Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          rmKxKPbofKAJrOr1TG8zbZXf1iid3MhnDE3TVEVMmK0=
Subject key identifier:   BF:49:A9:12:67:D3:62:EF:85:EE:24:7A:13:B7:65:C7:30:A5:CD:8E
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       018F847E8110C6BB1F0996AFD8FF4026D4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0614
Signing time:             Fri 17 May 2024 03:00:34 +0000
Manifest this update:     Fri 17 May 2024 03:00:34 +0000
Manifest next update:     Sat 18 May 2024 03:00:34 +0000
Files and hashes:         1: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: Xzvf2/YZh5tvv8sjGf5An5i5WFpwRyxltQj/TwnP1F4=)
                          2: PI-sASY5J4dnHKFcnqoum30_ibE.roa (hash: 4HdKx62Ct+8zfVHJ5qnCSXwRfU6kDhCOrnrLmVBEzJg=)
                          3: Rc2JFuK1yrGuzlv-g5AtxS8_hMk.roa (hash: /OXfxv02/cbOTsTuo4iyvpCqT0iQiLA+F5cJ1usTEVk=)
                          4: hyL735o522OD-DVW2hPvO0kTnrs.roa (hash: NWl0XrdbmmmfWpqITAUr9PZavB5keWVOhGqWwqsNSFU=)
                          5: oxKHaIyHeWBK14TG1MdJYhHDOC4.roa (hash: hv9kaxShiMVx6pxsSYm4t+A5Ct/Uzvroaag7lDakuzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:81:10:c6:bb:1f:09:96:af:d8:ff:40:26:d4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: May 17 03:00:34 2024 GMT
            Not After : May 18 03:00:34 2024 GMT
        Subject: CN=bf49a91267d362ef85ee247a13b765c730a5cd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:18:cd:8a:49:86:b5:ea:0b:8e:22:0f:10:
                    8f:0b:ed:bd:bb:de:ee:38:9f:0b:29:9d:00:da:12:
                    ea:6c:99:ec:ef:62:ed:c3:e8:d4:66:7d:00:11:d2:
                    12:0a:ee:29:1e:a0:50:c5:8c:e1:30:0f:85:b9:70:
                    76:39:e8:a7:0c:2c:08:2f:63:6a:fd:aa:68:c6:4c:
                    f4:64:b8:63:ab:b8:cf:d6:a1:22:45:67:8c:3b:66:
                    a6:c4:75:10:26:9f:38:78:ec:63:8a:44:54:2a:9e:
                    68:29:78:4b:ad:75:67:9e:44:31:35:cb:a2:ed:1e:
                    22:5e:5d:c4:25:2e:08:c1:19:84:b9:4a:20:35:bb:
                    2f:0b:53:75:b4:33:be:63:bb:f9:a2:50:5c:e9:e0:
                    7d:14:6c:aa:94:67:a7:da:76:bb:3c:31:13:61:99:
                    e5:6b:9b:c7:58:d8:a8:e5:86:e4:17:7d:34:7a:ca:
                    af:db:6a:ed:7a:fa:a2:01:2e:bc:63:00:2a:f9:4e:
                    79:dc:b6:db:7e:51:76:44:9d:7a:7c:29:5a:40:b8:
                    01:16:e8:c9:13:4c:0e:3f:d6:1d:d7:0f:4c:a0:92:
                    56:41:7c:d4:06:0a:f0:06:12:c0:1b:ea:6b:5a:45:
                    6c:6d:00:0c:c1:f5:f9:2f:c6:e9:2c:5e:75:c1:84:
                    ab:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:A9:12:67:D3:62:EF:85:EE:24:7A:13:B7:65:C7:30:A5:CD:8E
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:71:4f:fd:6e:d7:cf:5a:42:b3:74:01:b5:03:cc:b3:b3:76:
         0d:14:6e:cd:70:27:c5:20:68:51:ff:13:3b:5b:6a:60:91:ce:
         a3:6a:cc:3e:32:95:ee:65:29:22:cc:92:66:4b:a2:97:33:43:
         1c:e3:97:2a:b2:2b:74:7c:31:ae:c7:17:37:cc:8b:75:e3:a3:
         9a:71:ba:1f:24:dc:b8:f0:4a:a8:c1:f2:a2:a4:f4:59:08:13:
         e5:0e:60:8d:f1:f8:9a:65:ce:a5:d0:f9:d8:20:8a:3c:7d:3f:
         58:23:19:e1:48:18:9d:7f:09:b7:11:fe:2b:4f:fb:fb:c7:f1:
         3b:f3:13:02:34:e5:54:fe:9a:cf:b0:58:6d:b1:09:92:a9:9c:
         61:73:e7:e5:d8:d8:b1:7b:99:d7:51:b3:71:de:4a:ef:60:1b:
         9e:82:6d:d5:34:33:ec:50:e1:60:89:a0:fc:2a:a7:5e:16:68:
         cb:b4:d0:36:71:c6:e1:af:8a:33:97:d0:b4:59:e3:8b:f3:e6:
         cc:ab:1b:01:a5:84:c8:9e:58:ef:91:0b:eb:b5:9b:dc:45:eb:
         5b:0d:43:0c:c9:bd:27:ce:53:a4:c0:28:bf:bf:f6:8b:fa:0d:
         84:a6:08:e6:0c:fc:90:e1:56:9e:50:70:16:33:16:58:bc:b2:
         2e:84:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----