Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft
File:                     TuCyHImjAr6dwDhwwJjyMoAwSw8.mft (raw, json)
Hash identifier:          RgUtOBqbVj+wpWar+FjRJHoFZD1FW3QB10ff5LHNWuY=
Subject key identifier:   59:02:58:29:9D:25:F7:26:3A:4D:20:25:94:F3:99:BE:49:CC:DA:F1
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Certificate issuer:       /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial:       019073BF7FE31E6F09BA6A03B000AC504D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft
Manifest number:          0EB3
Signing time:             Tue 02 Jul 2024 14:00:48 +0000
Manifest this update:     Tue 02 Jul 2024 14:00:48 +0000
Manifest next update:     Wed 03 Jul 2024 14:00:48 +0000
Files and hashes:         1: HNHIvQsW7EvpyA_AZAmPZBSO0KA.roa (hash: JdEA+/QdXJpwY1zZPPq+pYJ9EzRx+ZvKYc2JSeBFVgc=)
                          2: TuCyHImjAr6dwDhwwJjyMoAwSw8.crl (hash: IpzeNm8Y7Doib3H9u1SpUvxDqSMBgJG8c89qgaokeJo=)
                          3: e6OE6Zvhw-LOSbkiz4LaxU-uXaM.roa (hash: 14mbHarRkU4OqKS59iqzDazL2Lnm4hboud3BlpunAPE=)
                          4: tPjWmCvY0728lZgjNkJrlTTymxg.roa (hash: jmHWBYtmsEC9Y1g89ITUpbzizkyr4CtKZLbuGYznujM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:bf:7f:e3:1e:6f:09:ba:6a:03:b0:00:ac:50:4d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
        Validity
            Not Before: Jul  2 14:00:48 2024 GMT
            Not After : Jul  3 14:00:48 2024 GMT
        Subject: CN=590258299d25f7263a4d202594f399be49ccdaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:9e:27:b9:a0:df:2e:de:47:e3:e3:f6:01:
                    3d:85:af:57:45:87:5d:ab:b0:12:02:17:2a:f9:4a:
                    a9:e3:a8:ea:59:54:0a:c4:30:ba:3d:37:0c:8e:7f:
                    62:d4:8e:d7:a9:e9:4e:02:16:12:6f:0a:fc:5c:7a:
                    72:2b:06:3e:e3:47:d8:93:44:39:5a:fd:cb:71:e1:
                    b8:3a:4f:72:20:8d:04:61:3e:c3:f3:45:ca:87:4f:
                    3b:56:81:1a:b6:58:7c:86:14:32:f6:b2:d1:0f:74:
                    64:8e:d4:27:de:75:a9:c6:ce:2b:46:76:86:25:92:
                    2b:c0:f8:1e:8c:84:2c:a9:23:9c:f7:58:60:2a:34:
                    1d:22:98:fb:4d:00:0c:12:61:ec:25:89:43:fd:48:
                    42:c7:18:b5:3f:da:89:c2:c8:99:e8:6e:2b:7d:08:
                    64:5f:49:3f:8a:6c:39:97:26:5d:2d:43:04:26:c9:
                    a2:ea:ab:20:f9:48:9b:3d:67:9a:e8:9f:2d:45:f2:
                    49:8c:a3:9a:59:91:c1:8d:b8:29:5e:4a:4e:b1:5b:
                    54:88:27:94:5a:2e:a9:ad:a6:6b:b0:a7:4d:d4:02:
                    23:fb:13:81:41:ad:31:1c:60:fc:4d:75:35:0e:52:
                    90:3c:9f:26:63:a1:08:5e:03:13:9d:f1:ee:92:87:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:58:29:9D:25:F7:26:3A:4D:20:25:94:F3:99:BE:49:CC:DA:F1
            X509v3 Authority Key Identifier:
                keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:01:42:f2:18:cf:95:0f:8a:e5:3c:6a:37:a4:d3:e1:2b:
         53:76:19:79:51:c2:b2:0e:37:4f:8e:1e:ad:7d:fc:1f:4f:f0:
         eb:d1:2d:1a:6f:5a:8a:36:7e:2c:c8:da:12:65:30:cc:f9:e8:
         22:91:05:c6:67:2c:86:10:b0:94:c3:12:4e:e3:97:a1:12:6a:
         32:f5:78:92:38:7c:45:58:14:5e:89:67:08:6e:f6:e0:ce:55:
         81:48:65:c2:7e:b5:16:94:24:81:f5:2f:47:c6:83:fc:52:91:
         d8:cd:87:ce:f6:5d:48:94:9a:17:c3:77:13:51:c4:3c:bf:ad:
         f6:e5:49:5b:77:f5:5f:bb:08:3c:39:13:4d:ff:06:05:e8:1d:
         eb:b3:e9:ac:7a:3e:11:7b:c0:52:68:4a:98:23:72:0b:bd:ab:
         4f:13:32:fd:ac:4d:39:ce:76:78:af:d9:94:55:78:55:53:51:
         6b:85:d2:19:07:87:1a:46:da:e0:f6:4c:bb:18:a7:6b:53:f8:
         ef:ce:b9:cb:46:74:d8:a7:79:f7:07:86:1f:9a:3c:0e:ac:e2:
         5e:cf:3e:ed:3d:66:5c:dc:44:32:be:b4:28:ee:e9:bf:a2:db:
         9e:c9:4d:4d:94:2e:7b:09:77:2b:df:af:e5:c5:23:eb:5b:27:
         91:c8:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:32:05 2024 by rpki-client on console-ams.rpki-client.org