Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          kgsTNMtpI/qP85+T0FTAsU0SE0/l1EobrflIXpzjJiA=
Subject key identifier:   2E:83:64:78:12:4C:94:03:C7:E3:A9:7C:B5:E9:F3:BD:46:2F:84:80
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       0191F9A2F5DA988EEA5D48CC723C9FB37587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          0183
Signing time:             Mon 16 Sep 2024 07:01:32 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:32 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:32 +0000
Files and hashes:         1: BeXILkXb1WfJiV1XZIMafDdt0g4.roa (hash: METyn6pfRbiAcAegPEmWPmyK6uvX8YEtt4IffjKeRnk=)
                          2: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: g95eLnnAIGdANLuR4RPTLYOd/gJX62EiALz7WV/6blw=)
                          3: PCoH-gPZ26KtF3c-zUPLxurErEM.roa (hash: CBlAdEfhMvPDfcZlIfNM68185kTCC2cg6gslzv0Dqck=)
                          4: TnwZqhoWRBpOFQo36yKRT-Al1x4.roa (hash: e9mfISG8tmeM2RIvlBxbSWi52taMc1UhJFij8dEb8xQ=)
                          5: qu7da_cxFYITB5hEM0BZhGt_TMA.roa (hash: cI5a+Bh4qv++e8pyzekZJFY8urQefEwcI6EYeOVpDeU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:f5:da:98:8e:ea:5d:48:cc:72:3c:9f:b3:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Sep 16 07:01:32 2024 GMT
            Not After : Sep 17 07:01:32 2024 GMT
        Subject: CN=2e836478124c9403c7e3a97cb5e9f3bd462f8480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:6e:27:74:7c:3b:ad:b4:37:26:83:ee:48:
                    31:d0:fb:86:a7:7b:7c:05:f4:30:8d:38:47:51:18:
                    b2:52:51:5a:10:f5:f6:96:29:42:4d:ff:51:d6:5a:
                    68:01:b1:93:72:6e:78:0f:49:d1:37:ad:b9:60:9c:
                    e1:29:d4:b4:e5:3a:e8:97:5c:78:e2:28:a3:38:ac:
                    fd:bc:c0:2d:85:b0:fe:09:64:0d:4a:b8:ae:85:c9:
                    7c:90:c2:83:22:f0:79:7f:e8:a7:5c:4d:dd:43:49:
                    1b:aa:10:cd:34:d9:d3:17:24:70:3f:91:0a:d5:cc:
                    77:de:d9:d2:14:2d:f0:ed:f9:69:da:a1:d4:77:90:
                    7c:3f:c9:56:64:0c:24:85:18:59:48:74:9a:67:d4:
                    4b:04:fd:bf:f1:38:77:82:a7:89:ca:d3:21:ed:7e:
                    15:26:74:d3:7f:56:dc:e4:a3:3a:23:76:c5:4f:69:
                    b8:e3:40:3d:78:b3:55:f8:bf:24:0b:d5:65:35:6a:
                    b7:f4:1f:39:15:97:11:97:03:c6:e6:cc:0f:1f:72:
                    f7:e1:00:2f:8b:da:31:b9:19:c9:69:cb:ca:b2:a9:
                    f3:c4:e8:97:c8:a8:77:ee:4e:82:5a:b7:0d:39:d1:
                    04:18:78:78:ea:b5:e8:16:d9:16:7b:62:87:5d:09:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:64:78:12:4C:94:03:C7:E3:A9:7C:B5:E9:F3:BD:46:2F:84:80
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:5c:3d:74:ab:06:46:07:7a:98:e9:c1:af:30:87:32:53:
         f6:8e:f2:bf:c4:3a:c8:9c:59:fa:f6:bf:4b:c2:1f:72:39:74:
         57:17:40:cd:dd:24:66:a4:a6:99:ce:e4:ff:01:8e:68:d0:9e:
         a3:6e:a4:82:9d:dd:18:11:c8:77:e0:e4:20:4c:6d:17:0b:71:
         51:82:ee:48:28:11:ee:74:eb:42:03:d1:d7:be:6b:9f:be:f8:
         4b:fa:32:90:f8:b7:64:1c:e5:36:c1:81:51:5b:67:cb:4c:f0:
         b3:38:41:7b:ab:fb:b9:7a:f6:d3:b8:8f:7e:64:3f:be:2d:ac:
         b1:27:55:39:d6:b2:5c:ba:18:de:a2:55:2d:2d:92:43:26:da:
         12:97:20:14:2d:43:d2:7f:51:9c:36:1d:b3:dc:bd:55:f8:b7:
         0d:4f:c2:11:07:ae:61:3d:3d:b0:32:52:54:63:83:97:98:aa:
         4e:12:d7:c5:4c:8b:1e:24:d9:40:88:a2:dc:f9:59:a0:65:b3:
         08:77:0d:8a:62:d6:c0:0f:9b:d1:60:a2:b6:b9:93:97:40:c3:
         d6:7d:55:8a:81:58:61:5a:42:c2:23:cd:1b:7b:a8:f9:c1:4a:
         ae:b4:c7:0e:52:32:f0:e6:25:bf:82:3d:e1:ea:96:55:e0:6c:
         e3:47:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----