Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File:                     Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier:          /wWqvpuksnrpNRGlL/Ncr5CrK7+AQr4puYOEVj+S+ZM=
Subject key identifier:   CE:4C:0A:28:3D:5A:61:D9:03:B0:B0:4B:53:60:C0:79:2A:5D:C9:9D
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer:       /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial:       018F9B068ED360644B8455FA03E2C4FD4EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number:          08C0
Signing time:             Tue 21 May 2024 12:00:49 +0000
Manifest this update:     Tue 21 May 2024 12:00:49 +0000
Manifest next update:     Wed 22 May 2024 12:00:49 +0000
Files and hashes:         1: B-TUg9RivxI5wc4brrl3sI5aP7o.roa (hash: UYJrDbwEYVJDMOFcI6MV3L4sgpV7b8DBHTHJPZjRtSE=)
                          2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: GG6LMnnVyeZ/GHAe22wvcma8afbW25UQiu6XLWdGPqk=)
                          3: eO96Xc56Gf07DKXtF3YTkJiBUKw.roa (hash: Y/pQuGnFTDI3TgBQpf2dz+K59TvOzmK4vn632+4TieY=)
                          4: rKJYWIRx7nZ7VmKdpiVlnHAYR40.roa (hash: x6m/8SZ0sSvBt4F0Uv4qaE/MoULBNb81iIofSUs7x5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:06:8e:d3:60:64:4b:84:55:fa:03:e2:c4:fd:4e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
        Validity
            Not Before: May 21 12:00:49 2024 GMT
            Not After : May 22 12:00:49 2024 GMT
        Subject: CN=ce4c0a283d5a61d903b0b04b5360c0792a5dc99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:20:c9:9b:14:bf:82:56:19:f6:8e:3f:7a:
                    2a:6f:8a:ac:98:49:b1:f2:2f:31:bd:74:0f:76:c0:
                    37:03:f0:5c:1f:fd:9e:df:d7:67:2d:c7:04:4f:12:
                    50:2d:4e:10:6d:93:2f:3d:41:af:78:86:6d:43:68:
                    7e:37:9b:2c:a5:bc:31:60:a3:d7:7a:8a:0e:fe:c1:
                    1f:7b:0d:2c:55:df:cc:e5:84:fe:9f:aa:78:a4:f8:
                    5f:82:26:61:84:84:cc:ff:de:09:13:55:7e:90:66:
                    9d:88:5a:73:d4:cc:9d:51:db:50:38:48:94:55:93:
                    58:3a:48:cf:b9:a1:52:c9:f4:71:ec:cb:8b:9c:80:
                    c4:94:48:22:37:93:d9:5b:bf:ed:4e:6c:d4:4a:9e:
                    7f:ab:f4:0f:0d:5b:3e:18:de:66:22:ae:58:6c:a1:
                    ff:35:fa:98:11:1b:0c:c5:3f:3f:14:56:d7:2a:8b:
                    ee:fd:68:52:74:aa:99:af:e0:41:e9:31:16:2a:64:
                    ef:3a:e4:4f:e8:f4:5b:da:3c:9a:59:0b:8f:88:ce:
                    09:48:86:b3:03:3c:a8:23:83:46:5b:c6:25:fb:89:
                    fe:30:e4:81:51:07:88:57:0f:41:69:37:db:2c:6b:
                    9d:8a:be:10:09:fc:6d:8d:4e:77:37:ff:4b:3c:f5:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:0A:28:3D:5A:61:D9:03:B0:B0:4B:53:60:C0:79:2A:5D:C9:9D
            X509v3 Authority Key Identifier:
                keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:45:ba:ac:ac:fa:3c:64:d2:fc:c2:e5:43:94:01:bf:5b:65:
         c8:7a:1f:c0:29:38:ec:29:d8:8a:0f:08:e5:9a:a4:d7:36:d9:
         f9:9d:ba:87:8c:b4:02:c4:77:90:2f:0c:c0:b1:b0:0d:11:5d:
         ac:90:f0:97:42:2d:2b:69:71:58:bf:ef:ec:9c:d4:84:15:20:
         5f:0a:a4:51:4c:fe:86:40:e6:9f:33:2e:a7:b3:a7:9f:11:f2:
         c8:79:af:68:33:36:8b:0f:ad:24:1a:aa:c4:5c:eb:7e:32:46:
         01:b6:0e:04:f4:29:5a:34:35:08:b8:36:94:a0:aa:aa:35:f1:
         cf:64:fb:81:1e:18:e3:8f:9f:c0:dd:20:23:07:7e:3f:3f:71:
         1c:9d:fb:23:7b:0e:7a:6e:4c:fd:6b:81:39:f9:5f:6d:d3:2b:
         35:7f:95:58:b6:ba:3b:b5:84:b3:49:e2:30:4e:3a:49:4b:3b:
         e5:6e:0a:62:79:aa:2a:aa:57:4a:57:7f:bf:b0:83:bd:48:ae:
         c9:78:01:70:7a:51:c5:e0:c6:fa:57:26:56:f5:83:8d:f3:b1:
         f2:94:83:ee:cb:6b:7e:a5:d0:7a:63:84:ea:57:ad:c4:4b:92:
         21:5f:eb:80:f3:a6:24:f8:2a:2e:f4:24:1f:0a:0f:c7:ae:65:
         b3:85:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----