Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File:                     CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier:          Vv91Y+sNZfQIAeQ6vtERlLBudUiLDeXbt754OjlJXQk=
Subject key identifier:   FC:4B:52:A3:1D:67:E3:15:C6:FC:84:0A:B6:2F:C3:7E:EF:32:3A:38
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer:       /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial:       018F8748BB197744591A89BC47BF9A149609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number:          0273
Signing time:             Fri 17 May 2024 16:00:41 +0000
Manifest this update:     Fri 17 May 2024 16:00:41 +0000
Manifest next update:     Sat 18 May 2024 16:00:41 +0000
Files and hashes:         1: 6OXgE8owcQm91KmGn0bna3nVdPQ.roa (hash: 5hUImKOQ8fDdvozLppaJXQwPXIZz1mtKpGEsbKgOXXk=)
                          2: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: 3pfTpskV8VWNG5XuyWzEiPmJYPS/dPDk3bSOphtMiP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bb:19:77:44:59:1a:89:bc:47:bf:9a:14:96:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
        Validity
            Not Before: May 17 16:00:41 2024 GMT
            Not After : May 18 16:00:41 2024 GMT
        Subject: CN=fc4b52a31d67e315c6fc840ab62fc37eef323a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:d9:ca:fb:25:a5:6b:15:6e:b9:1d:73:63:
                    c3:2d:f7:c0:55:ae:76:0c:d7:59:27:55:8f:74:58:
                    cd:a0:c2:b5:13:4d:89:46:4a:f7:b3:fb:74:48:63:
                    1a:15:33:0d:16:98:45:93:9e:ee:cf:ba:76:a7:e7:
                    df:ca:a7:da:9a:a6:d9:be:c4:81:1b:fe:08:eb:e0:
                    e0:e7:6d:89:2a:b9:8f:61:69:13:16:d9:d5:e0:0d:
                    ae:e7:f7:7c:2f:fb:3b:5e:51:98:ad:d3:7f:fa:1e:
                    72:88:1b:9a:ab:05:fb:70:f2:9e:29:5c:dd:e2:de:
                    d2:12:a3:96:9b:b5:30:6f:ba:b6:84:70:c2:38:e2:
                    48:f9:0b:da:f3:0c:25:d2:a5:07:1b:e3:07:66:32:
                    20:e7:dd:ff:dc:7c:77:8d:fd:05:9e:e8:2c:e7:5b:
                    1f:01:45:1d:aa:ac:9d:de:6d:4d:ca:42:d4:6a:b5:
                    00:56:74:9a:73:eb:8a:b8:81:d8:c7:5b:2c:d5:7c:
                    d4:ad:9f:85:33:15:7b:43:47:e5:ca:fa:c9:95:88:
                    89:43:9f:f9:47:7f:5d:28:fa:86:07:c8:a1:b9:c6:
                    92:3c:d3:df:e6:a7:7f:85:3e:11:e7:b8:ac:3a:04:
                    c5:75:b6:d8:f1:6f:a6:ea:40:2e:e3:3a:ac:61:0c:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:52:A3:1D:67:E3:15:C6:FC:84:0A:B6:2F:C3:7E:EF:32:3A:38
            X509v3 Authority Key Identifier:
                keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:c8:ac:0a:95:a1:f2:a9:e4:e2:ee:96:77:70:41:7b:13:
         ce:da:70:df:35:3e:63:e4:48:18:7f:0c:f2:a7:95:11:03:90:
         43:52:92:0a:33:1a:46:ff:1f:34:30:55:bd:1c:f0:21:02:d3:
         30:6a:68:4a:c0:ec:cf:f2:f1:8e:0a:25:f0:3e:6b:25:df:54:
         df:9b:98:cd:ed:ed:05:cb:ce:a5:4f:6b:55:f6:61:99:3e:51:
         30:75:67:05:d1:7b:03:04:89:27:1d:f4:87:24:0f:0c:26:83:
         ef:81:87:4d:51:1c:f4:77:5f:89:8c:e6:0f:39:8c:30:ee:da:
         49:8e:54:7d:1f:c3:b9:b7:c7:a8:e3:02:f1:d1:14:96:3d:55:
         5a:b1:83:e9:4f:47:ad:5f:81:89:e1:b7:c2:39:df:5d:b6:87:
         0f:c8:d4:07:29:55:87:8c:41:5b:3b:c2:20:c6:64:b0:83:5c:
         97:d2:f4:f0:8d:8e:2a:f2:6d:94:48:79:f9:82:89:2e:1d:1d:
         e0:d8:b8:df:82:ca:1a:25:ff:c9:f9:9f:19:91:87:0a:f9:24:
         e8:15:d7:44:a9:af:2b:4b:7e:56:b3:65:f8:3d:37:1d:ae:66:
         6b:fd:b3:8c:d8:7b:dc:b2:44:78:19:e8:5f:4b:f9:72:09:e7:
         2c:9c:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:45 2024 by rpki-client on console-fra.rpki-client.org