Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File:                     DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier:          ABKxBxJWQR1XqvUPMCg+CNflSPm3Pa0JSGtaWWRqpWM=
Subject key identifier:   15:21:21:14:DC:6C:88:38:2A:5D:7C:7F:EB:B6:74:B0:4A:72:57:7B
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer:       /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial:       0191FAEE3749EC1AB834C33383F03E6BFF25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number:          D7
Signing time:             Mon 16 Sep 2024 13:03:21 +0000
Manifest this update:     Mon 16 Sep 2024 13:03:21 +0000
Manifest next update:     Tue 17 Sep 2024 13:03:21 +0000
Files and hashes:         1: 2mE-ijfOKoP6FpUKbvaHQI-RUys.roa (hash: BhJHvrEu5akmef6UhIzU6EJF49l37SsGS7/6VdGJcMQ=)
                          2: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: cnY53NXXRF1XDUXrVKmmD98l0ed+Jd0/lPx9JRyQcgw=)
                          3: mlR8XcTy1SlxaFdoQ31oI1eGLFY.roa (hash: vxMWG4W9+8gRPK9Vu4qwVZpJXuaeu3SLWH9vTd63/CU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ee:37:49:ec:1a:b8:34:c3:33:83:f0:3e:6b:ff:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
        Validity
            Not Before: Sep 16 13:03:21 2024 GMT
            Not After : Sep 17 13:03:21 2024 GMT
        Subject: CN=15212114dc6c88382a5d7c7febb674b04a72577b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:0d:22:a8:25:5e:b2:b8:16:e1:fd:0a:7f:
                    50:f1:53:f6:46:53:14:f5:e1:09:31:5a:eb:79:09:
                    6e:3b:f6:fe:5e:48:f8:35:a3:c6:59:9a:44:6a:33:
                    2c:d9:ac:97:b4:a5:6a:5e:f6:ac:77:51:3d:e2:be:
                    db:c9:82:94:19:91:e2:5c:f0:31:9a:dd:a1:46:eb:
                    fd:e1:35:dd:5a:37:8e:07:04:bc:5d:dc:7e:6e:6d:
                    ad:f3:18:f0:63:3a:db:7d:52:01:df:be:78:15:57:
                    9b:c4:4e:b1:9e:83:d7:5f:68:76:c1:65:9a:7f:6d:
                    3e:84:9f:c5:29:f5:42:d8:cd:6f:68:7c:95:3b:3f:
                    ba:29:19:9f:10:81:de:3a:34:11:2a:f5:54:b2:3a:
                    87:9a:29:cd:ea:70:93:18:81:20:08:bd:62:d2:dc:
                    c4:26:3b:e7:5a:6b:0a:ea:55:01:b0:4a:c7:75:e2:
                    7d:e6:ba:27:79:7f:ec:1b:a2:99:4f:c3:0c:1a:4c:
                    d3:5d:7e:a4:d4:22:c3:fd:32:dd:38:0f:e0:98:fb:
                    96:db:a4:94:b2:29:f3:55:8b:b3:20:f8:e4:54:61:
                    cf:0b:4e:d2:83:d4:02:7d:62:63:f0:59:38:cc:78:
                    19:64:c4:09:9b:35:7c:32:e2:a9:77:a7:f4:84:8c:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:21:21:14:DC:6C:88:38:2A:5D:7C:7F:EB:B6:74:B0:4A:72:57:7B
            X509v3 Authority Key Identifier:
                keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b5:95:c2:72:f9:43:69:fd:29:25:3e:47:45:78:74:f9:be:
         3a:9d:be:3c:e5:cf:cc:fb:17:0b:a5:43:80:25:30:dd:9c:25:
         94:b0:90:d8:be:5e:90:65:02:7b:68:5e:b7:12:b9:06:de:cb:
         dd:ba:9e:77:9f:c9:69:5f:a5:90:40:dc:64:94:20:43:7b:e4:
         28:f4:9c:50:42:71:c6:35:a3:9c:6f:a8:e2:83:a8:4b:2e:2c:
         37:25:59:f3:3a:65:a0:0e:25:7e:af:70:1b:ac:33:84:7c:73:
         88:52:7a:eb:a8:fb:63:cc:4f:15:5a:d0:60:df:c2:9f:01:1f:
         f5:8b:d3:70:d1:d9:fd:3d:b4:8e:9b:c9:39:95:f6:3d:9c:fb:
         69:8b:92:eb:a8:a0:eb:1f:a8:0a:fa:96:d7:fd:c8:51:64:cc:
         c0:16:85:26:20:59:3e:e8:2a:12:a7:73:37:28:72:f1:ff:92:
         a1:96:cd:ba:58:bb:f5:cc:19:e4:fe:16:a1:ed:81:6f:05:9e:
         8a:1a:19:ec:f9:70:ca:20:bc:21:49:56:ce:a9:79:d4:b0:8c:
         6c:bf:d7:e3:93:38:c6:6b:43:5d:de:5b:a4:5f:6f:11:33:53:
         6a:cd:15:a5:22:ef:c8:05:9a:18:0b:f8:b7:67:5b:ac:1e:9b:
         04:9c:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----