Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File:                     tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier:          /e+dJZ8IjHSsT/+Ly0U0aFnbCe2SoHHU67rl1zETrzg=
Subject key identifier:   AF:F5:F2:24:49:EF:6F:08:DB:1F:86:EE:9C:BD:DD:A8:CB:C2:1C:2E
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer:       /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial:       0191FA4788EC9437C39E292A746EF27AC7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number:          D6
Signing time:             Mon 16 Sep 2024 10:01:17 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:17 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:17 +0000
Files and hashes:         1: 7xXy4T2TIgi-3n2fM8KROSkxbkg.roa (hash: l7gfuKpZYzgiGz1jCcTlBHIX22zYR2aQZ4mU1OZrMI4=)
                          2: ApRdPtkDGF7knufILyJUTIUrLpc.roa (hash: RcjfRtkEMwlN9U9+uIh1CUcaJ4wUNeSxRrIh2H4U7rs=)
                          3: FbbQ9dOXN04h0yA8RufdKetD_uE.roa (hash: /4kM/39HGCP5pgMRu9yAxJzRQOoWIa0uIRTZpA/Gyik=)
                          4: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: pnnzwVv6dkcaVx3z6/1/EtP0R45Q82lvKucfWR3OXCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:88:ec:94:37:c3:9e:29:2a:74:6e:f2:7a:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
        Validity
            Not Before: Sep 16 10:01:17 2024 GMT
            Not After : Sep 17 10:01:17 2024 GMT
        Subject: CN=aff5f22449ef6f08db1f86ee9cbddda8cbc21c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:d7:0a:8e:f8:82:db:5f:be:c5:17:06:42:
                    12:8b:c9:7c:dd:f0:c4:93:db:5b:1a:55:0f:94:3e:
                    2a:3a:1d:c4:7f:70:c8:74:76:3a:dd:b2:d0:5a:4f:
                    3d:1f:2b:16:1e:4d:14:33:62:a1:c8:93:96:99:47:
                    7d:9e:c8:3e:84:96:38:e8:1d:fe:2c:be:e7:72:a8:
                    15:22:29:73:f9:ad:3c:22:b7:95:69:cb:3c:cc:84:
                    d8:05:1e:d8:5f:34:a8:3a:fc:ba:be:8e:1d:1e:ff:
                    47:27:4a:57:ee:76:eb:01:f0:f0:de:99:8e:08:a9:
                    db:d2:24:e3:26:e1:21:e2:c9:d7:c8:7c:9b:a1:e0:
                    07:83:4b:81:00:fe:64:9b:7c:4a:50:22:be:6a:ec:
                    fe:aa:38:cd:cd:0c:76:c5:20:66:d3:82:72:a8:7d:
                    8c:c9:4a:ca:f8:97:d9:dd:c0:da:89:48:be:64:21:
                    52:46:55:39:f0:7f:12:13:c6:03:4b:01:a6:8d:d7:
                    b9:fc:ce:02:1e:d2:33:53:54:1f:a9:3a:e0:f5:d9:
                    34:db:8f:f1:37:42:99:4d:4f:ef:69:c9:6b:ff:64:
                    57:ef:bc:93:2f:b6:e7:0f:d7:84:e1:1c:c7:7a:40:
                    3b:56:68:cc:23:b5:94:e3:e3:cb:08:38:99:2c:78:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:F2:24:49:EF:6F:08:DB:1F:86:EE:9C:BD:DD:A8:CB:C2:1C:2E
            X509v3 Authority Key Identifier:
                keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7c:3e:ac:54:8b:6b:0e:84:06:34:88:4e:e7:cb:74:2e:0b:
         a4:ee:4a:ae:3d:3c:dd:af:7a:c9:c3:37:d3:78:17:56:83:40:
         2a:71:f8:44:d9:ae:13:cd:8c:eb:14:35:f6:48:05:2e:ed:e9:
         76:09:4b:83:c8:c8:1c:41:9f:c0:c2:35:cc:b3:be:be:da:09:
         98:56:7e:4b:4a:2f:77:ac:f7:20:07:de:da:6c:ff:33:5e:17:
         c1:40:82:96:76:96:28:89:8c:fc:41:25:32:39:43:36:62:d3:
         58:ff:df:1a:09:2d:9c:08:2d:09:12:49:ce:44:de:c1:78:45:
         91:24:ec:89:7b:9d:33:6e:6b:0b:a4:4f:dd:07:be:e9:41:34:
         c3:8f:24:23:15:9c:7a:c8:0e:61:d6:8e:93:9e:f3:f5:1e:dd:
         6b:4e:83:f0:9f:d4:a2:cc:92:0e:ef:74:d2:40:a2:9d:b2:19:
         a2:35:7d:00:ae:1c:f2:a7:b4:9a:a0:44:b6:98:b4:d8:08:36:
         08:2f:47:7a:87:8e:7c:d4:04:2c:ae:94:18:aa:5a:38:be:f2:
         d8:3b:30:92:95:98:06:47:fd:83:32:95:a4:a3:a3:07:21:46:
         bf:49:f0:40:81:df:9f:71:19:63:52:20:4e:0d:fb:0d:c5:bb:
         af:99:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----