Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File:                     dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier:          atNP3PO+D+djDIV/0aruomEBLlSYXenh77wXxr4FCZM=
Subject key identifier:   BE:21:A2:09:12:55:1D:17:27:31:EF:3D:B9:CE:4C:5B:A6:C6:96:A3
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer:       /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial:       018F87B631D4943F2D978C70CA65A70551AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number:          0229
Signing time:             Fri 17 May 2024 18:00:15 +0000
Manifest this update:     Fri 17 May 2024 18:00:15 +0000
Manifest next update:     Sat 18 May 2024 18:00:15 +0000
Files and hashes:         1: TwO0yT1YRg6BcVZ4AowJgC9DiFo.roa (hash: S//NZrEgKa3LN4H3tVPLSdmULlJhqbqckFJCtXCinKM=)
                          2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: iYd5+daylrMOnpoY3OCNof8PmeO/wJD4dwJ0mo10eoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:31:d4:94:3f:2d:97:8c:70:ca:65:a7:05:51:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
        Validity
            Not Before: May 17 18:00:15 2024 GMT
            Not After : May 18 18:00:15 2024 GMT
        Subject: CN=be21a20912551d172731ef3db9ce4c5ba6c696a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:33:fa:cf:b7:14:54:46:da:ec:35:46:44:
                    0b:76:af:3d:1b:ca:49:a7:4d:d1:93:86:7a:57:be:
                    a3:1f:14:ad:31:d1:19:6d:ea:b6:10:e1:ab:6f:50:
                    c8:6c:97:39:c8:47:7b:21:7d:ed:47:1c:b2:67:76:
                    d8:48:b9:f0:8e:47:0d:fb:8b:8d:d4:0c:68:35:43:
                    31:b4:17:26:91:84:93:e0:a7:0f:c6:36:5a:21:5e:
                    25:e1:12:78:4e:11:4d:6b:54:4c:f3:d6:35:99:75:
                    d5:0a:b2:f6:7e:cc:c6:47:6a:73:07:27:df:5a:5e:
                    2e:79:e1:00:ce:0c:56:6c:50:d6:83:85:2b:be:cc:
                    82:ea:fd:d6:15:a1:2e:14:06:e1:3d:cb:98:f6:3c:
                    38:61:92:ae:8e:0a:ff:5e:c1:f1:53:ab:0b:56:e8:
                    c4:5f:c4:68:56:61:be:1f:b3:2a:19:c2:2c:fa:0c:
                    b5:bc:85:e4:b8:2d:57:59:8a:ed:62:79:80:e7:c4:
                    cf:91:d4:c8:ee:41:d5:ee:b5:7f:a6:ff:5f:15:8d:
                    c7:0e:1a:c6:b9:db:3b:21:66:2b:f5:f2:06:45:d7:
                    8f:b5:2f:15:6b:48:fe:38:f9:9d:53:eb:7c:41:20:
                    f6:e7:f3:e8:61:df:f5:b2:eb:ee:ef:e0:8a:1c:2b:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:21:A2:09:12:55:1D:17:27:31:EF:3D:B9:CE:4C:5B:A6:C6:96:A3
            X509v3 Authority Key Identifier:
                keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:a9:93:a7:8d:7f:d7:c4:5c:c5:e8:24:f4:32:68:4d:e1:
         74:41:de:bc:bc:90:a4:51:ec:45:11:5e:32:e9:ff:db:c5:a9:
         c1:fe:3a:f6:f5:c9:58:c0:79:9e:d2:5b:c6:4f:fb:87:1f:89:
         13:09:95:c1:8c:90:e8:6e:da:d3:a0:2c:4c:6e:a1:f5:14:d9:
         5e:03:33:35:c1:26:f2:a7:ed:55:01:78:b2:80:c7:b3:cd:7b:
         e2:79:d5:fd:22:a3:b3:cf:75:b7:a7:f7:ae:08:f9:0f:2d:2e:
         52:46:c4:0e:21:2a:5b:86:e3:09:a5:5c:43:08:c9:00:ca:84:
         14:c2:de:c8:f3:14:9b:5d:24:db:00:e5:62:00:60:66:3f:73:
         43:20:03:a2:a0:cb:8c:5b:71:d9:dd:b9:e8:c0:5b:95:cf:99:
         6f:28:41:ec:40:ff:a8:b5:f4:92:df:f0:7b:ce:0e:39:36:e0:
         e8:91:b6:ed:22:de:cf:54:27:d4:c2:0a:ff:67:1f:96:c3:7f:
         17:7b:23:4c:a3:f4:0a:f5:2f:27:3b:a8:c4:a3:83:c1:00:ef:
         18:32:98:b9:0b:f8:43:36:d2:8b:6e:19:29:f8:bd:51:4c:68:
         c9:14:88:3e:05:f4:c9:46:1b:ad:ac:b2:64:2f:5e:e7:04:0b:
         c8:3b:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----