Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          yCoPLTiatyTzIhhLAbWr2UlItpZL4fUDXVs8zS1NYbI=
Subject key identifier:   31:51:88:F1:A8:AB:43:71:C3:0D:02:32:C5:9F:62:62:96:D3:45:71
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       018F8410A9B8872D50B7B0CD2600507A3B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 01:00:35 +0000
Manifest this update:     Fri 17 May 2024 01:00:35 +0000
Manifest next update:     Sat 18 May 2024 01:00:35 +0000
Files and hashes:         1: 1-JRrmTV1m8AhMM9EI1dhNl4GICE.roa (hash: WwKOTEUxI4jOelYINNfmqqYgQdlFWBJZ1vfdR8Z29YM=)
                          2: 82PO-bTMjGd8Mf7_lOsKuVviCQI.roa (hash: R+J+igw+3TYIug3/1zPlBRIiOxPH9LpyAfdWBOjxVYM=)
                          3: vfx78XlZiNPa--aMEoybiaP_FYc.roa (hash: ben6PYuFqd2CL+gRx55mNeAunx4qn66TTVoxPjxzVlU=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: A2h9pFtKBD+zWd8hbbHL0RUrMadkRbXY8xLgg/M4exE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:a9:b8:87:2d:50:b7:b0:cd:26:00:50:7a:3b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: May 17 01:00:35 2024 GMT
            Not After : May 18 01:00:35 2024 GMT
        Subject: CN=315188f1a8ab4371c30d0232c59f626296d34571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:9e:8c:82:b5:9c:80:84:03:f8:94:2d:33:
                    0a:86:5a:67:8e:39:2e:5c:58:91:de:58:96:3d:ca:
                    cd:b7:e3:db:73:51:a4:68:d9:12:6b:eb:b7:2e:7f:
                    0f:bd:96:7f:1b:91:30:e7:e6:31:0b:9b:18:8a:f4:
                    09:48:47:d8:72:b4:19:e4:b0:93:71:9d:bb:d1:ac:
                    60:c5:f1:35:b4:45:a4:c4:d9:94:31:46:9e:a8:c9:
                    ca:97:de:0d:6b:af:b4:73:b2:34:e3:4a:89:35:a9:
                    23:1c:07:e1:56:82:f9:76:b4:d9:e6:a3:87:ef:75:
                    da:f1:cf:f3:b3:79:41:aa:21:d4:b5:23:0b:49:f7:
                    4e:d4:93:49:bd:1c:5d:9a:bd:98:bf:f9:1b:63:4e:
                    50:9a:d6:70:14:5b:ee:d0:f9:e3:0a:7c:8e:1f:12:
                    e9:da:9f:24:cf:87:9d:b7:75:7d:e2:ca:62:25:3d:
                    0c:aa:09:c8:70:7a:a2:03:0f:aa:55:be:3a:2a:3b:
                    c7:31:63:c3:b9:d1:04:29:28:51:eb:7f:f9:42:d0:
                    65:4b:65:9b:8b:8b:a5:33:0a:c5:6d:2c:92:1c:5e:
                    ee:60:67:64:6d:14:76:be:d1:6d:47:c9:91:c7:84:
                    fd:7f:98:71:7d:ba:ac:c7:9c:6b:b6:9f:3e:22:9d:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:88:F1:A8:AB:43:71:C3:0D:02:32:C5:9F:62:62:96:D3:45:71
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:c7:47:9e:eb:9f:90:0a:1e:58:ee:b8:ad:b1:fb:02:d8:
         e2:e3:ff:4d:13:73:07:1c:03:00:78:e7:0c:d9:4a:c5:4d:80:
         ac:7a:a7:b6:c3:d2:e9:8b:fc:ab:64:18:d8:21:a9:d6:21:f9:
         35:d8:27:fb:62:fc:9f:ff:2f:1f:66:ea:d9:6e:e9:57:31:e3:
         18:27:59:f4:b4:fb:51:ae:cc:f0:e3:39:0d:e7:d3:1b:a5:32:
         bd:88:d4:bf:40:7a:5b:88:8d:fb:62:bc:75:fb:97:bf:18:63:
         58:50:7b:a1:64:07:82:33:16:d9:4b:01:93:8a:92:99:13:83:
         6c:f7:ed:1a:d3:94:85:fd:b0:42:6e:af:e9:48:54:2f:27:d1:
         eb:50:c7:d3:79:9c:80:1e:a6:91:05:54:55:1c:32:5f:29:97:
         01:7d:26:17:6f:4e:b0:99:10:6e:ea:b2:9c:99:cb:60:44:61:
         df:b3:16:2c:a3:d7:f5:88:1e:26:48:24:d3:f4:7f:cc:79:12:
         c8:bb:66:e3:e3:89:a8:27:c1:c7:32:0c:04:c4:41:e4:0c:06:
         72:2a:4c:c9:87:cc:da:31:bb:38:ea:3c:2e:09:fc:ea:0b:7e:
         7b:35:70:d9:6c:6f:c4:22:3e:42:4e:b5:c9:98:c6:bf:a1:1e:
         a0:4c:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----