Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File:                     Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier:          F32R21GnbfesrTI0p7y7Wi0r2VvFlfPgK7ZCK89r3X4=
Subject key identifier:   29:9F:89:78:1E:FB:61:10:B2:1A:E7:35:22:C8:97:F8:DF:96:9E:EE
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer:       /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial:       018F6561F884FD957C1D63CFA1EE4A72A46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number:          07EA
Signing time:             Sat 11 May 2024 02:01:10 +0000
Manifest this update:     Sat 11 May 2024 02:01:10 +0000
Manifest next update:     Sun 12 May 2024 02:01:10 +0000
Files and hashes:         1: LZHfRehIvNu9JV8q6DX593oPAKk.roa (hash: cY/tp9s2yOxd4GQXdDZjI3iid59nT/ln+y1nhWo2hzQ=)
                          2: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: nNbORz+6Pot9GfGFRMcDcvOE8SaApv9aNUupXLIb5Yo=)
                          3: oE6VgKM6gEPtNzrDZoSVjXWrKWU.roa (hash: vcPfvnauYsYgwUVoZEf+z774d/rEE63nX0bYruykmT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:65:61:f8:84:fd:95:7c:1d:63:cf:a1:ee:4a:72:a4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
        Validity
            Not Before: May 11 02:01:10 2024 GMT
            Not After : May 12 02:01:10 2024 GMT
        Subject: CN=299f89781efb6110b21ae73522c897f8df969eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:f8:80:47:69:98:34:f1:b6:18:4b:b2:d1:
                    42:3d:c9:7d:05:6c:e1:67:ae:c6:6e:06:98:d5:d9:
                    c9:8c:d9:69:44:48:29:cf:8d:87:4f:ec:c6:d0:0a:
                    2a:48:0a:e5:0c:fb:58:5c:00:15:25:e9:4b:f6:77:
                    26:eb:34:1f:b9:a4:d5:ed:e4:0f:43:1d:cc:24:e6:
                    29:6c:e9:79:fe:92:90:c0:67:1c:ee:a2:f7:bf:a1:
                    7c:58:3f:76:a2:82:1b:86:37:20:40:2b:b0:a7:a7:
                    15:eb:73:8e:8e:e2:4e:b0:4c:c6:b4:a4:4f:f4:0d:
                    40:2a:ee:51:44:cb:12:a1:52:91:db:50:54:9a:96:
                    2c:df:70:b5:8f:af:17:0c:c8:34:6d:6a:61:c3:3a:
                    a9:ad:79:03:81:c0:67:3c:e1:4f:b8:f2:b8:28:e0:
                    81:ce:73:c8:8e:5c:12:b2:66:ef:d6:88:3d:9a:bc:
                    f7:67:5e:2e:11:42:ab:61:89:a8:3a:88:00:81:b0:
                    b4:e1:a9:61:1a:8f:bb:d4:85:d9:e3:03:4b:c6:c5:
                    be:ec:75:ba:19:a1:3b:b6:00:0d:97:39:ac:98:75:
                    5e:fe:17:75:ea:54:88:a5:5e:27:88:2d:73:cc:c2:
                    d7:b5:fb:0b:90:55:3f:0f:26:35:7c:f9:43:c1:14:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9F:89:78:1E:FB:61:10:B2:1A:E7:35:22:C8:97:F8:DF:96:9E:EE
            X509v3 Authority Key Identifier:
                keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:b8:66:bf:47:e8:a6:29:47:e5:ca:c1:7b:15:14:3c:f5:
         f6:49:94:41:3f:b9:8b:25:38:d4:cf:37:8c:b5:75:eb:c3:da:
         06:9b:73:de:42:5b:47:77:ef:68:ca:4a:96:d0:5c:60:be:d6:
         62:6e:6b:79:81:b4:47:82:4a:24:26:94:0d:64:e2:c2:00:c9:
         06:86:47:82:53:f1:b6:16:7f:a0:9d:e3:48:c7:f8:31:6f:21:
         f3:a4:e6:9a:4a:68:c9:16:57:f9:61:00:ae:45:49:ef:17:11:
         e5:91:77:91:c6:3d:e2:f5:9e:66:28:41:5b:d6:89:2d:2d:db:
         3a:72:32:0a:78:fe:2a:f5:7f:b0:20:c0:5e:ee:f1:23:fe:dd:
         d4:18:91:c9:90:fe:84:b0:58:6e:1d:24:55:f3:62:d8:b3:e3:
         22:ce:b2:40:47:28:4a:61:40:48:93:3c:34:59:bd:b6:3c:a0:
         3a:a5:5a:86:8f:bd:6a:e3:ab:7e:83:fc:ac:3c:b6:c9:59:af:
         45:29:13:41:c9:55:66:dd:c6:cb:00:4b:46:2e:ae:9e:d1:70:
         ce:69:8a:69:ae:92:19:a8:3d:b2:ee:30:2f:39:61:1a:17:d4:
         ba:52:2a:1d:e3:76:88:84:54:08:e2:81:eb:07:0a:b2:91:ee:
         8e:cd:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----