Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          wsEYB2SC+jEwrSnUyyHK621e5UPJQq6IHjojzsls4HI=
Subject key identifier:   89:68:39:5C:3B:F3:9A:1D:50:B8:C3:33:10:4D:E4:EB:BC:11:06:BC
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       018F847E690D4FF1CF6A406A6E105BE0D2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          B5
Signing time:             Fri 17 May 2024 03:00:27 +0000
Manifest this update:     Fri 17 May 2024 03:00:27 +0000
Manifest next update:     Sat 18 May 2024 03:00:27 +0000
Files and hashes:         1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: IZIjjEWdRzKMv7ugror+eRn/gkVECVqrtsSi4roqJ58=)
                          2: Pw99qaPGE-O_9hvPt3lYLi0DI4w.roa (hash: pi1Q6xYVVZGgwHmdNH26n5UfccjGbEggpTMp6ztU5rE=)
                          3: h1HXoXeXgh4-C1qt-68wYZac9Yw.roa (hash: Afh/pQ9Nh5SMiDBzfCRxpgodnqjYLz6W3d+MAuVtEH0=)
                          4: lOWhuT2wspOqsmJ_3czX6YnzIs0.roa (hash: wjDvnQpmU3pgt2OwVbvOIPlgADN0CFCx0ieS1pnOiBU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:69:0d:4f:f1:cf:6a:40:6a:6e:10:5b:e0:d2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: May 17 03:00:27 2024 GMT
            Not After : May 18 03:00:27 2024 GMT
        Subject: CN=8968395c3bf39a1d50b8c333104de4ebbc1106bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:c9:d5:08:e4:b7:a2:82:9d:61:76:ec:d7:
                    18:61:52:b8:c0:5a:dd:80:7a:7b:4f:f0:d2:50:71:
                    c4:52:d6:20:09:36:3f:5e:04:1f:6b:58:d6:82:65:
                    a1:fb:f5:a0:b3:72:29:d3:17:de:d4:e1:22:3e:26:
                    63:ce:c5:f7:ed:0c:95:69:17:9f:36:7c:59:f5:95:
                    18:3e:00:cf:74:85:c4:29:59:e2:bb:96:45:57:ce:
                    b9:2d:e8:61:f0:53:93:9c:7e:d2:7c:ab:bc:4f:7d:
                    4b:c0:2b:67:e2:df:6d:a2:d0:dd:75:03:a9:29:60:
                    83:40:27:d1:9f:19:83:95:e4:50:fd:07:23:5f:2d:
                    fc:34:55:a7:90:7a:31:e5:e1:5c:06:54:8f:e5:1f:
                    5b:6a:cb:a0:2e:87:57:5f:37:fd:24:06:fe:b3:da:
                    ee:05:3b:5e:e3:c0:95:2a:25:06:59:ce:b7:9a:ec:
                    c6:e2:6d:73:06:6c:30:2d:10:d9:32:59:02:3b:a0:
                    6e:0d:0b:c3:9a:35:92:79:a5:d4:70:2d:95:37:04:
                    5e:28:0e:a5:de:0f:3b:34:9a:25:d9:52:71:15:14:
                    26:97:3e:e7:7e:cd:5b:fa:c9:45:a7:47:2e:bc:fe:
                    69:2e:6b:a9:59:07:d8:76:a1:7f:14:e1:32:47:58:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:39:5C:3B:F3:9A:1D:50:B8:C3:33:10:4D:E4:EB:BC:11:06:BC
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:22:94:93:2d:24:a0:88:80:8a:0f:77:26:11:7f:00:a2:
         ed:c8:60:28:09:5b:36:e5:34:bc:47:22:bc:e2:68:33:bb:c1:
         d5:96:75:81:bf:16:65:38:59:28:88:f1:ea:18:92:11:77:cd:
         f2:43:c6:c2:8e:8f:10:df:8b:54:44:f9:40:53:2b:42:8b:65:
         51:66:36:07:3c:99:0d:da:fa:9b:9f:dd:07:e4:07:81:54:3f:
         f3:8d:25:cf:39:18:b0:79:24:c9:c8:65:46:7b:d9:99:8f:fb:
         84:79:b9:93:20:ae:4c:a9:01:78:aa:c9:18:56:df:97:9d:f1:
         82:12:c2:33:bc:17:58:02:e4:6e:4f:8e:13:ba:fe:fc:f5:10:
         cf:eb:a3:cf:f6:03:2c:5c:5e:bc:72:d6:0e:a3:55:31:51:5b:
         ee:f3:2c:d3:d3:0a:f1:e7:23:38:a6:a7:93:2d:91:f7:dd:ed:
         44:e2:53:be:a5:57:cb:91:cd:91:a6:e3:1b:d5:47:bc:dc:be:
         2f:0d:9d:8f:be:2c:5c:d4:53:0f:02:39:f4:e3:0d:7c:b1:58:
         2e:36:f1:02:39:f0:c8:4d:0d:db:bf:04:b9:2f:3d:62:cb:a6:
         6b:fe:49:1e:82:2b:53:ca:8b:94:c3:d7:0e:f5:43:90:90:79:
         7e:28:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----