Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File:                     flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier:          DRQe5ALk9j7Ua7804Ndr9OI7bLNt0n4TAPFLYwcoE+Y=
Subject key identifier:   CB:82:F8:DA:6F:72:4F:F5:12:02:C9:7F:80:C3:B4:22:C2:21:33:52
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer:       /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial:       018F88C8C1854BD5077183B29A309F9D7337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 23:00:09 +0000
Manifest this update:     Fri 17 May 2024 23:00:09 +0000
Manifest next update:     Sat 18 May 2024 23:00:09 +0000
Files and hashes:         1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: 6hwTDuQEMdpac/enamaZm/NZsFk2ZUY+p3ToH2kqGLY=)
                          2: sTG7Opp7CZ4bV-juvw_0pNpRAmg.roa (hash: VsfBYlj4k7q4LlTAlgtnBLqxN2JE/kqJ/O2Xc719GuA=)
                          3: xrVdojvso0VCroNbiq5XhdAjUVc.roa (hash: D82IYwq07/asrfGlpKcglSCToOjPK4+JlX/ueL9O870=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:c1:85:4b:d5:07:71:83:b2:9a:30:9f:9d:73:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
        Validity
            Not Before: May 17 23:00:09 2024 GMT
            Not After : May 18 23:00:09 2024 GMT
        Subject: CN=cb82f8da6f724ff51202c97f80c3b422c2213352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:91:30:ea:90:97:62:2e:f8:a3:48:71:7b:
                    24:13:e2:d2:a6:3f:99:18:84:54:44:a2:3e:a8:fb:
                    af:a6:c3:4c:87:fb:17:28:89:89:a9:ff:ab:52:4d:
                    a8:98:89:ac:86:38:31:f7:ec:6a:d8:52:c7:87:e9:
                    73:bd:e2:47:0d:5c:eb:8f:0b:1f:d4:27:52:59:c4:
                    42:4a:3f:3c:8f:fb:40:90:b5:dc:87:36:a9:ca:45:
                    7b:cd:2f:e7:2e:02:70:d0:b1:26:af:d2:e8:b8:6e:
                    db:fc:63:98:1b:0d:66:be:95:ed:9d:ae:61:a8:7c:
                    b5:a4:6d:88:c4:ee:c3:23:38:22:c4:35:4d:2e:73:
                    5c:84:32:16:25:77:26:2f:c2:fc:1d:9d:ef:97:13:
                    f0:02:27:95:fa:e7:ad:2f:8f:8c:b6:9f:d1:9d:44:
                    ad:4f:44:ad:84:e1:fd:71:16:29:e1:4a:7f:d3:df:
                    aa:fa:ed:0c:a3:b6:de:e0:2e:6b:71:82:70:f7:ec:
                    df:f8:26:c7:7a:08:42:ff:50:ce:7e:c6:65:a9:40:
                    2c:86:3e:ef:4d:03:d2:e1:dd:1d:a5:3c:dc:ea:e6:
                    63:23:34:ae:97:17:49:b5:95:b4:5c:93:53:9c:67:
                    eb:86:44:c2:8b:2c:d7:e7:7e:ad:0e:13:69:32:d7:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:F8:DA:6F:72:4F:F5:12:02:C9:7F:80:C3:B4:22:C2:21:33:52
            X509v3 Authority Key Identifier:
                keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bd:ad:f8:76:22:87:f3:77:5f:bb:0b:e5:7e:ac:5b:cb:77:
         20:0e:23:66:c2:bb:db:e8:30:87:0a:10:89:2e:e2:2c:5b:f1:
         c2:48:4a:45:73:0c:16:0f:63:f4:ef:ca:78:19:7e:2a:63:04:
         36:d9:fe:fd:a3:1f:e9:19:94:2c:62:05:2b:b7:d6:c9:db:b7:
         6a:5c:b4:a6:c4:a6:a1:de:9d:4e:f7:4a:8a:f2:29:84:0c:e8:
         09:f8:57:1c:cc:b4:db:6d:61:c2:ad:98:f2:2b:c0:27:38:44:
         0e:f7:d4:70:44:96:95:2c:4e:86:db:d5:f4:25:6b:16:6d:f2:
         db:24:c7:7a:a9:21:75:8c:a5:3f:f0:18:69:25:c5:c1:46:8b:
         92:29:97:07:52:7d:ca:23:49:dd:64:c0:fd:f4:1b:50:ad:67:
         b6:60:b2:b2:74:e1:9d:fa:c4:c1:b0:d6:3c:dd:21:ba:c5:1a:
         3d:fc:24:67:fa:45:ea:c9:52:21:66:7c:24:d7:24:4e:c0:d2:
         d1:41:ed:d5:b8:c4:1c:31:1a:b2:26:f4:4b:58:1d:0d:34:4d:
         30:54:89:41:15:6a:fc:a5:95:3b:76:16:0c:1b:70:41:3f:b6:
         ec:a8:47:09:7d:54:46:4c:05:57:a3:55:85:7c:1a:f8:58:e7:
         f5:f4:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----