Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
File:                     U6d_390Uwt8Vjr_C5s_ConmmSME.mft (raw, json)
Hash identifier:          KtEM0iNvZOb5xbsHnqIOVNFvaU3EZ7UFrs/vs6diQ20=
Subject key identifier:   0C:3A:F9:C0:21:5E:91:19:FC:CD:CF:76:12:10:09:14:3E:6E:15:54
Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1
Certificate issuer:       /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
Certificate serial:       0196ACC4384D7AFF58ABCDE8D0C3EC8FB783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
Manifest number:          0F37
Signing time:             Wed 07 May 2025 22:01:02 +0000
Manifest this update:     Wed 07 May 2025 22:01:02 +0000
Manifest next update:     Thu 08 May 2025 22:01:02 +0000
Files and hashes:         1: U6d_390Uwt8Vjr_C5s_ConmmSME.crl (hash: +h7B63brntpTIskh9SXNlr8OGKsYN5A9N8RfWMyWiGg=)
                          2: ft6CTpjoPnOeyjCN03A4i61UZDg.roa (hash: zYsIQY88cCP6BOjXx6qQRS0WljzFQPd13/XtjsSjWVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:c4:38:4d:7a:ff:58:ab:cd:e8:d0:c3:ec:8f:b7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
        Validity
            Not Before: May  7 22:01:02 2025 GMT
            Not After : May  8 22:01:02 2025 GMT
        Subject: CN=0c3af9c0215e9119fccdcf76121009143e6e1554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:a2:2b:69:6d:20:12:e7:d3:6a:e0:31:a6:
                    06:45:37:8c:3e:9c:a4:1a:f4:70:76:36:8b:74:22:
                    6f:8e:a4:8d:88:1a:88:eb:06:ea:c5:e4:b1:07:f4:
                    cd:5b:b1:71:3c:63:5c:45:dc:a6:c4:9d:9b:38:b6:
                    7e:48:fc:f5:67:6a:36:45:1f:44:4b:df:f0:2a:cc:
                    f0:79:5c:ce:58:5f:e5:ef:51:06:be:97:3f:81:05:
                    4f:65:eb:1d:fe:44:b1:11:74:94:a7:6c:70:1b:c7:
                    14:25:fe:a2:f8:a2:3e:33:bf:a9:ea:0d:65:6b:44:
                    ee:8f:13:2a:4c:80:8c:5e:c4:99:99:87:ee:bc:7c:
                    92:a6:10:44:f9:c7:02:06:48:a2:07:df:6f:ed:52:
                    5b:d2:69:91:cb:c9:3e:a2:05:56:68:d0:d8:cd:ad:
                    8e:ee:d0:bc:b1:32:01:f0:54:21:8f:76:34:24:f6:
                    6b:82:c8:59:b7:af:5e:43:84:c0:d9:02:1e:62:d7:
                    44:5d:97:7b:54:16:bf:be:22:4d:f3:7d:aa:e4:cb:
                    cc:e6:fa:c9:b3:8e:5a:00:6b:94:71:ff:19:a2:86:
                    d6:6d:57:bf:2f:67:86:79:87:76:23:1a:b7:17:c9:
                    33:d9:9c:95:bf:2f:2f:2f:3b:53:87:e9:c8:a8:10:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3A:F9:C0:21:5E:91:19:FC:CD:CF:76:12:10:09:14:3E:6E:15:54
            X509v3 Authority Key Identifier:
                keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:4c:f1:6f:aa:c9:e9:69:0f:f1:a2:5e:1f:9c:55:78:7c:
         86:b4:9d:39:99:80:56:ae:4a:f3:21:98:29:5f:f6:a4:57:b5:
         ae:b3:31:e6:d7:3c:33:c6:38:a2:6b:0f:7c:89:d0:3a:50:23:
         e4:e2:30:22:fd:ba:ab:42:9c:95:2c:31:49:3a:56:e3:d7:5f:
         82:56:ab:37:96:dd:1b:90:59:2d:d1:05:f8:00:de:ae:0d:76:
         36:01:01:95:4a:be:94:2b:a4:20:89:6f:f9:7a:a8:ac:ec:4d:
         60:34:a6:f1:07:41:bf:fd:aa:af:69:99:ab:cd:8c:08:52:0e:
         4f:3e:02:0e:d7:30:f1:cb:60:44:2b:22:95:22:35:4f:56:0c:
         88:74:6f:38:8a:e2:a2:80:31:f1:67:48:36:90:83:06:f9:a6:
         28:1b:18:9b:c3:b1:d8:87:6d:3a:a6:42:b7:f6:a0:c5:48:22:
         b0:0b:82:44:7e:8c:10:a7:48:a7:8f:35:38:a8:ee:63:53:92:
         c7:25:62:32:0c:cd:a5:51:2d:ec:3b:30:73:fb:76:0c:89:15:
         8d:98:ab:4f:a6:db:2a:c9:8b:80:b3:a6:24:02:bc:16:5e:2f:
         15:16:58:1e:a8:37:07:0a:fc:27:8b:f0:91:6a:25:93:e9:fe:
         11:ce:2e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:45:12 2025 by rpki-client