Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File:                     tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier:          zBvGmcFyVsF8Uy13viS1mR/UWov7zyUvITRUZLvSXlU=
Subject key identifier:   88:AC:D8:EF:07:6C:F5:2A:32:27:C7:31:74:5A:69:38:0B:A2:EC:ED
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer:       /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial:       01901E58F53EAC99A9D9CD21ACC2DF706BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number:          0778
Signing time:             Sun 16 Jun 2024 00:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:04 +0000
Files and hashes:         1: MtyGavINQVvTOyUDZFzSLtiNPYU.roa (hash: OCJlwGcWM4D2i1hvrwXOFRE4ytBbGIPbeH0JlJm3tYA=)
                          2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: wMd7So5cluO7caxUXTp4IR+lzc1Sbj2oWDziFbemMVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f5:3e:ac:99:a9:d9:cd:21:ac:c2:df:70:6b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
        Validity
            Not Before: Jun 16 00:01:04 2024 GMT
            Not After : Jun 17 00:01:04 2024 GMT
        Subject: CN=88acd8ef076cf52a3227c731745a69380ba2eced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:6b:99:e7:59:a8:10:c8:e8:32:be:95:55:
                    1c:35:66:50:f3:2d:4b:1f:6c:15:dd:43:1e:26:28:
                    2e:85:a0:c6:3e:8c:18:f6:d3:6d:31:12:b8:df:fa:
                    8b:b2:1d:58:52:26:a4:72:07:5e:85:38:9c:ea:e3:
                    e0:36:71:b1:a7:d9:33:7c:79:05:96:2f:0f:9b:44:
                    c6:a4:ab:18:f0:7b:d3:69:d2:98:68:14:17:df:06:
                    f3:23:10:a9:7d:fb:b3:a4:73:b6:26:b1:54:2a:ca:
                    0e:a6:38:66:ae:27:76:99:b9:bf:3f:79:30:ec:6d:
                    61:50:d9:0d:8e:0d:a4:77:cb:f7:3a:d1:aa:64:bc:
                    f7:52:13:c6:24:75:06:46:de:1a:81:99:e1:1b:4d:
                    e7:ba:d6:80:51:a9:42:11:67:77:52:63:9f:ac:b6:
                    76:49:f3:65:92:49:9d:c7:5e:1b:7d:1c:73:5a:ea:
                    ae:9d:e7:b3:69:5c:7c:12:43:a3:e1:20:61:96:1a:
                    ac:f3:ae:ea:38:55:94:ce:45:d8:77:46:3c:1a:bc:
                    d3:98:e5:23:39:06:f4:0e:c5:c5:03:6c:95:d4:40:
                    45:2b:3c:1b:97:ae:31:be:81:6d:16:1d:a9:db:79:
                    8e:9a:5d:d6:4b:2b:8e:3d:2d:0f:9b:b6:dd:76:72:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AC:D8:EF:07:6C:F5:2A:32:27:C7:31:74:5A:69:38:0B:A2:EC:ED
            X509v3 Authority Key Identifier:
                keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:10:f7:13:bf:d5:ad:5c:ad:c7:90:70:04:55:1b:3d:c1:
         de:44:a7:85:3c:fb:a9:72:66:37:0a:29:3f:8f:44:97:f7:c3:
         4d:43:db:1b:c3:51:f2:e5:4e:57:5a:eb:9f:70:bf:ec:11:4e:
         1a:cb:8e:f6:e8:b1:d5:f2:03:bc:c1:9c:a4:87:05:3b:27:b8:
         ff:b8:fb:23:ff:e8:c9:8d:61:61:79:6a:e3:7d:0b:10:0d:02:
         a6:06:c3:36:ee:b0:df:99:9f:ce:91:52:ff:fa:71:df:cb:eb:
         fe:28:e5:3f:39:78:66:15:72:ce:15:bf:24:1e:1e:3f:a2:9a:
         6d:3e:a7:d8:44:24:2b:96:1f:3d:53:30:33:b7:23:5c:4f:cb:
         1a:d5:0c:fc:1e:8a:13:23:9c:c9:f3:ce:9c:6f:0a:ce:4d:b9:
         5d:70:31:e3:55:35:40:96:05:75:0a:3b:f0:e5:3d:72:16:31:
         08:25:87:21:38:e9:e4:ce:c6:4a:ed:d7:2f:45:bd:ea:9a:16:
         27:80:88:3d:b8:1b:d3:46:2d:d5:59:76:14:22:ea:77:3a:a0:
         2e:50:83:8a:e1:9d:53:d5:db:8e:8e:ec:42:45:bc:62:24:09:
         e7:fb:32:77:9a:0e:52:5a:ab:d6:2b:b1:eb:68:55:31:40:80:
         25:e0:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:57 2024 by rpki-client on console-ams.rpki-client.org