Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
File:                     SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft (raw, json)
Hash identifier:          Ww2RY80dXCTBDh8KVL3lGFOtIoWDIa5AzqkQMsu6gdg=
Subject key identifier:   A4:B9:E4:52:9F:98:7D:2E:9B:C3:FD:57:0F:33:4B:F8:5B:7E:E2:3B
Authority key identifier: 4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
Certificate issuer:       /CN=4b25df8620374243e3c5eab25550af24e0eff48c
Certificate serial:       018F87B68CFF17700B6C2A6F0A8E7A4A899B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
Manifest number:          088F
Signing time:             Fri 17 May 2024 18:00:38 +0000
Manifest this update:     Fri 17 May 2024 18:00:38 +0000
Manifest next update:     Sat 18 May 2024 18:00:38 +0000
Files and hashes:         1: PJqvfoxrY9TUKPALlbiy9-3SaoY.roa (hash: l5k8yFsvgSxq4Nc3aWgjyjmVIoDadK6iTCXVVsTX2RE=)
                          2: SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl (hash: KaZCkC+FxlMarpoADU0N+6gNx4ryeWqDUQDafn6dJa0=)
                          3: Zds-0yoirKWsyW6ursByen80Cg8.roa (hash: BXiyhGHT9zX+B5Q4iQJx+8USQCvczwNWk+LhQCn6JRc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:8c:ff:17:70:0b:6c:2a:6f:0a:8e:7a:4a:89:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b25df8620374243e3c5eab25550af24e0eff48c
        Validity
            Not Before: May 17 18:00:38 2024 GMT
            Not After : May 18 18:00:38 2024 GMT
        Subject: CN=a4b9e4529f987d2e9bc3fd570f334bf85b7ee23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:6c:5e:88:d8:15:fd:b2:0f:52:17:6e:42:
                    1a:de:2d:81:e8:f0:30:a5:19:d0:ba:bf:9d:d5:d5:
                    8e:40:4f:53:a3:bf:c6:fe:dc:b6:27:d4:e3:b5:bc:
                    57:7f:3a:7c:3b:4f:67:13:b5:ac:41:fd:0c:9d:eb:
                    b5:b6:3f:f4:87:19:90:0f:86:b5:8e:2c:75:36:9e:
                    17:15:f6:37:8d:a3:9d:cf:a8:c6:05:8c:17:1a:81:
                    3c:e0:cb:6b:a8:f9:f0:7c:c0:b8:2b:cc:d5:6e:f6:
                    05:9b:bb:e7:64:db:87:de:b9:8c:0e:0b:48:c1:c7:
                    e2:51:21:eb:46:7e:f8:f4:65:2e:b4:8c:4e:a8:cc:
                    96:cd:68:2c:44:ff:04:fc:80:ae:07:84:1c:1e:0f:
                    7b:b0:31:ff:e0:c1:a1:5b:5e:95:35:d3:6a:bf:a0:
                    76:6c:cb:70:cd:d1:fe:1c:06:a8:d9:29:e9:dc:05:
                    9e:e0:98:bb:0a:aa:71:4f:df:0a:20:cf:d5:73:ae:
                    bb:36:72:ae:fa:48:c9:26:f0:80:5e:39:83:90:b2:
                    21:5b:b2:12:4a:70:c7:e4:04:03:55:dd:3f:38:60:
                    3f:d0:12:66:ae:14:33:7b:9d:89:b9:7f:dc:d7:b4:
                    8e:e6:02:bf:db:66:3a:fa:76:fe:87:8a:75:fb:b6:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B9:E4:52:9F:98:7D:2E:9B:C3:FD:57:0F:33:4B:F8:5B:7E:E2:3B
            X509v3 Authority Key Identifier:
                keyid:4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:f2:c4:33:46:ea:3a:0d:0e:8d:0c:be:27:bf:62:ba:57:
         10:c5:81:af:4c:6a:df:d6:3e:dd:7f:e8:05:eb:47:c3:8f:52:
         f3:ac:35:44:17:c2:97:42:45:cb:b5:b4:42:07:db:9c:a2:07:
         6d:a0:f2:74:64:64:7f:e3:9e:a2:17:a5:72:46:72:29:8c:d7:
         8e:a9:78:62:b3:7a:f6:87:63:f7:95:44:75:f6:a3:09:ee:7d:
         11:3b:26:15:e9:9f:9e:bf:ca:ce:ff:55:23:f0:a4:98:73:11:
         83:67:50:0a:94:e9:c9:94:6f:13:bb:67:63:2e:b3:ef:6a:53:
         f2:dd:03:71:9f:95:50:4b:21:13:07:74:e3:4a:00:69:84:8e:
         87:3e:e7:bd:f8:8d:95:38:53:38:e1:54:92:df:24:48:cd:1b:
         98:9a:d6:73:34:04:6a:b8:5c:54:f1:30:53:b2:f8:11:d6:2b:
         4a:bf:77:1d:73:80:f2:8f:74:4f:84:72:4f:54:04:5c:31:a7:
         b7:a5:21:d4:8c:9c:ed:c4:05:8f:69:20:78:71:0d:24:0f:01:
         a0:4e:1e:46:8f:49:c7:38:89:b8:89:d9:f2:44:31:75:3f:83:
         cf:4f:7e:01:50:2c:84:86:85:0a:d1:f5:66:6d:0d:02:2e:89:
         73:08:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:15 2024 by rpki-client on console-fra.rpki-client.org