Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          xD/81ZIPGcJs/H8WRT4n4J3dZ4dqrj1rR1QOB8wKeNc=
Subject key identifier:   96:F8:B7:C3:8C:EC:BF:43:F7:FC:7A:1E:0E:2F:B8:96:A6:75:3E:F5
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       018F885AE39C6A5ECE76B318BF8776AAC884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          04E0
Signing time:             Fri 17 May 2024 21:00:08 +0000
Manifest this update:     Fri 17 May 2024 21:00:08 +0000
Manifest next update:     Sat 18 May 2024 21:00:08 +0000
Files and hashes:         1: Bkd4xvh2cEDvQLPYdDH7UvR4zzY.roa (hash: /JvrMzqU9yJuUb/i0vILgFNpIuS4yx2N3kiE3mPse4o=)
                          2: VIVfZbRMgzxdXvp0h5wSSJCG8Ps.roa (hash: zSBhKFCm0mZiqOC/rPqEXKWO5oyj8x5DnJQjAvWno0s=)
                          3: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: J6qIfUUwyWmZ0Ure6ehDi/Kdf6RLs82tZdXBljA474Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:e3:9c:6a:5e:ce:76:b3:18:bf:87:76:aa:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: May 17 21:00:08 2024 GMT
            Not After : May 18 21:00:08 2024 GMT
        Subject: CN=96f8b7c38cecbf43f7fc7a1e0e2fb896a6753ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:30:bd:16:66:de:d6:e3:37:12:98:83:c1:
                    51:39:79:6e:82:ae:db:2b:82:51:f7:96:68:d9:32:
                    67:a9:1c:68:7a:69:ec:78:e7:ee:b0:46:a4:57:4e:
                    b9:f9:61:22:bb:ad:55:8b:54:dc:12:92:f9:34:87:
                    6e:1e:f4:a1:23:57:a8:58:21:ff:ed:6c:7b:e1:e9:
                    4f:82:49:e5:47:bc:28:dd:b3:0f:dd:7d:04:89:11:
                    ee:ff:1e:de:6a:18:f9:15:02:71:90:8d:0f:e7:61:
                    6d:49:df:c7:98:90:55:bf:80:2d:c8:e1:f2:93:68:
                    71:ef:de:7a:8e:17:3a:22:b5:e6:ea:51:96:d4:12:
                    74:eb:ac:0d:c3:52:45:b9:a5:58:e7:54:72:d2:f9:
                    bb:c9:81:e4:e5:3c:00:a6:56:ac:a1:e8:2e:61:7f:
                    4a:7f:d3:00:00:63:d3:0a:15:81:fb:12:9e:66:1d:
                    09:a7:0b:19:c7:8f:81:9d:57:6e:1c:a2:4f:dc:c8:
                    40:be:0c:70:28:c1:b9:50:c7:31:0c:b7:63:fa:07:
                    b6:9f:ab:13:0d:35:3f:51:de:44:14:11:86:9d:94:
                    e2:b0:9d:41:2b:fb:4e:59:8c:f4:16:b6:c8:a5:a6:
                    1b:59:76:66:cf:25:34:a2:8c:c8:6f:15:c8:20:a9:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:B7:C3:8C:EC:BF:43:F7:FC:7A:1E:0E:2F:B8:96:A6:75:3E:F5
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:de:1d:52:f9:ad:b9:95:0c:ef:c4:17:4a:87:d7:3e:b1:67:
         4c:24:29:22:33:23:fe:e1:2c:2e:9a:95:01:82:e9:17:14:34:
         67:54:6e:60:65:36:8d:07:ac:b8:d0:d2:ba:be:2f:e3:e5:28:
         44:c2:14:2f:6f:ea:b6:07:93:7f:59:e8:29:12:72:36:6f:1f:
         5f:df:c8:9b:cc:80:0e:ee:d0:49:89:37:81:ee:55:b5:97:da:
         36:f7:52:ab:b8:69:20:29:ad:d4:58:0e:fb:8d:44:38:83:1c:
         72:dc:2c:53:0a:02:88:67:39:a7:ef:3e:7a:1c:1b:a2:ac:65:
         92:4b:80:e0:ac:8a:ab:c4:e2:cc:f3:ae:e0:d3:18:4d:bf:6c:
         cc:48:91:7c:c9:08:49:7b:29:c6:88:e3:ee:69:a2:0c:3e:c6:
         58:fe:e0:4c:f0:18:34:09:46:48:ec:b9:3e:b0:e3:70:df:d7:
         84:25:ed:27:ef:c1:d2:64:5b:f5:8e:00:59:08:cb:7d:78:6d:
         e0:bb:a0:1f:ac:52:e4:a6:d6:c6:ce:04:e8:31:d3:22:da:cd:
         bc:01:bb:45:81:e2:d1:61:30:8f:5e:89:15:d4:5c:af:73:32:
         49:15:3b:42:ce:73:48:0c:24:5b:b4:f4:f4:d3:d6:70:d5:1e:
         51:f2:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----