Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File:                     8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier:          SiJGB6Tzx5GaZwSBgSUKiKNTz/Snrw+BosXd6vuN5QE=
Subject key identifier:   54:87:00:95:37:02:46:6B:1D:04:FC:F0:E3:F7:A9:58:5E:F8:87:30
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer:       /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial:       018F3DE948E55A1BAE52A367D8A30AA2CCDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number:          053B
Signing time:             Fri 03 May 2024 10:04:09 +0000
Manifest this update:     Fri 03 May 2024 10:04:09 +0000
Manifest next update:     Sat 04 May 2024 10:04:09 +0000
Files and hashes:         1: 7nTlCZgU8i_OoyupSzx4fGtIS6c.roa (hash: NFylJypgvn2N1Z0Y4ZWsqRFkazz8BPWxvKGD78AB5SU=)
                          2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: PZF5iCUbEKq31YMSrrju8YeP9kw3YM7atjKN9ArkWNc=)
                          3: Z17s_aIhPEoNvmRt4Mw1Vg3dFzU.roa (hash: rDqMMk8+SpWpwTSWarb8VSAa/dFLLhGLckf6mHTK2L4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e9:48:e5:5a:1b:ae:52:a3:67:d8:a3:0a:a2:cc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
        Validity
            Not Before: May  3 10:04:09 2024 GMT
            Not After : May  4 10:04:09 2024 GMT
        Subject: CN=548700953702466b1d04fcf0e3f7a9585ef88730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:32:1b:0f:fc:6c:b0:4d:d1:a1:86:93:f5:
                    01:3d:a6:1b:d7:17:66:3e:eb:05:9f:a4:14:28:2f:
                    bd:59:68:84:f0:19:0e:a1:9d:37:9f:47:d0:d0:aa:
                    49:21:0e:ad:89:89:5c:e2:dc:f0:ce:be:01:f2:18:
                    aa:95:4c:3e:b9:f3:92:bc:9c:82:44:41:30:1f:80:
                    58:c9:57:26:29:1b:3a:07:e8:d8:06:b7:8e:21:f9:
                    9e:97:5b:47:d5:54:85:42:18:25:89:f3:f0:90:24:
                    e5:61:03:12:e7:e3:5c:4b:9b:9f:e7:a4:49:2f:ec:
                    4e:19:1d:5e:40:ce:89:5c:24:fe:73:aa:18:9d:73:
                    c4:30:31:79:a5:a7:06:c1:20:21:75:4a:90:14:99:
                    0d:98:1d:ed:c0:20:33:b1:a9:95:52:9c:86:32:b0:
                    80:e6:d4:6b:41:e2:3c:76:25:19:07:df:90:06:30:
                    db:29:83:18:8c:e6:35:7b:06:f5:71:20:d3:5e:76:
                    cd:b2:b9:10:53:a8:05:aa:6f:e0:f4:23:8a:da:2e:
                    e5:87:b3:f4:85:fb:7f:88:71:4f:94:86:d2:62:81:
                    24:6a:91:9c:d3:36:8b:d3:3f:ea:7d:b5:fa:61:75:
                    50:3a:a0:85:70:f7:d3:41:73:1f:81:37:b8:f1:5d:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:87:00:95:37:02:46:6B:1D:04:FC:F0:E3:F7:A9:58:5E:F8:87:30
            X509v3 Authority Key Identifier:
                keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:78:1d:0a:5c:e9:13:d1:db:99:d6:14:87:cf:e9:cd:e8:81:
         8e:59:1d:1b:93:dd:53:6d:6c:ee:cc:79:6c:e3:40:84:09:35:
         9b:20:ab:9f:37:a3:fe:ce:0d:92:d0:d0:6a:51:5b:d0:72:73:
         9f:19:f6:78:ef:11:f5:e9:49:25:d1:81:db:ca:19:82:8f:49:
         54:ee:ce:70:60:2c:e9:ca:2f:29:52:f6:d7:61:b9:8c:f1:df:
         1a:ea:0b:90:2f:03:4c:e0:e4:35:c3:77:6c:f7:98:d2:77:7c:
         ac:a1:f4:03:0b:10:d3:c7:9b:d1:a9:dd:d2:b2:02:65:c2:a5:
         91:ad:08:2f:6a:28:97:08:11:a3:84:bd:f6:e5:f2:2c:1a:29:
         09:d9:64:de:9a:7d:92:31:5f:cd:88:53:6a:ca:92:2e:b7:d3:
         c6:b1:36:c9:28:bc:bc:e5:56:ca:19:ad:55:6d:52:a5:5a:99:
         3f:4a:c9:8c:ce:d1:3f:25:3a:35:8c:6d:02:ea:7b:7f:33:3c:
         df:89:95:e0:67:01:43:49:5f:31:0a:57:99:f5:c1:04:08:6b:
         a2:8b:a5:47:30:67:5e:72:d1:6f:9c:f6:12:72:8e:eb:f8:a5:
         b3:d4:1e:5b:23:5c:55:4e:8f:45:ef:9a:fb:fe:81:06:ff:68:
         46:b0:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:53:00 2024 by rpki-client on console-fra.rpki-client.org