Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File:                     EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier:          xJLKZ5x7jBZSrBa9ghYmp9RpYAeP9rgseUV4NaQ+nNE=
Subject key identifier:   F9:1C:55:1C:2D:8D:2C:F6:64:ED:75:70:1E:99:D1:0B:55:FA:50:A6
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer:       /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial:       018F7E0ED4FD69BF721B4CBDF46347953109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number:          0967
Signing time:             Wed 15 May 2024 21:00:52 +0000
Manifest this update:     Wed 15 May 2024 21:00:52 +0000
Manifest next update:     Thu 16 May 2024 21:00:52 +0000
Files and hashes:         1: 4kCJv_yP6W1pc11rTza9_OFmh3Y.roa (hash: tubiL/9o3q/ung2y+axRSBDr82C3o82q/ZXn9cvrhC4=)
                          2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: gDWVhQvG08Zh8q08Ie/viWdW3J+5Q2W3FO39p3uW6Vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7e:0e:d4:fd:69:bf:72:1b:4c:bd:f4:63:47:95:31:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
        Validity
            Not Before: May 15 21:00:52 2024 GMT
            Not After : May 16 21:00:52 2024 GMT
        Subject: CN=f91c551c2d8d2cf664ed75701e99d10b55fa50a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:87:f4:05:83:50:9b:76:35:d5:f3:67:42:
                    98:5e:0e:22:c7:35:e7:6d:32:7c:8b:54:b0:79:65:
                    a2:ec:b6:8d:2a:19:9c:9a:05:64:7f:74:60:cb:b4:
                    9b:15:90:64:4e:7e:95:a8:42:7d:cd:88:71:0b:ca:
                    69:fc:26:7a:d4:88:a9:55:78:89:fb:42:c3:b7:c9:
                    fd:c6:d1:ae:96:b2:72:2f:ae:e0:11:df:b9:37:bc:
                    ef:6f:43:97:9a:35:7f:2e:b7:9d:f9:84:fd:3e:4d:
                    c5:39:db:b3:59:ce:f2:5e:ae:35:ad:13:b1:4a:0d:
                    e2:59:a9:b0:79:58:2d:3f:b0:e4:1c:c6:e7:a1:a2:
                    c5:af:d0:26:63:ac:4a:dc:64:6f:66:43:47:71:8e:
                    03:9b:8c:6b:44:82:5f:37:a9:5f:64:78:4c:09:1f:
                    35:43:92:33:33:27:3b:82:99:3d:ab:72:55:a7:e3:
                    cb:91:27:18:b5:01:5f:a3:ad:b6:00:f6:bc:d1:f2:
                    8b:bb:fe:fd:af:14:13:71:fd:d9:64:37:db:d9:03:
                    cd:26:97:cf:ea:66:b1:f0:c6:37:49:c2:26:6d:4d:
                    0a:b5:41:3b:d3:4b:b8:4f:3a:2b:43:6b:6f:4a:2d:
                    7d:66:fb:86:44:67:ad:3d:c0:ce:fc:a5:ae:09:d8:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:55:1C:2D:8D:2C:F6:64:ED:75:70:1E:99:D1:0B:55:FA:50:A6
            X509v3 Authority Key Identifier:
                keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:d7:7a:73:42:4c:57:39:13:02:7d:07:f2:3f:a4:29:1c:
         42:a0:97:2b:03:4f:fd:f4:bb:85:2e:50:7c:c8:1d:4e:54:ff:
         5d:b5:2c:5a:3a:31:9b:a0:0a:8b:64:40:83:aa:8a:1d:65:1c:
         1e:a7:16:6c:cd:bc:14:16:e9:bd:7e:ec:d4:f5:27:97:84:7a:
         67:c2:1b:1f:91:c3:f5:7d:c2:c4:b1:f3:81:b1:7c:e5:25:85:
         41:a4:08:b8:d6:73:97:2a:5e:fc:73:33:92:9e:7d:14:62:03:
         d2:8f:4d:60:51:c7:08:45:18:0d:04:dc:4f:d6:4b:cd:81:b2:
         1b:22:c3:bd:43:d5:d4:05:42:14:c0:28:a0:e1:e8:ef:4a:91:
         cb:5a:18:3f:20:1b:4e:74:f0:50:00:f6:cb:4d:22:10:36:1c:
         ab:ee:13:cb:18:89:36:05:cb:fe:bb:d2:bf:ed:7b:88:4b:79:
         18:03:bf:91:49:96:4a:e9:c1:d5:b3:59:52:29:8f:fb:de:07:
         4a:7e:ee:cf:95:8c:2f:09:79:aa:65:bc:f3:ba:25:2b:c7:89:
         9c:dc:65:94:91:35:4c:75:5f:74:4b:72:fb:ac:1c:13:1c:d6:
         83:f5:63:b6:eb:00:25:64:eb:2c:94:aa:cc:db:62:af:e7:c6:
         b6:9a:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----