:fc:62:76:4d:
                    69:37:92:e3:b8:eb:3a:a1:fd:41:af:d2:81:5d:4f:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:CD:66:2B:6E:C7:6D:10:B8:84:F7:22:25:C7:66:A6:A3:41:51
            X509v3 Authority Key Identifier:
                keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:48:3f:a9:b4:a5:c6:02:10:51:41:74:46:dd:d2:2d:4a:2e:
         64:b2:14:d6:a3:95:15:b1:b5:0f:4c:84:5e:7a:43:95:29:59:
         2a:9c:63:c4:e7:f6:d7:2c:6a:19:cb:d0:32:10:90:1b:55:67:
         e0:24:45:8a:9c:34:ed:1f:4f:81:d7:8a:f0:a1:ff:55:26:38:
         d3:a9:12:f9:df:f2:fe:b3:cd:f1:f8:68:c8:49:d0:42:95:3f:
         01:67:5f:11:6b:36:8a:84:27:36:d9:ee:e4:6b:3a:b2:da:5a:
         5c:c4:3d:01:e9:cc:43:c4:6c:66:40:46:18:25:c4:79:48:24:
         bf:50:ae:7e:f9:61:88:c8:93:b9:9d:06:9f:2f:25:f9:c5:16:
         20:01:28:22:0b:47:cb:0e:60:83:c6:1f:ee:ee:39:1f:90:27:
         39:6b:69:04:71:35:4e:a8:60:60:cd:4c:18:69:7d:c0:e2:bb:
         64:8a:41:18:a2:39:63:ae:a2:cb:c1:ee:33:ac:16:b9:b7:f2:
         64:69:35:ee:28:92:42:25:9f:91:e8:0a:d9:73:ca:81:23:c2:
         e0:fc:36:90:11:0a:22:e8:33:10:35:c8:91:6d:15:cb:db:9c:
         da:02:51:aa:92:8b:c8:13:49:14:d4:92:88:d0:e8:b1:2c:d7:
         da:0e:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----