Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File:                     ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier:          qGQzrPuyCh1TtZsiDzeAfyEWmOFUpDYz4KYYyjY7lhI=
Subject key identifier:   EC:6A:61:0B:A8:01:74:C9:5B:57:2C:20:68:D7:B4:42:38:B1:D4:83
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer:       /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial:       0191FAEDC7D2C12D7871CA1A961541E4C446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number:          014A
Signing time:             Mon 16 Sep 2024 13:02:52 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:52 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:52 +0000
Files and hashes:         1: RHqeusVkQcL8n2W8ixy7iL7flsk.roa (hash: Zfl+eOKzATcfqBYX7tvkxtlnfkYkpyTt3/PJViN2G/E=)
                          2: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: 0jfh2r+xMDI4t0Mvt5vAZPPtQZzwpQdOSvtO1HkBQh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:c7:d2:c1:2d:78:71:ca:1a:96:15:41:e4:c4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
        Validity
            Not Before: Sep 16 13:02:52 2024 GMT
            Not After : Sep 17 13:02:52 2024 GMT
        Subject: CN=ec6a610ba80174c95b572c2068d7b44238b1d483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:ee:b5:9f:4e:ae:4e:61:4b:e1:4a:77:72:
                    d8:67:e9:86:04:63:56:57:fd:31:dd:9e:ef:50:e0:
                    a9:bf:0d:7a:d4:75:12:3e:6f:1f:dc:d2:2f:30:d0:
                    51:e4:6a:90:b2:88:99:88:48:6b:86:c4:27:f1:a3:
                    3e:0c:4f:15:ea:6f:1e:10:40:b7:f4:3c:8c:c5:88:
                    3a:0a:cd:77:f0:f8:b9:a8:5e:36:cd:9f:56:41:c3:
                    b7:10:12:05:42:a8:c8:39:12:44:bd:94:10:bf:a1:
                    5b:f2:4c:9e:42:af:16:ac:06:0c:1b:78:2f:16:b4:
                    8d:26:38:74:16:f8:d5:a1:a9:3e:77:3d:ce:0d:c1:
                    73:5f:a9:5a:92:87:3d:fe:9d:c7:52:2f:26:03:91:
                    27:c1:12:90:fe:8e:cc:e0:c0:b1:30:35:eb:0f:30:
                    5a:4b:e7:11:04:5b:b3:7d:99:ec:12:e1:10:86:be:
                    9b:87:75:73:6c:91:b6:a3:88:23:b5:5d:d8:ef:1d:
                    f0:19:c7:a3:96:c4:05:69:b9:94:bd:e0:2f:80:1a:
                    1e:76:49:8e:a8:19:b3:45:5f:34:b7:0e:38:9d:33:
                    1b:d9:8d:75:1e:d0:bf:8e:26:07:2f:69:7a:b0:13:
                    e0:89:92:15:97:b0:5a:21:39:3b:a8:f6:c5:eb:7d:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6A:61:0B:A8:01:74:C9:5B:57:2C:20:68:D7:B4:42:38:B1:D4:83
            X509v3 Authority Key Identifier:
                keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:fc:63:6a:17:38:7e:54:e0:72:31:87:cf:a1:7f:21:81:
         49:33:49:21:43:a1:6b:d0:a9:67:ba:d5:36:8b:df:bb:3c:80:
         6c:8c:4f:3f:12:03:c3:ca:e8:f8:38:f7:34:e4:bd:f5:57:70:
         46:c6:11:30:0b:5f:c6:77:54:bc:2b:34:8d:18:26:a7:7d:2f:
         4c:5e:3b:54:5b:77:c0:63:36:f5:22:ae:8d:38:9c:04:d3:b4:
         54:7b:51:ae:e8:e5:f5:bc:98:f9:55:cd:96:98:5a:d8:8a:0c:
         20:9a:98:30:e7:d7:44:d3:10:62:8d:d6:cd:38:0a:68:fa:d3:
         4f:00:7e:3a:75:1e:16:f6:a3:50:98:32:9d:88:1d:fe:5f:21:
         8f:7d:0b:89:a3:16:99:a9:9f:0c:54:04:2f:50:27:20:e8:40:
         f9:d2:3e:0f:d2:f9:d6:e9:77:c6:eb:44:ba:be:e7:47:ae:5e:
         49:2c:76:75:74:18:9b:0d:5c:40:53:e7:b2:8f:a8:f9:ae:cb:
         a3:ab:51:26:c0:3f:40:9a:0d:a8:59:14:ff:05:32:3e:b8:a4:
         1d:d2:61:03:7e:f9:0a:b9:9b:f1:55:a1:ac:3a:23:4d:6a:ed:
         b5:5f:fe:b9:f9:f1:5f:cb:c6:ed:12:6b:62:af:29:6d:b5:b1:
         58:cf:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:10 2024 by rpki-client on console-fra.rpki-client.org