Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          JdOBf7Pfyk5myDXrZ5bWPRfjspgNOXi64bRScP16Sy4=
Subject key identifier:   36:4C:97:90:8D:5A:3C:F1:3D:37:42:28:AA:A6:CE:0D:75:17:FE:86
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       018F87B638E551E8685A9B763B5B3EA94E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          1189
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: 0_DUVB6R9gMCL1o4H_6AnUMZTaA.roa (hash: A4uJRkaEZXv6cRv1VUsX27PfGTpAtqy549A4qBZsFrg=)
                          2: PhtqNs_13-gXvpKLI4diWtwAvkU.roa (hash: FiMi0W3bFsylFJqErtYPrlsl8UHwrMW+gAWWDhWEA54=)
                          3: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: 43sHWPmQqK+5vT4fEzXRqWdGynN3+YxyhC2POxfmM7M=)
                          4: tdlVrRRPv2AjUKwceTIQIsWankk.roa (hash: yYpl4z7Lnp6Xhdy5zeCf8odc+fHQaQEijQsNMTfnfys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:38:e5:51:e8:68:5a:9b:76:3b:5b:3e:a9:4e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=364c97908d5a3cf13d374228aaa6ce0d7517fe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:c0:41:d5:bd:2c:b1:ca:66:66:39:3d:79:
                    07:7d:f8:54:e4:90:5c:f0:75:f7:cd:31:0b:88:52:
                    9d:59:73:53:a7:da:6d:16:3d:9f:30:dd:f7:3c:cf:
                    10:67:29:2a:5e:3f:65:b0:77:ca:07:4a:9e:dd:4f:
                    1e:0c:0b:e1:f2:f1:3a:e6:2e:fa:89:8a:74:7e:51:
                    00:1e:c2:17:7f:29:d6:6c:f1:21:50:6d:21:fd:7a:
                    c2:a2:e7:75:39:42:cb:24:35:20:5b:4a:ff:ad:dd:
                    96:74:b4:d2:d0:2b:d3:bc:9b:a4:3c:93:6c:20:86:
                    89:92:38:5c:73:f7:a9:e3:b3:56:32:de:0b:e1:6b:
                    17:9d:49:36:65:8d:ce:34:e8:bc:c1:a2:e4:18:3f:
                    1d:ea:0f:3f:1f:b4:a7:d4:68:28:b4:b2:6e:6b:20:
                    f9:70:18:81:4c:b0:e2:43:45:db:de:1d:b4:c7:7d:
                    8f:cb:15:22:fa:2b:26:23:c0:e6:19:44:52:c0:71:
                    ca:34:02:b1:49:68:ad:a7:ca:08:0a:eb:88:82:14:
                    a3:91:4f:75:23:e2:92:fc:76:84:b5:7e:50:c1:f9:
                    fb:9c:f5:a8:dd:63:62:40:62:d3:82:f7:19:55:d6:
                    37:33:d2:a6:08:a5:1e:9d:2a:f1:b6:00:61:1e:aa:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4C:97:90:8D:5A:3C:F1:3D:37:42:28:AA:A6:CE:0D:75:17:FE:86
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:49:cb:d2:0e:27:03:7b:d6:af:1b:ce:db:0a:16:64:eb:aa:
         ab:ec:f3:d3:62:72:04:49:32:96:04:5a:4b:b0:e3:af:d0:25:
         bc:96:c3:1b:df:58:98:d6:ed:2b:d0:17:e6:b8:69:49:03:fa:
         80:e5:e7:ec:8c:70:81:c5:cb:e7:07:35:98:db:1d:96:5d:aa:
         bf:4c:c1:12:f2:65:a2:eb:93:27:ad:e0:08:73:9a:2b:9d:e9:
         cb:b3:1c:14:75:1d:51:00:e8:22:8f:36:13:76:64:17:17:7a:
         8c:c0:98:e7:9d:15:24:69:e1:46:11:f5:24:86:63:a9:71:e0:
         0c:41:14:5b:c8:a0:00:ab:ee:a1:dc:28:44:69:90:f1:c4:90:
         1c:24:a2:84:34:11:fe:ce:c1:f3:c7:d7:06:48:f1:ae:1d:e6:
         36:80:26:7d:58:46:ec:04:9a:09:b3:d1:36:a6:9b:5a:24:fd:
         49:34:e8:76:44:7f:bb:5e:16:d4:1d:ff:db:7d:ec:35:2e:8c:
         79:8b:a4:b9:be:2a:78:df:ae:9d:dd:23:a3:c9:66:76:a0:2a:
         b5:bc:2b:ce:cf:78:c7:a9:f7:00:50:1d:ee:4c:86:a2:e8:46:
         30:d1:36:1b:e3:8c:01:89:b1:35:d0:b4:dd:29:59:e5:a9:d2:
         2b:bf:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----