Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File:                     UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier:          pX3IZFLH2YqGFboWr/UHLDALKZjOn+jHkhvbAVkzpZg=
Subject key identifier:   8A:84:2B:54:18:89:6F:87:53:0D:73:46:20:1A:D8:46:DB:FC:4E:70
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer:       /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial:       0195124724B7C94C42965232FEE417E7349F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number:          0310
Signing time:             Mon 17 Feb 2025 05:00:06 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:06 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:06 +0000
Files and hashes:         1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
                          2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: cgncngib+o2xa3gLF9C/eedxdc8rSVyN+H9z8aAlrco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:24:b7:c9:4c:42:96:52:32:fe:e4:17:e7:34:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
        Validity
            Not Before: Feb 17 05:00:06 2025 GMT
            Not After : Feb 18 05:00:06 2025 GMT
        Subject: CN=8a842b5418896f87530d7346201ad846dbfc4e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:c3:7e:4e:f8:d7:e9:05:76:91:16:9a:02:
                    89:c3:b1:ab:ba:8e:f5:78:f3:3a:33:85:90:f6:6f:
                    1f:30:e5:c7:de:c3:43:8a:30:5a:31:a9:41:fc:48:
                    d6:e0:4b:a9:c2:cb:31:91:5b:03:3a:4f:16:fa:44:
                    50:5a:c7:82:09:d9:76:2e:d4:8a:ff:56:dc:c9:1a:
                    6c:b0:64:28:5f:81:65:b5:73:b6:43:2d:9f:3c:c7:
                    52:c3:ec:f4:53:64:b1:a0:8c:94:d9:ff:ae:ec:03:
                    8f:41:8c:bf:ae:42:92:d7:80:0b:f6:9b:67:07:7f:
                    dc:fa:b0:ee:16:ab:e0:d8:32:d2:83:78:c0:cb:b9:
                    13:57:29:3e:81:3c:95:54:25:ba:4c:b1:07:8b:f9:
                    11:4a:ab:f7:6b:05:76:d8:6f:64:45:3c:68:0a:63:
                    71:c7:84:26:74:33:33:42:28:44:ff:34:6c:ad:14:
                    e5:d8:a3:08:1f:bc:50:3b:e7:fe:a4:e4:9b:19:f8:
                    5f:bf:05:29:b3:f8:86:4e:03:51:57:c6:3c:7e:f6:
                    40:2a:84:64:83:02:a8:0e:35:fd:af:ce:93:30:96:
                    06:af:c0:29:49:7d:3a:6f:89:eb:26:20:69:7e:66:
                    9e:d4:6e:55:d4:ee:ac:f7:a8:31:bb:1f:db:b3:5f:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:84:2B:54:18:89:6F:87:53:0D:73:46:20:1A:D8:46:DB:FC:4E:70
            X509v3 Authority Key Identifier:
                keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:87:b7:1e:7f:9d:b5:f4:30:04:db:b4:c8:e1:4b:f2:c6:
         a2:52:1f:7c:b0:65:94:4b:1a:e8:de:56:73:08:12:16:ba:51:
         55:38:2b:1b:e0:29:93:40:3f:ef:cb:ca:eb:f6:8b:64:59:c0:
         e1:2c:d3:33:d6:dc:82:32:ce:05:0a:d8:b3:4f:ca:47:3f:0d:
         a3:b4:3d:2e:c6:03:12:80:9b:2d:3b:c9:20:d3:60:44:7e:4b:
         f7:f5:d9:c5:12:66:a1:80:0f:74:31:19:db:19:58:91:59:66:
         8e:16:ac:9f:af:5f:e8:a2:44:f0:ef:8f:68:e7:b7:0b:39:b9:
         17:b2:35:19:1b:32:ed:34:57:77:ce:2e:b7:13:bc:d4:11:70:
         a7:f5:df:83:f5:1f:7c:3e:a4:2e:ff:61:90:ba:78:5e:6a:68:
         d6:c2:39:a5:ae:cf:f1:86:f9:b6:47:91:de:96:5f:61:6f:6c:
         94:eb:bf:96:10:2b:b7:30:95:64:a0:01:e7:78:31:47:0f:8c:
         fe:6d:cd:3a:de:52:27:09:40:42:9c:79:26:ae:df:8d:35:94:
         ea:ae:3c:4a:aa:ce:f1:fb:21:04:1f:46:fe:2c:66:42:66:bf:
         81:82:d3:7d:81:19:e8:76:a6:af:3f:d1:eb:4b:4c:91:30:6e:
         e7:d0:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:43 2025 by rpki-client