Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File:                     PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier:          prX3LySd+Ft/ZoyW9y6SGVC1e2gJkV+dE1qefw8lNTE=
Subject key identifier:   C3:1F:55:0A:1F:EF:23:55:90:B3:F8:A5:9B:A4:F6:ED:86:66:43:F9
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer:       /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial:       018F8D1510D833E2DF74EB6FAC164C9E4B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number:          0582
Signing time:             Sat 18 May 2024 19:01:58 +0000
Manifest this update:     Sat 18 May 2024 19:01:58 +0000
Manifest next update:     Sun 19 May 2024 19:01:58 +0000
Files and hashes:         1: 8kjnCJthSf69G17T3SolQ4Of9lw.roa (hash: aIGXeRP+M1+iuIJvJiPERBj4YiL7tPx+NVzpMyNAxoI=)
                          2: 9k_U0cseiz0W7VC_uLLS3bTLX6Q.roa (hash: K8IPHZbDLMnvGWmNQB2aZdoUyD0bGcTL4OBSYQ2EFbI=)
                          3: Am-Mq_jh6QaSQCkQIgDeBlKVMZk.roa (hash: iLZ/Yo3/X17+ae1J+Er5MSikvV8W7Atz10feP/Rkqrw=)
                          4: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: +G3SpLMYkPD21WNJtAhwAz1UtAJnbLvkvCYFUTi4LSM=)
                          5: UTCT1imBH0gPbFRwj2Z1eGZutKY.roa (hash: 3bURSAZ6gq5mDl5sCOImW53ftqofBGoZ55b3mikt/3s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:10:d8:33:e2:df:74:eb:6f:ac:16:4c:9e:4b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
        Validity
            Not Before: May 18 19:01:58 2024 GMT
            Not After : May 19 19:01:58 2024 GMT
        Subject: CN=c31f550a1fef235590b3f8a59ba4f6ed866643f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:68:e1:dd:48:2e:9b:e5:9f:ca:74:6e:89:
                    42:69:0e:a5:17:a2:ca:ba:c1:20:db:2b:ab:b8:53:
                    2c:2f:1e:1e:a6:96:60:75:c4:b7:5d:fc:86:99:2e:
                    9c:19:f7:91:a9:27:50:31:0b:68:d4:10:ed:17:97:
                    d7:3b:e1:fb:f1:9b:ec:5f:a8:b5:de:42:9e:33:69:
                    29:83:74:59:51:0d:f0:c7:2e:08:38:f7:d8:6e:75:
                    5c:e1:34:5a:77:88:12:9e:53:8e:d3:cf:e6:12:30:
                    c7:44:ba:59:bb:44:4a:ac:de:00:ac:07:cf:29:c3:
                    af:18:7b:5c:7a:aa:bb:96:51:21:52:72:ac:4a:34:
                    f5:75:ef:ad:f2:0e:4a:fd:1f:9b:75:06:3f:24:76:
                    1a:f6:4a:1b:4a:a8:ea:f3:5d:e7:1e:43:4d:8e:f3:
                    e5:f7:da:15:c3:bf:8a:09:fa:66:32:03:d0:ba:39:
                    58:31:0c:e0:7e:8f:47:fa:07:05:dd:f2:03:ca:83:
                    63:7b:42:29:df:31:58:45:00:dc:6f:e4:0a:40:ac:
                    a0:24:89:39:f2:7c:8f:bf:2b:04:df:c7:8a:a0:88:
                    56:59:11:70:62:27:11:5c:a1:4f:03:ae:1b:73:93:
                    d4:02:48:e3:e0:89:c5:f8:53:ae:6e:84:72:84:0b:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:55:0A:1F:EF:23:55:90:B3:F8:A5:9B:A4:F6:ED:86:66:43:F9
            X509v3 Authority Key Identifier:
                keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:79:81:81:0a:ed:dd:19:b2:83:b4:b6:c8:ab:9f:ed:18:
         86:71:0c:49:94:cc:18:06:f7:b2:cf:19:25:fd:a5:15:e7:0a:
         17:71:57:0f:9f:57:45:2f:3f:ae:88:c1:ce:a6:29:e6:60:e5:
         03:09:a9:22:69:3b:e5:d8:5e:67:d0:3c:74:45:74:de:98:c6:
         13:a6:74:64:e4:c1:a5:ae:04:55:5c:12:ec:25:2b:ff:7e:be:
         6f:c2:6c:a9:8b:57:60:d0:14:f6:d4:f5:30:fe:2a:1e:a9:ce:
         17:dc:d1:a7:eb:ea:d8:d8:06:86:c3:60:98:8e:ca:0a:79:ff:
         91:dd:bc:ac:18:5e:da:be:d1:bd:d1:bf:e2:d1:c9:f6:4c:a8:
         e2:bf:2b:9e:bd:c3:26:5e:0e:00:47:ae:7f:35:2c:f9:7e:a7:
         ba:c4:1c:12:da:fa:fe:17:a7:26:e2:bd:5f:5f:f3:4f:70:06:
         c9:12:93:0b:18:00:be:7b:ed:62:89:29:dc:9f:72:9d:da:c7:
         ab:ae:31:bb:e7:43:bc:57:65:ee:71:6f:99:e1:00:68:16:50:
         94:e5:2d:35:50:14:5b:b8:ab:b0:62:64:a2:5e:14:66:69:82:
         87:95:4d:1a:51:0d:80:73:11:e0:8f:f1:8d:7f:c3:c5:1b:54:
         7a:b1:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:03:55 2024 by rpki-client on console-fra.rpki-client.org