Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          1+M/Kgwo85YdDnH/d3stj3TNkzb+Xk+emMOj/KSDzPA=
Subject key identifier:   CA:9F:10:12:FE:C7:CE:FD:F7:CB:DF:26:06:95:81:6B:29:CB:27:F9
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       019040AFFC3945776488C090F9CEBE5233A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          11D9
Signing time:             Sat 22 Jun 2024 16:03:13 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:13 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:13 +0000
Files and hashes:         1: 2yWhghijh7SRc-kSmRFfMe7YxYY.roa (hash: fh4AyLzrEkU0l5dy6NwW0xJ+KSU6ToeTSdukRtIomQc=)
                          2: IeW2QviZdHCFkqyxKErCeigywQA.roa (hash: 0QdJ2WLUyUSu53F/VyUbztPdX4h61f8mvRNYsrSy5Jk=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: AAA10P0pOmZpYZ5buNRkoov/F6JIAJCZ3gteFCah1G4=)
                          4: Ukg9m5Byf1T5oJk2_0_APM40kA8.roa (hash: 8WQvGWIGQIhPoCZ91z+L2DKFaSc5q6lIs6W9IvjQgag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:fc:39:45:77:64:88:c0:90:f9:ce:be:52:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Jun 22 16:03:13 2024 GMT
            Not After : Jun 23 16:03:13 2024 GMT
        Subject: CN=ca9f1012fec7cefdf7cbdf260695816b29cb27f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:8f:ed:af:4e:55:90:b6:36:7d:76:8f:bf:
                    79:d9:0e:ec:ac:08:70:b3:af:2a:b2:e8:f5:d1:d6:
                    1c:61:8a:20:bb:bb:02:21:5c:30:8e:d0:6d:dd:ca:
                    2c:f6:df:e8:eb:7b:43:89:ac:1a:7a:26:26:ed:f8:
                    cd:72:16:a1:f6:4d:e4:20:07:8a:d3:44:24:c8:e5:
                    e9:86:cc:e6:81:20:1f:d8:fa:61:ef:45:23:80:fc:
                    32:b8:07:a6:31:50:59:89:ec:3d:7f:c8:9f:84:9f:
                    11:55:6e:b2:79:da:99:29:72:d5:46:41:6d:2e:23:
                    94:43:0f:e4:08:45:60:44:82:58:3d:45:db:e8:34:
                    2d:3f:0e:10:9b:6f:05:d4:49:c1:d6:2b:b6:fa:9c:
                    bb:4e:03:9a:04:dc:6e:44:fa:76:44:4a:d3:06:37:
                    0d:db:c0:87:c2:0c:77:e4:9d:23:25:a6:15:c3:86:
                    2e:5e:ec:cc:fe:4e:1c:43:93:60:7d:d7:fe:44:26:
                    ba:85:90:6c:96:8a:4b:cf:88:81:d9:73:2e:48:1a:
                    4f:c1:5a:d1:ce:1a:fd:58:65:80:d8:d0:f8:97:b1:
                    27:c5:89:37:9a:b4:01:4d:f7:63:eb:35:39:f5:86:
                    1a:16:af:75:f5:fc:ee:a8:0d:ca:96:41:87:39:3e:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:10:12:FE:C7:CE:FD:F7:CB:DF:26:06:95:81:6B:29:CB:27:F9
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:5a:64:8d:39:c4:e7:e4:7e:ed:99:4d:97:f5:b6:36:fc:
         9b:af:8d:cb:48:4e:d2:f0:32:3c:12:94:e7:fd:b6:73:a5:60:
         84:65:2e:10:97:95:ec:44:c8:d9:f8:f1:6e:e3:5c:7e:f0:37:
         6f:1a:05:12:fe:76:3f:dd:4a:0f:2d:fd:0f:7a:d7:bc:62:9b:
         4b:d1:5b:0f:83:c5:46:d5:8d:e5:ea:f2:d3:ba:18:da:14:95:
         78:50:6e:5d:8a:7f:f7:25:54:86:21:ef:90:7b:96:1f:ac:ab:
         d5:f6:a5:4c:39:90:a2:b3:ee:23:ed:15:ed:58:1c:aa:e7:30:
         0a:5f:a9:5e:ae:ef:1b:ca:5f:23:2f:67:8a:ed:9f:84:e7:77:
         c3:09:e5:ba:02:c4:f8:d9:67:47:e3:a2:a4:e3:61:26:70:3a:
         fe:cd:c1:d9:db:fd:b1:7d:ea:71:01:f1:48:3e:6b:1e:97:19:
         cb:30:ff:35:6a:da:01:e5:b7:05:3b:5d:f1:48:26:a6:38:ba:
         82:af:c7:e0:a5:f8:92:47:ab:be:70:cd:26:c8:bb:a2:a5:8e:
         7a:a5:5a:fa:67:be:df:81:31:d4:39:5c:d1:0f:e0:1c:e7:80:
         2d:2a:3c:e9:38:7b:38:8d:d9:8a:67:18:7a:c7:40:53:b9:0e:
         59:4a:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:32:41 2024 by rpki-client on console-ams.rpki-client.org