Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File:                     tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier:          vtSlCUgEgzItsBVUQ/DxyrrLCKmmNihy6LZLOuvy3aI=
Subject key identifier:   DA:22:27:8E:18:4B:67:7D:47:C1:6C:D5:B4:43:A5:4D:7C:9E:CB:40
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer:       /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial:       01901DED9D004B8ADA9EB0BB370BBD6E1D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 22:03:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:49 +0000
Files and hashes:         1: 5i5A6J44EITcm1rq6lIYbDdEx80.roa (hash: WDVCW3qISvbTqhWiimuBx2qPviVJ2fOFwgH/P10VSsQ=)
                          2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: NyudN4ufsvUGYMBcKZAIJ7UZVPajsRZPMuMe2tvPd98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9d:00:4b:8a:da:9e:b0:bb:37:0b:bd:6e:1d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
        Validity
            Not Before: Jun 15 22:03:49 2024 GMT
            Not After : Jun 16 22:03:49 2024 GMT
        Subject: CN=da22278e184b677d47c16cd5b443a54d7c9ecb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b6:2b:78:21:f6:52:f0:96:88:38:f3:f8:b3:
                    99:63:9c:b4:ed:a2:2c:b6:75:7e:7b:6f:87:65:5f:
                    a5:b5:5c:a1:4f:a7:2c:94:85:b1:e0:94:1c:5b:d6:
                    99:4f:e3:a4:1c:ba:79:c7:84:18:f2:9e:11:48:2e:
                    dd:c9:f4:5a:42:c0:8b:34:54:85:0e:2d:f3:8e:3b:
                    d4:69:dd:e1:cf:46:04:10:ec:fd:3d:5a:1e:cc:86:
                    94:3d:41:d1:be:ce:ae:4b:34:10:ee:70:ff:57:fe:
                    55:98:f5:3b:40:0c:af:f1:46:dd:4d:99:9e:c5:c3:
                    b9:95:0a:7c:4f:15:99:44:bd:da:ab:5a:db:bd:0e:
                    89:7a:56:ad:35:f9:f0:bd:7c:ac:f5:f1:46:54:7b:
                    29:49:5f:93:96:59:a6:c2:1f:ae:92:da:c0:69:a7:
                    c1:6d:4b:96:b4:ae:77:c8:4c:26:a2:ca:09:11:76:
                    e1:ef:a4:21:dc:3c:f7:75:77:6c:eb:6d:13:36:49:
                    e8:35:a8:c1:c8:6f:cb:db:e9:68:06:fd:42:f4:aa:
                    a9:3e:db:42:af:eb:f2:d9:83:2e:36:94:f3:6f:b5:
                    08:79:a8:e9:65:6c:a5:96:14:16:3e:5d:ee:7f:a0:
                    08:7d:a6:ec:24:33:bb:7a:1b:73:40:1b:28:21:94:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:22:27:8E:18:4B:67:7D:47:C1:6C:D5:B4:43:A5:4D:7C:9E:CB:40
            X509v3 Authority Key Identifier:
                keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:09:7c:85:02:cf:8d:52:99:d0:96:8f:c6:62:bf:1e:73:c0:
         d8:62:23:87:d6:f7:6e:c7:3c:7f:fc:08:55:9d:2d:16:e5:75:
         03:d0:6d:23:fa:c4:8a:26:70:0d:6a:71:fc:71:8c:eb:93:8f:
         43:c9:17:5a:7a:0a:84:10:ff:7f:24:63:07:98:6c:2e:a6:51:
         a1:9c:b9:5a:ca:3e:e0:26:75:5a:ea:13:ae:60:64:6f:73:93:
         37:29:62:b0:31:68:d6:fb:ad:6e:e4:a7:c6:fe:06:9b:ef:08:
         82:06:5a:60:ad:3a:43:6f:ad:0c:73:19:e3:7b:b6:38:03:2b:
         9d:4f:44:ab:d2:80:17:94:61:f2:ed:af:13:0d:be:d6:af:8f:
         59:ae:41:44:7d:27:90:24:83:88:5f:b8:99:eb:14:4d:54:30:
         01:de:07:a1:83:5f:41:22:eb:f6:69:a0:f0:9f:73:4c:14:ee:
         c0:71:a4:0e:e3:52:f7:6e:b8:2d:6e:39:ba:52:c5:15:6f:7b:
         11:da:f4:5d:dc:57:e7:1f:53:12:f1:c3:90:3a:36:68:9d:7d:
         66:1f:d9:e6:17:31:ff:0f:f7:45:ef:6b:c5:90:54:e2:74:67:
         18:76:3d:1e:50:35:f9:86:18:12:06:5c:80:cf:41:4f:3e:55:
         42:b1:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:58 2024 by rpki-client on console-fra.rpki-client.org