Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File:                     TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier:          MScDRiY//pT7hulAt8lboq7KrV7kqW0YGp6RJ+GY2nM=
Subject key identifier:   E6:D5:3C:18:B7:34:87:DD:3B:B0:DC:8F:F5:51:A3:65:F7:F0:90:9A
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer:       /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial:       018F8F029F543E9AF3CAFEFC832A4C3D51C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number:          10D7
Signing time:             Sun 19 May 2024 04:01:04 +0000
Manifest this update:     Sun 19 May 2024 04:01:04 +0000
Manifest next update:     Mon 20 May 2024 04:01:04 +0000
Files and hashes:         1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: lIhDk56kNJgDG2lx4yUeHd85l1V3JltpfXglo+CsSG8=)
                          2: kDbOIUdibCBeatS_fI0vXSFdc9M.roa (hash: XpezS0S7M/+85L/bZyL8KTDm5MpI3Rp4A4M4rzDVq04=)
                          3: x7G3_EedMag96ih44LzaGzQiIXA.roa (hash: 4M93Q/AO/Zond7mH/1XhwlY2MInfgCW17LkqVTCTkWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:9f:54:3e:9a:f3:ca:fe:fc:83:2a:4c:3d:51:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
        Validity
            Not Before: May 19 04:01:04 2024 GMT
            Not After : May 20 04:01:04 2024 GMT
        Subject: CN=e6d53c18b73487dd3bb0dc8ff551a365f7f0909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:f4:be:bf:ae:35:62:d6:1c:b6:97:89:00:
                    83:1b:47:71:cc:fc:cb:33:8b:85:63:9a:48:4b:89:
                    34:9b:92:92:90:4c:49:6b:53:3b:7c:81:cb:76:26:
                    d5:66:ca:26:6f:4e:92:39:b6:87:5a:0c:aa:d9:73:
                    ed:f1:6c:14:4e:38:2c:22:cd:3e:21:4d:52:76:f6:
                    0e:f8:12:69:9c:8f:c1:1c:d1:83:04:0a:82:3d:f5:
                    a3:48:44:93:04:14:bf:bc:17:27:57:e2:d6:17:63:
                    ed:3f:5b:10:e2:a5:f9:f9:f3:fb:74:41:fc:99:7f:
                    e2:86:3d:b4:20:6f:67:43:b6:c4:c3:30:ea:df:08:
                    2b:8d:98:40:b8:11:6c:d9:78:cc:c8:44:0f:18:91:
                    7f:ef:a7:5c:e0:74:19:db:bf:6e:88:44:f1:b7:04:
                    b5:d2:06:56:3e:d7:bc:db:d7:cd:1c:17:f7:67:79:
                    56:1c:c0:f9:38:51:95:af:e0:4a:3c:6b:93:95:97:
                    da:d9:b5:f2:a8:fa:71:eb:1b:a2:cb:d5:b2:c7:71:
                    4a:64:99:78:59:c3:3a:8d:37:54:b8:bb:3f:4c:5b:
                    ba:da:21:a3:43:e6:c3:fa:23:2a:fb:3c:aa:f6:3a:
                    64:8d:93:ea:c3:76:d3:60:90:a1:92:37:ae:fb:16:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:3C:18:B7:34:87:DD:3B:B0:DC:8F:F5:51:A3:65:F7:F0:90:9A
            X509v3 Authority Key Identifier:
                keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:39:b2:ff:b0:8d:0c:f8:0b:a8:a0:12:29:a9:23:36:bc:2d:
         dc:58:da:da:a0:73:b8:a9:17:ec:4f:9e:45:0d:22:90:e6:cf:
         1f:cc:2c:c7:2e:0b:52:ba:c1:72:70:db:e3:10:c1:30:fa:f6:
         8a:b4:af:d6:6b:34:1e:4b:36:6a:4e:50:72:6e:dc:87:47:04:
         63:17:fc:c8:cb:42:43:6c:54:14:67:4d:53:65:50:c8:a5:81:
         2f:ae:a4:8a:f8:26:b1:c7:df:0a:88:6f:6d:b1:ce:0e:80:b3:
         8e:26:22:0d:51:f0:cc:1b:cb:c6:56:bb:f6:21:3b:00:f7:64:
         9d:fc:12:4d:57:6e:a6:a0:08:af:3e:76:f3:7a:1b:fa:f7:b7:
         31:81:0e:e9:f5:fc:28:6e:69:0d:96:6c:93:3f:01:4f:ec:e8:
         a0:a8:94:cb:68:3f:69:c2:e6:9f:37:e4:bd:f9:18:ce:f8:53:
         e6:8f:4c:64:08:d3:b8:96:49:c4:6d:bd:4d:82:ec:67:78:67:
         6f:c4:be:db:11:90:c1:96:39:70:3d:0c:b9:b9:8e:97:9d:42:
         73:58:52:4b:98:e6:7f:a1:36:81:e5:6b:3e:67:6d:ce:ad:12:
         8e:12:ce:a3:4c:83:11:f3:e5:66:90:2c:37:23:21:0e:5d:ec:
         a5:fc:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:05:09 2024 by rpki-client on console-fra.rpki-client.org