Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File:                     tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier:          cwPRXXA5vYeUBTJcyOVACCrkgcqQSOkMraYceBrgwuo=
Subject key identifier:   25:2D:DA:E3:6A:8A:56:2B:76:9D:FB:00:C0:2C:39:A4:C8:BF:79:8D
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer:       /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial:       018F87B6BAF40A93F14CA099EFEDD5B91833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number:          024E
Signing time:             Fri 17 May 2024 18:00:50 +0000
Manifest this update:     Fri 17 May 2024 18:00:50 +0000
Manifest next update:     Sat 18 May 2024 18:00:50 +0000
Files and hashes:         1: EL-6o3CIda4mEzaWFvfIePptda0.roa (hash: kqKV+4qT50HIxQskWPr+8uOu+XBepHhEgvoYqoE3IOA=)
                          2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: jQd8Wy7X1g5RMW/7tyd6i3ciZwE2PEMy/1nCRAfWw84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ba:f4:0a:93:f1:4c:a0:99:ef:ed:d5:b9:18:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
        Validity
            Not Before: May 17 18:00:50 2024 GMT
            Not After : May 18 18:00:50 2024 GMT
        Subject: CN=252ddae36a8a562b769dfb00c02c39a4c8bf798d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:15:5a:cf:ca:2d:84:4e:45:4c:31:51:4f:
                    2f:f4:d3:f3:8a:1d:21:b8:b4:c7:0e:99:14:f2:c5:
                    48:67:94:c5:b8:d3:96:d5:44:75:16:18:96:f0:4c:
                    89:7b:58:08:52:ab:19:6a:13:ba:f7:89:3a:8b:f1:
                    1e:07:92:68:47:ba:96:be:64:7b:86:eb:55:4e:be:
                    66:bb:1a:d5:ff:ac:eb:bd:e0:8a:2a:55:97:49:8a:
                    ed:dd:81:42:2d:bf:75:a4:6c:d8:f2:2e:66:1a:c3:
                    11:c3:a2:ae:2b:9c:de:ae:a8:76:b0:a1:e3:2c:82:
                    c6:0c:6b:f8:5b:0e:27:8d:f0:99:5b:22:a1:de:14:
                    26:a0:6a:d7:5a:10:59:29:e0:44:7f:49:69:13:d7:
                    27:3f:0b:3b:2e:ca:05:d7:2e:6e:82:03:8c:57:b6:
                    a4:33:ba:a0:df:9b:b1:73:49:f0:df:66:95:00:10:
                    2d:5c:4f:89:14:ee:00:ab:9e:8d:c1:97:52:0c:04:
                    e6:c8:11:9f:ee:f7:a4:31:e0:92:84:60:5e:a3:0c:
                    a6:af:88:5c:bc:b9:63:b7:71:74:f7:ca:97:22:77:
                    b1:ec:9c:8f:8d:63:73:d0:ab:bd:b4:dd:3d:c1:10:
                    6b:55:02:7a:cf:2a:a3:eb:09:00:0c:84:e6:6b:2c:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2D:DA:E3:6A:8A:56:2B:76:9D:FB:00:C0:2C:39:A4:C8:BF:79:8D
            X509v3 Authority Key Identifier:
                keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:8e:d6:a4:99:09:6c:d7:ef:f6:ca:93:6b:43:49:69:a8:
         56:25:e9:a2:8c:59:02:2a:52:8a:8e:ef:60:7a:ea:b7:23:3e:
         53:00:68:1f:65:b9:b9:14:c7:d0:0c:58:3d:c9:f3:9b:52:5e:
         f0:ee:d0:3e:6c:39:b0:57:d7:50:ee:d4:5d:0d:85:45:41:64:
         86:27:c0:11:df:92:10:5e:7c:08:98:cb:9f:d5:19:f1:e6:e9:
         a0:da:1f:21:83:95:d4:a0:3b:99:a8:c1:78:92:ac:79:d0:89:
         d1:3c:fa:d1:aa:f9:ad:85:63:92:3e:81:f2:58:f1:90:7b:22:
         12:62:fe:10:55:82:aa:a8:e3:45:26:ed:bf:4d:3d:ac:fd:e1:
         d0:d8:11:d6:97:3c:ce:90:ce:b4:14:7d:62:55:fa:f9:9b:dc:
         fb:cf:8d:02:21:81:53:c2:a1:30:5f:23:3f:76:10:ec:e8:26:
         60:32:19:f5:4f:73:8c:61:4e:88:e4:85:af:f0:5d:64:99:53:
         bd:8e:ad:b8:47:25:9a:11:aa:a1:9f:74:08:32:a5:21:4e:81:
         a0:16:82:01:78:be:49:e1:3c:28:ed:6d:7e:5e:b8:59:8a:6c:
         73:be:a4:06:17:e4:00:12:9f:22:70:35:6c:04:12:b3:5e:95:
         25:1d:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:56 2024 by rpki-client on console-fra.rpki-client.org