Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File:                     TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier:          RpYYn5My4heYg6AZ+1F+mbgbKXlCRYOvavgm8ANGYdc=
Subject key identifier:   8A:E8:4F:F4:39:6C:A6:4E:86:B1:13:77:B6:26:41:93:33:9C:A5:78
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer:       /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial:       01901D0F0144F96CCF0A6A2989C4F79330F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 18:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:40 +0000
Files and hashes:         1: PCVTCk4kJKdmWY5Gbhcohqq7yqY.roa (hash: 0BvnuPjtWX2RRE04oQNDzS1IBFJjGsR8tpSiS60V8LY=)
                          2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: tHJIcfv1h8Ju2t7/bC+G46xOOOyUjfVa/gjOnUWz5Xw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:01:44:f9:6c:cf:0a:6a:29:89:c4:f7:93:30:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
        Validity
            Not Before: Jun 15 18:00:40 2024 GMT
            Not After : Jun 16 18:00:40 2024 GMT
        Subject: CN=8ae84ff4396ca64e86b11377b6264193339ca578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:6b:7b:07:59:a3:56:98:0a:2d:5d:38:50:
                    fb:44:2e:c9:fd:bf:4e:df:fe:1f:0a:18:8b:b1:e9:
                    96:7f:c9:1a:34:94:26:57:33:87:01:af:00:3c:9f:
                    97:bb:76:a0:4a:dd:6b:d4:78:11:e8:df:95:e9:ec:
                    8f:e4:f2:ec:7b:03:32:93:1c:9d:04:12:95:65:80:
                    f9:3f:07:8b:f3:43:45:15:07:71:08:dc:b3:f3:12:
                    cb:d4:7b:4d:cd:4f:81:c9:84:66:89:55:a7:21:51:
                    63:87:ea:b9:d1:5f:3e:25:e6:f0:91:76:ba:87:b5:
                    99:38:5a:c3:df:e5:2d:de:c1:aa:76:aa:5d:a4:43:
                    4a:dc:30:7c:68:ba:ae:79:64:f4:ae:b1:ff:31:8f:
                    d9:23:3f:6a:0f:27:46:0f:73:a1:77:d0:e9:c6:35:
                    0c:83:18:d8:05:90:37:b4:cf:fe:f8:0c:22:e1:20:
                    3a:c5:e5:af:5c:93:80:c0:02:94:63:71:5c:9c:f5:
                    8e:fc:bd:b4:ac:15:e5:a3:09:50:da:b6:58:a4:c9:
                    e7:70:72:37:7a:6b:9a:94:f5:67:f5:65:40:37:b0:
                    40:a6:ac:b9:3b:d7:60:0d:55:5e:68:97:bf:8f:b9:
                    2d:3a:17:27:40:28:23:06:65:39:39:c2:5a:33:c9:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E8:4F:F4:39:6C:A6:4E:86:B1:13:77:B6:26:41:93:33:9C:A5:78
            X509v3 Authority Key Identifier:
                keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:19:5f:a7:57:fb:15:1c:89:5a:92:70:01:fc:79:51:58:27:
         6f:41:79:9e:c9:3c:f0:59:32:a9:c9:3b:27:a7:68:4f:de:e5:
         5d:7e:b0:79:be:36:8c:5d:5c:1f:7a:c5:bb:59:69:31:70:f3:
         cf:ad:e6:2e:b4:8e:8f:61:09:41:1f:2b:f3:08:de:1f:39:44:
         e5:cc:0a:e6:22:aa:f0:ce:c6:ac:81:14:d2:9e:30:83:51:0e:
         60:a5:c8:1e:58:bf:6f:06:10:fe:20:2d:02:9e:86:a9:79:91:
         e8:51:8b:c3:08:86:7f:a7:c0:cc:84:13:c9:5c:24:6d:39:0a:
         cc:be:90:d2:a1:8e:ea:ae:c3:9a:67:14:1c:6a:9d:3d:7e:58:
         1b:c1:48:54:96:2a:22:92:fb:23:4c:43:65:ae:52:1f:5c:32:
         40:d6:f3:c8:e4:1a:19:65:05:28:c9:d7:fd:52:78:9a:51:1e:
         d6:0d:f5:61:95:36:a8:1a:3d:9f:de:05:88:96:fa:35:5b:fc:
         5b:93:5e:11:91:c1:1b:32:cc:b6:e2:88:df:06:43:a6:4b:33:
         41:fd:ba:fc:c5:a4:3d:2b:b7:5e:2b:6d:90:40:54:7d:42:b4:
         be:22:af:9b:70:74:35:71:2d:ad:1f:6f:55:6b:c6:93:c0:11:
         8d:02:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:49 2024 by rpki-client on console-ams.rpki-client.org