Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          miBSbZRRQV9y1goq79dy9LPeOr0a07OTCvntEFlYn0k=
Subject key identifier:   54:F4:10:4F:82:64:FB:38:37:F2:71:AD:FC:96:A2:2E:CC:57:40:49
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       0190459D5301EED20CFA0462F89EB668CA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          0BD5
Signing time:             Sun 23 Jun 2024 15:00:56 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:56 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:56 +0000
Files and hashes:         1: 1-hxxjJzKyQlTdDnz8-mAUPrFxK4.roa (hash: Scc0GGCHJDQsG05xdFEcKvGI/mpK/79ZrkvCXbvEuEM=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: xjMYr98mSCV7xc29URGN0alMJd/ahRWvlowRIYdWTW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:53:01:ee:d2:0c:fa:04:62:f8:9e:b6:68:ca:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Jun 23 15:00:56 2024 GMT
            Not After : Jun 24 15:00:56 2024 GMT
        Subject: CN=54f4104f8264fb3837f271adfc96a22ecc574049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:ad:14:70:fe:a8:af:1e:7c:24:9f:cc:ac:
                    9a:d2:e4:9a:a9:7f:b4:79:90:50:c1:35:e9:0c:4a:
                    ce:dd:31:ef:dd:c6:c8:f4:c3:99:6a:4b:ad:da:27:
                    71:28:f4:6c:39:62:a6:e1:8c:9a:78:0a:d1:b7:c9:
                    14:5b:99:80:50:4d:62:ba:44:65:f9:9f:9d:ac:be:
                    51:aa:0a:fe:61:1e:a0:34:ac:58:b3:4d:3f:25:2c:
                    35:de:09:08:fa:a0:3e:36:f7:94:34:81:8f:d8:1e:
                    f1:04:47:9d:68:df:d1:7e:63:36:ab:32:19:33:29:
                    ea:38:0d:b8:2d:22:de:08:b8:84:08:06:85:0f:b3:
                    24:22:68:4d:99:00:9a:ab:c5:19:d4:bd:c3:b6:fd:
                    1a:69:ef:c8:3f:82:d2:d3:00:ca:86:b1:74:3f:39:
                    5f:d7:1b:52:a7:12:ae:17:3b:ef:3f:1d:71:78:08:
                    fe:a8:0c:57:8e:b7:8d:59:6d:e3:b0:bf:ca:09:2c:
                    df:da:d8:1e:b0:a1:8b:25:a3:5a:0a:0f:51:0c:3e:
                    c9:a2:b3:c9:a1:c4:cb:a7:a2:2e:2e:05:ac:7f:ad:
                    4f:10:1d:ee:97:4c:35:aa:79:5a:95:ff:f7:99:b6:
                    e0:02:9b:4e:7c:04:71:28:c4:10:ca:ff:51:65:6f:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:10:4F:82:64:FB:38:37:F2:71:AD:FC:96:A2:2E:CC:57:40:49
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:83:59:08:61:39:4a:fd:0e:70:74:91:c9:b8:7a:fb:8b:
         73:2d:6c:63:e8:2b:27:c0:4f:40:a4:f3:a0:31:e5:d5:33:a8:
         4b:a9:49:08:7b:80:0a:ba:cc:c0:e1:e8:05:9d:0c:20:dc:4e:
         a7:64:be:29:18:ac:c9:74:51:06:95:1d:5d:43:52:43:a6:a5:
         78:92:f1:85:41:93:75:57:69:9c:31:a3:57:44:4f:04:7c:9c:
         00:fa:b2:78:51:47:b9:34:8e:00:4e:44:a0:b1:ca:34:80:2f:
         df:2c:09:0a:f8:23:ad:f9:36:5a:c2:fb:c4:6e:72:48:cf:40:
         8d:ce:58:20:01:d5:87:87:1a:a4:a0:90:88:7c:09:d2:04:33:
         d7:ae:f0:e6:21:75:e6:97:93:76:60:19:fa:57:85:74:32:51:
         7a:97:18:63:91:dd:06:1f:3c:3c:b9:e3:fa:df:c0:4f:e6:11:
         64:75:95:93:53:ea:8e:1c:47:7d:55:1c:19:ef:85:05:57:18:
         a8:4a:82:e4:a9:86:08:5f:a6:78:42:8a:00:e5:f2:ad:e5:0d:
         d3:a8:41:4a:0d:2a:77:16:01:98:80:eb:15:12:27:bc:a0:c0:
         98:0e:4d:2d:5b:f5:a3:04:8d:00:84:95:fe:21:9c:28:33:24:
         14:19:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:01:43 2024 by rpki-client on console-ams.rpki-client.org