Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File:                     hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier:          KzB9bHOwnpEBoOIDRtoaF+txpAC2V2Mkma77vp+m8xY=
Subject key identifier:   6E:CE:73:97:C7:F3:2E:79:CB:BE:8F:E1:1B:C6:5D:6B:9C:13:65:D7
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer:       /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial:       01901E9008F96C791F764217EE38145AE30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number:          04DE
Signing time:             Sun 16 Jun 2024 01:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:14 +0000
Files and hashes:         1: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: GJhIjDf82JsyEKhYxmgR5RRbf4x0PyOFV2D/x55qAR8=)
                          2: osYAsnBJMHDx9mgNvPd41-8AUiw.roa (hash: MwIxQ5hAF643EkfnNbOen3a4mF1U6rwMbymKhdaIOak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:08:f9:6c:79:1f:76:42:17:ee:38:14:5a:e3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
        Validity
            Not Before: Jun 16 01:01:14 2024 GMT
            Not After : Jun 17 01:01:14 2024 GMT
        Subject: CN=6ece7397c7f32e79cbbe8fe11bc65d6b9c1365d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:9d:51:be:99:dd:d6:5d:67:42:b6:00:e3:
                    28:88:c1:a5:01:5a:f0:c6:f3:09:79:00:f2:03:c3:
                    7e:10:1a:dd:c4:8c:b9:c5:68:b7:1b:19:84:9a:6b:
                    b9:e4:91:b9:f6:ce:79:ff:43:97:57:4f:9c:48:5f:
                    ee:61:38:dd:42:b5:ce:77:6a:43:50:2a:55:9b:0e:
                    12:6d:c7:6a:4c:86:b9:3f:ec:cf:7a:0b:20:13:c8:
                    c1:91:1f:a7:84:2e:26:35:0e:fc:30:dd:3f:19:d1:
                    6a:b3:01:92:72:db:7f:cb:9f:8b:b8:bb:b3:af:99:
                    ea:61:01:a5:99:22:2a:81:dd:b7:fd:e1:6e:23:a6:
                    a5:fe:0a:33:57:05:c4:e9:30:6f:b0:59:ff:7f:e8:
                    e9:75:cb:b0:11:aa:4c:ec:6d:a9:99:d0:36:e7:da:
                    8d:87:b8:5d:f6:bf:a0:43:dc:94:7e:c4:fb:6b:7d:
                    8e:02:b0:8b:55:02:53:34:49:38:7a:5c:e8:5c:24:
                    a8:f3:86:be:1c:e9:79:9c:fe:aa:58:02:ec:f5:28:
                    b9:69:38:99:7d:e5:3b:57:9b:6e:1e:56:df:bb:71:
                    66:4d:de:49:30:89:bc:98:cc:9e:c5:40:c2:d5:48:
                    43:96:4f:00:37:7b:d4:33:b1:7f:91:01:66:0b:03:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:73:97:C7:F3:2E:79:CB:BE:8F:E1:1B:C6:5D:6B:9C:13:65:D7
            X509v3 Authority Key Identifier:
                keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:b6:b2:df:0f:6e:94:39:8b:7b:02:81:7f:a9:b3:c5:ca:
         76:72:ea:9c:e1:68:56:1f:e6:bc:f2:18:bf:00:bb:42:c1:63:
         63:60:34:95:1a:5c:59:3c:8d:ee:9c:e6:a5:e7:d9:d0:3b:15:
         e4:46:f2:33:35:46:53:39:8b:a9:fd:46:fd:87:99:77:c6:e3:
         5f:45:50:e6:35:76:9e:1a:f1:2f:7a:01:5e:e7:eb:5d:36:a2:
         aa:4a:e1:da:39:da:cf:f0:51:cb:c9:74:a9:7f:09:75:11:55:
         d8:69:f2:d4:03:0c:ac:1c:55:d7:32:3b:07:86:79:23:91:50:
         a5:3c:b1:7c:27:bb:8b:81:fe:04:93:6e:a3:3d:88:50:ed:cb:
         ec:a1:34:8c:ad:75:99:23:b1:90:cf:99:0a:56:c3:73:11:ae:
         fb:d5:a2:9e:b9:75:59:a3:9b:cc:d9:ac:8e:ae:88:10:86:5c:
         9f:59:38:26:b1:67:89:60:02:7d:fc:59:56:0f:5f:db:ea:f6:
         73:5c:cc:8d:fc:7c:27:f7:77:49:4f:cc:e2:66:d5:eb:e1:34:
         43:99:2f:17:03:68:30:0c:c8:f9:c5:e3:d8:80:70:b8:77:55:
         be:ce:a0:77:2b:eb:90:32:2e:c9:f7:e3:a0:39:5c:8b:d5:3b:
         ca:76:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:34 2024 by rpki-client on console-fra.rpki-client.org