Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File:                     toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier:          1tmpBMVuuh4kHbfUTq2rmCwPkt+2CTqOLVuy6Bi3o2s=
Subject key identifier:   41:20:E1:99:86:8F:87:08:FE:2E:F0:14:19:A0:D2:AE:83:96:86:F5
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer:       /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial:       01901DED31EB46237333453BCABA174D81AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:22 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:22 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:22 +0000
Files and hashes:         1: CYFUFtBXinMco7TH1PiEpiFEfxo.roa (hash: 1016wnrUTtBGlCS+fBWdGY57lWyOa1AiD8ccI6zK1WU=)
                          2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: SFoDkkrsoXT64w9I8WscP/JPqmIVKpPnjwKdkuDxhek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:31:eb:46:23:73:33:45:3b:ca:ba:17:4d:81:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
        Validity
            Not Before: Jun 15 22:03:22 2024 GMT
            Not After : Jun 16 22:03:22 2024 GMT
        Subject: CN=4120e199868f8708fe2ef01419a0d2ae839686f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:4f:cf:e3:11:41:d0:bf:b9:4d:54:f6:3c:
                    d8:a9:c9:c3:c1:ad:7c:e9:65:b7:51:ba:06:9f:b7:
                    ac:8e:3d:7f:41:06:64:5c:00:2a:c4:37:bc:fd:7d:
                    6a:30:e1:39:7e:1f:9d:c4:44:0b:01:bb:10:2b:c2:
                    2a:4f:44:f9:09:7f:41:77:ea:d2:c1:cc:f7:24:ee:
                    15:cb:29:7c:cf:fc:e8:ec:54:43:a7:bc:0a:2f:97:
                    e5:68:4f:ea:eb:54:50:62:31:de:cd:62:30:2d:8e:
                    d3:8d:a7:ff:08:8e:f5:26:5b:dd:6e:bb:60:b3:30:
                    a0:c6:c7:16:e6:b9:2b:1e:08:1a:dd:e8:24:bd:48:
                    2a:b8:f5:49:f0:c2:90:da:17:f9:98:82:61:03:d8:
                    93:4c:d2:dc:c1:d2:89:8c:7f:7d:28:8c:15:2d:f5:
                    89:78:19:ce:ff:ef:de:1b:d1:4f:9e:b4:60:26:ff:
                    27:22:1a:14:99:76:4f:85:50:f2:41:db:72:12:c7:
                    2e:d9:b7:86:13:14:5b:32:e3:74:e9:a5:c4:57:8d:
                    3f:62:8f:3b:91:ab:6d:8a:60:1a:11:c9:8c:32:21:
                    35:2d:01:08:d1:89:72:a4:bd:30:d2:68:99:f0:24:
                    68:10:b0:d1:ad:30:68:73:15:45:e8:72:ed:31:ee:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:E1:99:86:8F:87:08:FE:2E:F0:14:19:A0:D2:AE:83:96:86:F5
            X509v3 Authority Key Identifier:
                keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:22:f6:ab:28:af:84:3d:48:19:19:45:52:83:93:f3:df:
         5d:b7:ce:f0:03:8f:a5:88:8f:b0:ac:b5:fa:4c:0d:ce:19:6b:
         03:87:8c:9d:78:98:59:1c:71:d2:b8:42:94:09:f3:c9:a0:c8:
         02:6d:9d:a1:e9:8c:d9:a2:20:b8:28:15:f4:fb:d4:eb:3f:0c:
         1c:3d:0a:5c:38:88:54:f3:f3:4b:5c:52:7a:70:dc:40:b6:d1:
         db:03:95:b0:e8:a7:2e:f9:a3:ed:11:83:f9:92:c1:d1:65:80:
         5a:04:f6:b9:27:e4:57:81:ef:a6:d4:87:55:c7:53:03:fe:d8:
         2b:fb:80:50:df:7c:da:87:42:dd:fa:a6:41:9b:60:d9:f7:bc:
         93:13:0a:87:e0:3e:31:60:46:e6:69:1d:7b:28:cc:00:81:9f:
         c8:2c:cb:77:9d:da:cd:30:2c:ed:5d:ef:2e:ae:7e:84:24:9b:
         28:5f:38:4e:7d:77:3a:fc:4a:77:97:3e:a1:de:a9:e0:e2:bf:
         5f:95:56:9e:2f:cc:4d:2c:0f:15:9e:52:5a:5d:11:ec:43:54:
         8a:9f:18:b4:b7:4d:5c:ea:37:13:14:41:c2:b6:4c:77:7e:a9:
         65:0b:27:80:4e:b9:1e:b3:28:21:3a:43:d9:35:25:35:d6:8f:
         60:88:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:51 2024 by rpki-client on console-ams.rpki-client.org