Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File:                     8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier:          J1Qhe7lIztGQKFFDzYf+E8DqbqhlGRbevjBQmzdgmW8=
Subject key identifier:   57:81:50:0D:C9:C7:5E:1B:5B:D4:93:91:9E:2E:5C:00:B9:F9:45:CD
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer:       /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial:       018F486A168D664481E6B2056493B1219287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number:          1043
Signing time:             Sun 05 May 2024 11:01:02 +0000
Manifest this update:     Sun 05 May 2024 11:01:02 +0000
Manifest next update:     Mon 06 May 2024 11:01:02 +0000
Files and hashes:         1: 5zpfskIk080z78xcguLA2_xCF_k.roa (hash: jnfEghFccjy1qLJ7VJvH7LVMZc/eI84qZhERRDQTqAY=)
                          2: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: BdEhXn7R3oY8zOqAd173Y/82EM7Jwh9Ze5ywLZ1/UIo=)
                          3: mdCDNxD2NQ1rRdyR2ObEflgc-nc.roa (hash: PlowwT5a1gf4aLcO6TzEnzmltSaw/Hcc/5tdOk0d0uw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:6a:16:8d:66:44:81:e6:b2:05:64:93:b1:21:92:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
        Validity
            Not Before: May  5 11:01:02 2024 GMT
            Not After : May  6 11:01:02 2024 GMT
        Subject: CN=5781500dc9c75e1b5bd493919e2e5c00b9f945cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:29:46:f6:bf:7d:74:28:f2:9e:77:b6:25:
                    90:64:91:32:d4:18:01:03:01:d1:7d:79:71:ed:2d:
                    b1:c2:7a:5f:74:0a:75:7c:e1:73:1b:66:02:33:70:
                    e6:7c:e3:75:5f:7a:24:4b:bb:e5:45:aa:a2:d7:ab:
                    ae:56:76:7f:24:2a:40:ad:49:67:41:8e:0f:36:83:
                    99:cc:93:f9:ac:ad:91:8d:fd:91:16:57:69:cd:59:
                    1c:58:15:4f:bc:26:c2:a3:c0:44:98:fa:ba:f9:37:
                    5c:22:5f:ef:ef:a0:ca:e6:e9:48:1e:0c:1c:38:85:
                    aa:ef:b4:d2:3e:98:81:9a:66:81:c0:8a:80:5b:21:
                    89:bc:8c:ad:6f:9a:d0:ce:a3:db:81:a5:c0:9a:0d:
                    15:a2:98:e2:69:88:de:17:66:f5:5a:d2:85:5c:93:
                    3b:2b:a2:2b:22:e0:76:27:f8:d0:71:6a:18:df:c1:
                    da:67:83:8c:70:3f:0f:a0:5b:d0:98:88:07:ea:c4:
                    16:4f:23:66:95:12:2f:6f:4a:17:c9:99:e2:bb:b5:
                    9c:3e:b9:2f:a3:9b:71:e5:7e:09:c8:3c:b0:74:7a:
                    15:b4:bf:51:d8:40:ee:eb:57:1e:13:6f:f5:b2:d9:
                    b4:05:0d:cf:00:87:b2:ce:87:33:45:68:00:8e:ed:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:81:50:0D:C9:C7:5E:1B:5B:D4:93:91:9E:2E:5C:00:B9:F9:45:CD
            X509v3 Authority Key Identifier:
                keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4b:75:d3:eb:a7:61:6c:69:83:0c:d1:9a:6b:48:61:bb:d5:
         f9:d8:41:1a:65:15:0d:d2:84:78:4e:8d:31:6f:f5:8a:32:71:
         d1:81:0d:bd:e7:68:16:26:aa:ab:45:a7:fe:9f:25:2c:73:ad:
         39:12:5d:33:6a:90:8c:b1:c0:11:41:0d:46:cb:e9:1d:e5:d3:
         07:37:c9:a1:a5:67:af:fe:ce:6f:a7:b9:f0:a6:a3:a7:1f:5d:
         ca:11:31:a2:d7:c0:f1:b0:17:80:31:dd:44:86:35:6d:f9:5b:
         5a:94:6c:3b:71:b3:ce:2e:c4:a8:21:9d:58:17:5f:3b:69:bb:
         18:e4:11:0e:a3:54:26:5d:70:32:0e:ad:dc:77:ea:ba:57:34:
         4c:31:61:94:5a:db:03:5b:b9:1d:b7:1a:14:6e:ca:4f:2d:fc:
         9c:fc:9a:3a:81:47:85:41:bf:53:cb:3f:35:74:e2:ac:ca:b3:
         30:ba:45:74:63:20:02:bb:2e:16:8f:ac:f8:19:fd:0d:75:eb:
         91:fa:d4:b7:a7:0f:a2:b3:02:48:a0:f3:4e:38:41:68:25:e5:
         03:8a:0e:fe:13:f2:3c:f8:1f:55:66:39:ef:c8:90:cc:86:da:
         b1:0e:2e:8b:10:7d:9d:18:ac:18:e6:1a:50:bc:dd:a2:44:01:
         10:34:39:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:21:53 2024 by rpki-client on console-ams.rpki-client.org