Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File:                     TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier:          RGsUnddWkqYtiieuno1ud5w17Rvswsu6PcuOA8PJOfw=
Subject key identifier:   0D:3F:11:B0:70:FC:4C:FE:22:4A:97:1E:30:44:84:C4:11:D9:C7:CC
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer:       /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial:       018F8749BBC66E4BD0C49EF0AF97D4CAA0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number:          04A3
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: M7_6H0HvN9UksOXQT_NeZBTUuqs.roa (hash: oDABDrj4rhjsFPgyzsKq2DnlweE1eVwQla+tt4X8Yz0=)
                          2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: DYgcAlwMxBl/HJ2Ti4BQdzJJsrgoIIzcPJ96EC5gVks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bb:c6:6e:4b:d0:c4:9e:f0:af:97:d4:ca:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=0d3f11b070fc4cfe224a971e304484c411d9c7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:a3:dc:2a:ca:af:d3:fb:3e:a8:57:20:75:
                    be:a2:7c:13:32:de:ab:3e:0f:f8:b1:49:72:35:2d:
                    80:ac:51:f9:52:d4:4b:35:a3:d7:58:29:0e:3b:9d:
                    47:ef:28:6f:ef:a5:d5:2a:15:f3:4a:96:76:5c:6c:
                    b0:7b:6a:02:cc:dd:38:51:79:95:71:0e:51:9d:36:
                    7c:cd:07:9b:0b:cf:19:ad:6d:a5:a8:2c:ea:09:4b:
                    83:08:42:53:df:4b:a3:77:93:bc:b6:4b:13:27:73:
                    11:87:cf:15:4d:fb:d8:ef:4b:07:68:62:9e:5b:a3:
                    fe:56:5d:10:0e:2f:fc:71:4a:fc:1a:86:96:9f:96:
                    6d:67:02:73:43:96:d8:86:56:cc:72:b7:26:47:e1:
                    00:5f:46:47:7b:ab:b0:1a:1b:1c:97:87:f7:cd:f5:
                    a8:0c:aa:c5:48:83:a3:51:fc:51:19:47:fa:e8:a6:
                    1e:21:c4:93:5f:24:4c:28:9e:8a:63:c5:34:bb:c0:
                    45:af:52:35:34:de:1e:6d:09:30:c0:4a:3d:22:5b:
                    cf:0f:16:1c:6e:50:44:ee:c1:a2:41:09:a4:00:91:
                    39:70:0b:0e:92:5b:fa:7a:4e:1a:bf:a4:10:9e:60:
                    0d:00:96:cb:cc:4b:9e:89:28:5f:91:81:0d:ac:25:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:11:B0:70:FC:4C:FE:22:4A:97:1E:30:44:84:C4:11:D9:C7:CC
            X509v3 Authority Key Identifier:
                keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:79:bd:54:3e:de:bf:6c:17:43:ee:52:21:d7:f6:50:92:1f:
         a2:31:03:8f:08:bb:52:3c:f2:a7:23:ca:ef:7c:9e:1d:01:e8:
         e1:50:72:d3:fd:2b:67:29:ab:1d:59:2c:e8:74:d6:29:df:a3:
         a7:e3:85:16:39:48:87:8b:ae:80:74:f2:fa:a6:cf:f1:3f:e7:
         f3:69:d5:80:38:86:24:26:d2:71:64:aa:df:2d:eb:f5:ee:6e:
         a5:04:a8:11:aa:c8:19:0b:a0:fe:3f:aa:05:ea:40:36:06:60:
         df:2c:fc:16:98:07:b5:85:0e:d7:69:c8:f2:30:6b:25:18:11:
         b4:a4:1b:f7:8b:0e:61:8e:fc:e2:01:4a:46:f4:a1:22:66:d0:
         3a:66:5d:12:e8:ec:16:d4:f3:db:96:9c:97:37:b7:bc:51:dd:
         df:9b:ac:ad:21:28:2d:6b:12:3c:3c:b6:48:0d:3d:90:90:ab:
         ff:d1:f6:5b:08:d0:a3:69:6c:4b:00:a7:cf:9c:66:db:15:10:
         0f:4e:6e:4c:09:bf:28:8c:e2:7a:58:84:dd:45:50:67:4e:8f:
         16:41:b9:33:51:70:64:78:33:4f:0e:44:c8:7d:c6:bc:0e:d4:
         e2:ed:ef:01:91:c5:4c:7f:e7:32:67:8a:c9:52:47:73:f0:95:
         d2:ee:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:08 2024 by rpki-client on console-fra.rpki-client.org