Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File:                     TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier:          B+DLAolNZd6Cxb9nzTBMlI64LvzKk4pyWzgJyBqDkhw=
Subject key identifier:   7F:22:0B:84:49:12:8F:86:CC:6E:B6:3A:A0:A8:C6:69:D4:0B:A3:96
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer:       /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial:       01901EFDAAEC125130D3AE2B6039646A3EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:59 +0000
Files and hashes:         1: IUx_6LFkWuSLpMHj4cQ_q0X1r6Y.roa (hash: cd0qJPkA9IZstp02JbQpJXxkA7hcZQ0HWdydObcJrpA=)
                          2: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: cm1vyBnNp5f0X+UGHWUchrrMzKECHICaMlpyca8SgPc=)
                          3: XVIOaY56ACjByfQ-N6xJxbAoMyE.roa (hash: O94YJlb7VXLt8LCyVmZ5wLmCG8PvfHdqdzdESXbLnBA=)
                          4: g4ot4ivotgh6joubaGEqHMUNqeA.roa (hash: wavW+7m6zcBrZxIZnToDZylg0t8L0LzYUToFBMdL6Ik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:aa:ec:12:51:30:d3:ae:2b:60:39:64:6a:3e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
        Validity
            Not Before: Jun 16 03:00:59 2024 GMT
            Not After : Jun 17 03:00:59 2024 GMT
        Subject: CN=7f220b8449128f86cc6eb63aa0a8c669d40ba396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:50:12:f8:58:f7:5a:8a:36:55:33:18:0a:
                    59:bb:8c:ab:77:b8:dc:63:07:dd:0f:d1:cf:f4:0b:
                    88:af:d0:9b:cb:29:2d:9e:ce:cb:47:26:cd:f3:98:
                    71:8a:6b:47:59:74:df:35:e3:1f:2b:3c:cf:07:c9:
                    33:f3:67:15:69:2b:2e:0c:e1:cd:2f:3d:a6:a0:31:
                    25:bd:4a:a4:68:ef:d7:33:c8:cd:24:dd:30:4f:a6:
                    55:5c:f3:32:d0:4a:93:4d:d2:0c:aa:7b:e7:bc:66:
                    51:fd:c1:5f:70:c3:b8:50:7f:8d:9e:2f:c3:ca:03:
                    67:47:55:98:17:58:e2:5e:08:42:77:bc:db:9d:18:
                    77:54:59:86:ad:59:17:4e:b0:0c:2e:7c:f2:1b:da:
                    07:73:2f:9e:30:48:32:00:5e:f7:19:b5:38:f9:ac:
                    b6:2c:35:7f:89:2d:f7:e5:e4:d0:b3:b1:82:91:58:
                    df:29:43:6b:88:e1:06:a2:48:bd:83:24:7f:7c:cd:
                    c7:b7:69:53:d3:c0:a7:5a:2b:4a:1b:7c:11:64:1f:
                    13:db:db:c8:54:f8:54:4f:d6:eb:cf:a7:e9:86:89:
                    9d:7b:51:51:c9:d5:59:da:29:da:8b:bf:21:7e:12:
                    9f:95:88:d8:f5:df:d5:6a:59:38:41:29:d3:d7:d8:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:0B:84:49:12:8F:86:CC:6E:B6:3A:A0:A8:C6:69:D4:0B:A3:96
            X509v3 Authority Key Identifier:
                keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:4d:b5:9c:df:0e:d3:42:35:ce:c9:b9:44:51:db:e7:fb:
         14:6d:c5:d8:3c:28:d2:8f:7a:fe:91:46:7b:9e:ed:ea:35:c6:
         7f:1c:97:92:ab:5e:bc:e6:bb:c4:9f:57:bb:77:ec:ac:dd:d3:
         37:29:57:b8:51:99:05:67:e9:dc:82:c0:81:93:a4:ae:08:00:
         72:17:b9:e2:31:16:76:a6:fc:a9:f5:9e:41:e1:bd:bc:97:fd:
         36:c6:31:7f:79:2c:8c:a0:a0:06:7c:34:80:49:5a:1d:fa:fa:
         9f:cf:2d:d7:57:77:fa:aa:a5:0e:35:46:9e:29:9d:43:b5:0e:
         bb:78:d7:a3:c4:e9:f2:b4:3e:03:a1:0c:a9:3e:d5:e2:16:78:
         b0:a2:88:b9:fc:e1:86:e3:f8:e3:8b:6d:2a:02:50:22:5a:47:
         8c:df:d7:c2:11:bf:d5:51:51:82:77:37:64:c1:3e:b0:f7:ff:
         b6:06:d4:5e:01:ac:8e:a9:a8:6c:f9:af:f4:bc:68:94:14:17:
         6d:60:38:cc:08:b7:64:5b:94:e8:ee:e6:dc:15:21:bf:c9:5c:
         f7:c9:76:91:a2:62:1a:e6:0f:16:bd:3d:e4:50:86:fd:6c:9e:
         ee:c0:4e:05:61:cc:a5:35:d4:d0:19:cf:f2:8c:a8:01:0a:bf:
         3e:65:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:50 2024 by rpki-client on console-fra.rpki-client.org