Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File:                     tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier:          rQjN/FgGvM83MsK+mU1DFP5H6szx9uHSJsgwfw5gkwI=
Subject key identifier:   36:0C:2E:00:E5:1F:45:4A:85:03:AB:6B:EB:6A:28:61:4C:87:19:CB
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer:       /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial:       01901CA13430697DA78709A4D526A35F80DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 16:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:44 +0000
Files and hashes:         1: OHnMPvnKQU78stx9DOIDufih9k0.roa (hash: 9+FLPqmtvEJWTqzGnNgiJt5S0UJp1Z9L+Z6c2OUg/fM=)
                          2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: kAD2zxGhqsIJYKGP81fN/7RT68IKhzP7Fj6TqkI2aK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:34:30:69:7d:a7:87:09:a4:d5:26:a3:5f:80:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
        Validity
            Not Before: Jun 15 16:00:44 2024 GMT
            Not After : Jun 16 16:00:44 2024 GMT
        Subject: CN=360c2e00e51f454a8503ab6beb6a28614c8719cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:ab:81:81:a9:26:51:e9:9e:52:97:cb:af:
                    41:16:51:d4:08:77:4a:47:3b:d0:ec:b2:34:c4:d5:
                    0a:a1:c0:6a:f4:7a:9c:4f:ef:39:9b:63:b1:44:02:
                    93:6a:15:75:07:1c:cd:57:f4:0b:2d:95:c5:60:de:
                    47:94:9b:1e:a3:72:7a:7b:50:33:ca:4c:89:24:9d:
                    28:97:f6:31:48:8c:13:70:14:39:29:f7:0c:c4:2c:
                    36:af:3e:06:21:53:bc:e6:76:48:12:0a:95:95:d0:
                    d8:d4:f3:0f:f2:a2:85:2b:73:13:e8:4c:df:69:4a:
                    5d:75:1a:da:c5:66:93:8c:9c:96:8c:b2:5f:21:f7:
                    56:6a:cc:79:ea:b3:28:d7:07:2f:48:87:1a:f5:ac:
                    b8:65:fa:d9:2b:c2:a5:0c:b8:93:1c:a6:80:45:da:
                    fc:de:f5:b8:15:26:7a:c6:57:48:0a:17:4a:26:18:
                    b2:6b:2f:9c:48:2f:49:c8:26:44:68:a6:b3:09:db:
                    82:1b:45:dd:38:35:f0:25:85:0e:a7:5c:f0:ff:d0:
                    f5:ff:ad:45:a4:a4:00:52:9a:17:2c:c6:ba:a0:97:
                    ee:74:52:aa:fd:19:9b:e7:5d:d7:de:51:18:c3:94:
                    1d:1d:36:99:60:2a:2a:ce:09:b3:9f:b2:72:8b:7f:
                    92:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:2E:00:E5:1F:45:4A:85:03:AB:6B:EB:6A:28:61:4C:87:19:CB
            X509v3 Authority Key Identifier:
                keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d2:3a:b7:c9:05:85:bb:4d:9b:04:76:33:35:50:33:b4:7d:
         a7:ac:bc:7f:05:bb:2f:39:0e:f2:16:bd:24:2e:0f:db:9b:aa:
         54:03:b4:31:72:41:f7:3b:4d:c8:89:d9:5d:10:4e:4d:9b:61:
         d0:31:8e:43:8a:25:58:0e:0a:b0:86:dc:26:2f:54:c6:b5:f8:
         bc:be:bb:2a:18:13:d6:cb:82:e9:ca:ff:a1:2b:e9:50:33:42:
         c6:4f:da:d9:75:aa:40:c1:b5:19:c8:88:e5:35:0f:a5:63:86:
         18:3b:0b:71:c1:97:bd:1c:94:46:e1:51:8a:77:d6:bb:c3:06:
         40:2e:f8:8d:d6:79:b5:4a:d7:78:1e:3f:a6:53:dd:ba:d0:5b:
         ed:06:9d:ee:bb:3f:24:ad:aa:d3:e8:5b:ce:54:77:53:1f:da:
         d7:8b:a1:a2:4d:f8:db:4f:fb:65:4a:32:75:b5:c8:bc:e7:9e:
         69:12:99:7d:63:30:39:d0:4d:fc:8d:4e:76:61:63:6a:51:8a:
         15:44:57:54:19:37:81:01:5e:38:85:3b:44:d0:2a:d1:3e:03:
         5e:0a:92:63:8b:7e:04:7e:68:20:a9:f7:62:9e:76:48:39:fc:
         a5:a0:23:13:4a:86:20:5d:d5:58:12:be:99:18:ed:c2:ba:27:
         bd:44:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:58:03 2024 by rpki-client on console-fra.rpki-client.org