Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File:                     Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier:          y6+Im/CkRY+X2+HT7ThOg0/MjoMC3kg3LZfg/2cZm34=
Subject key identifier:   CB:D1:ED:25:98:C7:63:9C:E2:32:23:E6:47:3E:3B:58:22:7B:9E:1C
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       018F885B5EB0E722F3C49D0229C18E3C5B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number:          01B1
Signing time:             Fri 17 May 2024 21:00:40 +0000
Manifest this update:     Fri 17 May 2024 21:00:40 +0000
Manifest next update:     Sat 18 May 2024 21:00:40 +0000
Files and hashes:         1: Xf_fnJE5uPC2yERG87TqR0mZizY.roa (hash: HM0XCaTouysLiQe0ogo2d8Ku3fufT7pq0m75E1sxd54=)
                          2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: AEYzqi6q9s87J6nGHQizpYkH+qVNbcCMGsKn7uryAkw=)
                          3: f4-nGFpiPPiV5Qiatx6QJAoVIck.roa (hash: sbuG8eCydt72Ft74PJQMOfIHyMxYmeWu9pPrZcHgUrQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5e:b0:e7:22:f3:c4:9d:02:29:c1:8e:3c:5b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: May 17 21:00:40 2024 GMT
            Not After : May 18 21:00:40 2024 GMT
        Subject: CN=cbd1ed2598c7639ce23223e6473e3b58227b9e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:ca:e4:31:35:1d:c9:f6:7f:78:a2:96:b8:
                    63:ac:a1:88:d3:dc:fc:ac:e8:b7:e1:a2:85:6b:2c:
                    08:86:0c:1e:00:c0:e5:83:a6:35:24:1d:7b:59:78:
                    7d:33:d7:4d:10:82:50:80:3a:ad:4c:a5:d8:d5:21:
                    bd:6f:cd:5c:fa:a0:60:51:41:0f:f4:c9:80:05:2e:
                    05:d1:14:ad:8c:01:a7:2a:ec:4f:17:b8:35:50:9b:
                    5c:f6:5f:41:01:63:d8:60:a1:19:ad:f2:ec:ab:8a:
                    8d:dc:b5:e2:97:17:15:d2:77:fc:3a:ee:39:f5:d9:
                    e9:40:b2:ed:b8:75:2b:7d:85:c8:1a:51:6f:7b:af:
                    b9:34:84:e6:f1:87:c3:1e:fb:12:40:42:6b:31:e2:
                    0e:d2:15:53:e9:34:6e:c8:31:b2:f5:77:4b:b8:7e:
                    ff:8b:0b:fc:2d:1d:f5:c8:98:69:42:3a:9b:c6:2b:
                    5f:94:a2:37:cd:c0:2b:d8:94:3e:c4:d1:71:42:12:
                    19:88:14:12:85:3b:2b:1b:02:46:3f:17:cf:e6:21:
                    bb:2a:3c:8e:eb:52:40:d0:d7:13:b0:c4:d9:41:47:
                    e1:f2:17:6b:7f:bd:d4:6b:b5:fe:d0:51:26:1e:4f:
                    ec:92:58:2d:80:1c:89:55:e0:80:fd:de:3a:ba:e3:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:ED:25:98:C7:63:9C:E2:32:23:E6:47:3E:3B:58:22:7B:9E:1C
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:a3:d5:83:23:a7:39:5f:da:59:f1:a8:13:94:52:a7:17:
         00:d7:52:74:8c:fe:de:38:4e:ca:e7:2b:bb:85:6b:83:d9:ca:
         f9:65:73:a2:0f:e9:ea:7e:f6:85:e5:2e:f8:34:d3:0b:ce:72:
         7a:fd:30:19:fe:8c:e9:02:46:1f:9d:9c:ae:7a:8f:ba:86:e9:
         d2:4b:00:95:b5:70:c4:11:07:40:db:79:58:ce:f8:75:a4:92:
         ab:7f:41:4f:ab:42:08:db:04:d1:e4:b9:ad:5e:a3:fb:2d:0c:
         9a:af:fc:2c:b2:29:c1:b9:35:1f:2c:79:33:37:99:f3:6f:eb:
         ed:f7:a9:ba:74:43:e5:cc:c5:85:9e:8b:8e:63:74:7e:f9:d8:
         dd:b4:69:72:bb:8c:c1:46:bb:46:50:57:28:aa:89:1d:c7:d5:
         36:e0:84:bc:4a:01:ba:8d:94:f6:99:e6:11:73:27:a1:fb:47:
         29:50:c8:d3:41:7a:a6:dc:b8:53:4d:d9:91:fa:d5:2f:af:84:
         f0:48:52:78:76:20:45:36:f1:e0:e1:5b:01:75:0d:cb:42:86:
         f4:23:d7:8c:c0:35:86:21:ff:5b:ac:f0:27:b7:3c:6d:b0:ad:
         14:dd:5f:7e:bf:c1:21:5e:c2:69:3e:2b:f7:e0:54:07:1d:f6:
         88:d3:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----