Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File:                     C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier:          7WGhqEfpB2SzaYCzl6BBLL8qcVUxhBRJ2tNKgCSYYoU=
Subject key identifier:   5C:73:82:2F:79:86:48:31:C3:BF:9C:6B:B7:1E:BC:D0:4F:50:9C:30
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer:       /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial:       018F7BB3967CB19003CB0BB05A6A2FA98991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number:          1170
Signing time:             Wed 15 May 2024 10:01:57 +0000
Manifest this update:     Wed 15 May 2024 10:01:57 +0000
Manifest next update:     Thu 16 May 2024 10:01:57 +0000
Files and hashes:         1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: 1sKjdzAYDUYZ5nx3c/mTFHXAf6xNHQCSQyHxKKvhs9M=)
                          2: JDPDxy4Tei3RxbJkEDgoG4CA1eE.roa (hash: U2bquEudoAHsgvrxCRmUl6tNq+k5ra28n+erb5U8PzE=)
                          3: KeEqdxQhsWSOWZRhjZM889NGdho.roa (hash: 5ABXKA5L2b/tXDJpyrz81qCqEisGBK+nOKu/qXUSMfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b3:96:7c:b1:90:03:cb:0b:b0:5a:6a:2f:a9:89:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
        Validity
            Not Before: May 15 10:01:57 2024 GMT
            Not After : May 16 10:01:57 2024 GMT
        Subject: CN=5c73822f79864831c3bf9c6bb71ebcd04f509c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:5e:48:6d:9a:8c:3e:89:39:85:51:47:94:
                    a4:bd:25:26:c2:5d:4a:0a:65:ea:40:68:fd:06:b4:
                    af:c3:a6:6b:84:ca:b6:e4:ee:cc:91:ce:d5:7b:6d:
                    5a:12:14:6e:8b:8b:03:e9:a9:ef:c7:e5:48:0f:8d:
                    32:b6:ff:15:a7:48:0b:73:8e:59:d8:57:6d:66:37:
                    71:67:56:fa:c7:02:78:ea:6c:cc:b5:88:73:42:1b:
                    79:d8:9c:f4:2a:05:fa:ed:fe:e0:e5:18:4e:c3:00:
                    07:8c:4c:d0:b8:54:3f:da:7a:26:1d:72:0c:6b:a3:
                    f5:97:61:9a:80:8c:1e:a4:5d:a0:f1:f7:c3:ad:85:
                    6a:ba:f7:2e:cc:4e:42:d1:32:86:d2:75:96:4a:5d:
                    d4:98:75:b1:03:53:b2:09:bb:9c:e2:7e:2c:e3:11:
                    57:fb:09:91:72:84:2f:b8:f5:63:4b:ac:6c:dc:09:
                    d3:5a:0c:24:f8:45:f9:a0:fd:f8:87:59:fc:c5:99:
                    aa:a5:45:01:e6:75:e3:56:23:d0:6f:48:39:0a:fc:
                    80:eb:ff:d5:f4:a4:05:5b:07:49:2c:d6:68:e5:f5:
                    cb:f5:61:db:5b:10:2a:f2:eb:a5:ce:07:dc:04:75:
                    9b:4c:8c:df:77:1a:12:11:bd:d8:a9:d4:fd:72:e1:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:82:2F:79:86:48:31:C3:BF:9C:6B:B7:1E:BC:D0:4F:50:9C:30
            X509v3 Authority Key Identifier:
                keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:92:c3:84:1f:9e:0e:76:54:7a:60:cb:3d:99:73:69:21:
         6c:4d:64:21:d1:29:e9:20:df:cd:59:bb:06:16:72:02:99:c8:
         2f:ed:16:68:9c:eb:dd:4e:5f:7a:b8:06:ab:1d:a8:25:e6:70:
         98:82:2b:2a:68:1c:2a:3b:a8:49:28:ad:3b:b7:eb:08:6f:da:
         53:25:1c:30:cf:e9:e3:58:33:0c:52:5d:d9:bb:3c:5c:f1:02:
         07:4b:96:ec:c5:ff:b8:02:2e:73:ce:9e:c0:95:7c:2a:b2:6c:
         e4:ae:bd:f6:56:d3:71:6c:06:56:e5:84:7b:5b:6f:a7:7f:2a:
         9e:b3:9e:2e:6c:00:83:bd:a8:92:88:9c:04:b1:52:c0:e8:02:
         ab:72:fb:5e:78:03:b8:f3:55:39:3e:81:d3:d8:83:19:2b:39:
         71:d7:18:69:34:14:92:68:98:03:d5:0a:78:bd:87:aa:f4:72:
         37:34:a5:e6:f1:f5:cf:1d:e0:39:1c:f3:68:3e:bf:eb:bd:4f:
         cd:5d:b7:8c:e9:66:6d:e1:17:33:03:56:36:13:9b:09:cf:71:
         e9:98:58:1a:51:31:0f:ad:e9:cc:11:a4:b4:84:74:30:04:42:
         7b:af:f9:35:1c:e7:6c:e7:d0:9d:c6:f3:3a:b3:7b:17:c7:94:
         23:16:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----