Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File:                     Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier:          SDdfZpC7FH2xwM3vcNBXTuvZmLIMGq5nG48xXHBx6Ng=
Subject key identifier:   43:40:1F:D6:D3:30:5E:C6:5F:D8:EE:2E:E7:2C:BA:61:9B:2B:C9:1F
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer:       /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial:       018F8891FA3084BB8553828CC4A78206D349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number:          05A4
Signing time:             Fri 17 May 2024 22:00:19 +0000
Manifest this update:     Fri 17 May 2024 22:00:19 +0000
Manifest next update:     Sat 18 May 2024 22:00:19 +0000
Files and hashes:         1: 2Oo5bGkKXQAOR0rmQ1h3uu0d1g4.roa (hash: ZMUWq5R9Ps64+95LvG6IuYf/iS86guwaefrrEtqmN0M=)
                          2: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: su5408TpIPcMkbprZP4QLeGIRpdIri4ImxRFQldApdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fa:30:84:bb:85:53:82:8c:c4:a7:82:06:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
        Validity
            Not Before: May 17 22:00:19 2024 GMT
            Not After : May 18 22:00:19 2024 GMT
        Subject: CN=43401fd6d3305ec65fd8ee2ee72cba619b2bc91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:08:68:d9:1a:b7:cb:1e:62:25:4f:18:59:
                    fa:24:67:08:c0:1d:6e:91:c5:78:1c:7c:8e:cd:3f:
                    8c:4a:38:8f:bc:ef:7c:29:20:04:c1:71:cb:d4:f2:
                    79:01:30:48:46:42:18:b0:c8:0b:61:20:7e:28:8c:
                    e2:a3:c0:32:7b:58:a6:86:7e:29:0a:ea:24:bf:3f:
                    ce:06:09:16:f0:53:fd:89:e5:5b:d1:56:08:2c:27:
                    46:32:68:c3:bf:6e:7a:6b:36:1d:4c:f9:74:38:3d:
                    5c:f5:bc:f7:aa:89:67:3c:5e:60:bf:da:06:4b:00:
                    f5:58:77:73:8a:0d:02:0d:ea:eb:8a:40:94:e1:41:
                    71:8a:ff:8a:10:96:17:43:fc:0a:39:37:9f:44:2c:
                    cb:98:42:e3:ba:f9:1f:ab:8c:a6:33:2f:e6:6d:c7:
                    07:ff:a4:dc:da:85:c3:f0:da:4f:7f:18:61:d9:ef:
                    b1:21:5c:47:63:84:ac:7f:3e:a0:fa:6c:10:ca:80:
                    64:09:f9:c9:70:9c:52:0a:b9:ed:d5:52:1a:b6:5e:
                    d6:23:9a:45:b0:70:ad:52:86:5a:b1:ea:14:73:9d:
                    dd:dd:f3:33:3e:0c:34:61:90:cc:90:ac:52:06:48:
                    05:0b:a8:1e:62:17:57:d0:50:51:3c:87:4c:fe:c9:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:40:1F:D6:D3:30:5E:C6:5F:D8:EE:2E:E7:2C:BA:61:9B:2B:C9:1F
            X509v3 Authority Key Identifier:
                keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e0:eb:15:dc:47:d6:ee:c7:89:9f:8d:8d:a2:7a:e6:ca:48:
         f4:d7:cd:95:e9:88:36:3b:71:fa:f0:ba:10:9f:85:76:9e:d2:
         56:33:09:00:3a:f2:31:00:53:63:22:54:f2:3d:0a:5f:b1:4f:
         3b:29:40:a1:e9:61:f5:c4:45:c0:b0:e5:45:2d:ff:11:d9:31:
         78:2e:7e:7a:64:36:fa:83:bf:4b:55:13:ee:38:68:67:14:53:
         ec:62:23:c5:74:8e:9a:60:39:ad:ae:cf:e8:ad:b8:36:28:95:
         e7:7c:78:2e:d9:9a:86:14:cf:ad:eb:6c:8f:2e:c3:64:b5:c3:
         cf:8b:a5:0b:cd:3c:d5:cf:0b:e8:42:cb:06:88:85:53:23:ae:
         66:50:2b:46:78:c6:f1:90:5a:cb:b5:37:a3:96:de:33:0d:31:
         e8:bf:f2:86:04:2a:81:41:f4:ba:2e:aa:2f:90:3c:e4:71:2b:
         b4:9a:27:2f:a3:3f:44:57:6f:75:93:d0:b0:ba:9f:40:26:09:
         06:7e:df:86:03:8c:35:aa:d3:82:c8:27:ff:2e:ae:00:ad:b8:
         43:61:9d:28:6f:c8:a5:08:2e:e3:a7:73:fa:3c:41:43:e1:b8:
         20:af:a3:16:1e:fc:fe:ef:02:e7:f7:fe:c5:ea:bf:2a:e1:4b:
         2d:d7:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:08 2024 by rpki-client on console-ams.rpki-client.org