Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File:                     qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier:          VLFp7b4TK/mec/Kn6YDrXasT/JW039j+yj5uc1vOvDE=
Subject key identifier:   04:7F:76:AA:2F:C5:C1:49:C4:0F:AA:A6:48:78:15:3A:D3:46:94:BA
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       018F98ABDFC0996D8A9B55DB090B8D512FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number:          1180
Signing time:             Tue 21 May 2024 01:02:31 +0000
Manifest this update:     Tue 21 May 2024 01:02:31 +0000
Manifest next update:     Wed 22 May 2024 01:02:31 +0000
Files and hashes:         1: DiORFY4CEGoRtiKQl2Y1yFQm1Ks.roa (hash: mW0TlhU+KjDBSizFF7bKGQz/6VzX6HD0y9rd1WyhrZI=)
                          2: WkH0uGp4HoXZqUyJa4iBbr8yNuo.roa (hash: J5HOqeq//9Q4GWb0ZhzqqxYT0H8YvIEvm0MVKyPGjnY=)
                          3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: SlufCeFIMF6EbOA6sIk4Q7A6vxzFjWez+a7zxGpRpIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 01:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:df:c0:99:6d:8a:9b:55:db:09:0b:8d:51:2f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: May 21 01:02:31 2024 GMT
            Not After : May 22 01:02:31 2024 GMT
        Subject: CN=047f76aa2fc5c149c40faaa64878153ad34694ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a1:80:f8:4c:4f:07:59:eb:4c:a9:2b:e7:ee:
                    37:2c:03:4f:aa:13:b8:f3:54:a3:9b:b2:12:c4:96:
                    3e:27:34:0e:7d:28:76:68:4d:36:5c:08:56:df:13:
                    17:4e:71:ed:2c:0a:1e:5a:8a:f7:bc:cd:12:78:bd:
                    d3:b6:3e:8f:fe:02:ca:ce:0a:e9:5a:eb:07:cf:cb:
                    50:9b:1a:97:a9:be:58:68:33:ef:82:37:e9:65:bd:
                    cc:9b:74:43:24:00:8a:c4:87:66:65:95:db:ed:77:
                    3c:75:05:4d:c7:a9:46:10:99:4a:45:dc:57:86:b3:
                    99:32:95:4a:08:c5:25:32:80:4b:a1:58:c9:1c:ca:
                    5a:a9:c0:25:6d:25:54:a2:ea:83:8a:5f:9a:10:0f:
                    81:2c:25:44:6f:4a:bc:17:71:eb:97:0d:b8:c9:c4:
                    06:a4:6f:67:67:b0:c4:0f:51:d5:02:f7:fe:b8:ba:
                    3a:d9:19:b4:73:22:5a:28:36:da:60:ea:7c:b1:d4:
                    c4:ef:b3:45:7e:1a:2c:d8:2c:57:2c:ba:12:f7:02:
                    ba:cf:49:b0:16:d7:46:08:8b:cd:85:1f:b3:78:d0:
                    19:77:37:15:e8:21:bb:4d:02:11:af:38:fa:42:00:
                    e4:d6:b6:aa:b2:c1:a2:68:ba:d0:ba:13:b4:45:df:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:76:AA:2F:C5:C1:49:C4:0F:AA:A6:48:78:15:3A:D3:46:94:BA
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:82:55:74:09:6a:a3:cd:2d:07:e1:97:79:33:f7:ba:2a:
         aa:63:f3:ae:9b:01:a1:32:10:09:e6:d5:42:17:7a:fe:ad:5a:
         03:fa:20:49:2e:86:06:06:a5:f7:cc:16:7b:70:9f:70:36:6c:
         d7:97:20:78:2a:ad:a7:b6:29:5b:1d:b7:1c:8e:da:19:8e:f3:
         78:e6:89:56:a2:20:31:89:2e:82:1a:14:ed:cd:a4:ff:ec:fd:
         d0:0b:54:c3:e3:3c:c5:10:74:c0:65:89:fe:f6:4c:ba:7b:14:
         92:37:12:d1:cd:ea:5d:d2:60:78:73:13:06:61:ce:45:b1:b5:
         c6:b7:e7:f1:1a:91:c5:77:81:b7:a5:3e:ce:7d:51:69:45:ad:
         0f:45:c5:81:e7:6d:a8:88:a2:33:02:a3:90:ef:be:4d:c8:b9:
         c5:84:3b:ae:22:7d:b4:9a:53:c5:ce:75:db:d1:6c:5c:9c:d4:
         c0:34:ae:eb:5f:49:68:3b:0c:36:38:94:64:48:49:8d:bf:70:
         49:da:7d:fb:2e:db:b8:46:2f:ad:88:a1:90:68:4b:2f:4e:54:
         31:49:bb:8f:ab:5a:68:89:d7:16:e7:5d:42:79:08:b7:cc:bd:
         23:be:a7:44:f5:b7:0a:0f:7a:67:cf:b0:e5:33:d0:1c:d7:bc:
         87:75:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----