Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File:                     TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier:          yqImjuIv+f2jRxhHA7B7OzZsapIgEob0FZhNfsqj4fE=
Subject key identifier:   BA:01:10:A5:AB:AE:AC:E6:98:38:60:68:C8:79:57:7E:35:15:68:50
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer:       /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial:       01923B151D66AA3B2D4CFC49EE1227BFF58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number:          056E
Signing time:             Sun 29 Sep 2024 00:01:32 +0000
Manifest this update:     Sun 29 Sep 2024 00:01:32 +0000
Manifest next update:     Mon 30 Sep 2024 00:01:32 +0000
Files and hashes:         1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: i2QKnnsTQhharufU3C8ZsMIADAFVTtdExMjuxXD704Y=)
                          2: mMNqrsUSSMFz38Bix7stChSgrpg.roa (hash: 5ruJ4Qq1a6yc4BFgosej7viw0cu9hg3/h5h8RR3uYlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3b:15:1d:66:aa:3b:2d:4c:fc:49:ee:12:27:bf:f5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
        Validity
            Not Before: Sep 29 00:01:32 2024 GMT
            Not After : Sep 30 00:01:32 2024 GMT
        Subject: CN=ba0110a5abaeace698386068c879577e35156850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:bd:74:c3:9d:bf:95:35:96:5d:6c:3b:60:
                    87:ad:91:57:c9:24:9a:45:44:2f:fb:d4:ab:76:4b:
                    6b:46:d0:cb:54:70:fb:c3:bb:97:f6:7d:d9:68:cc:
                    6a:db:30:8a:72:ce:33:78:7f:ac:b7:3b:fb:2d:93:
                    13:77:ef:d5:bd:45:06:29:ed:23:cd:0f:2f:4f:aa:
                    1b:5f:b5:c8:59:ac:56:ab:d7:bd:68:1d:dd:e6:43:
                    c7:86:ab:79:a7:df:65:cb:56:d5:e7:93:67:3b:9f:
                    7f:09:f1:3a:ea:5f:56:4c:fa:30:78:cb:67:4c:d3:
                    64:c7:11:ec:5d:ab:f1:6d:e5:22:36:9d:77:aa:3e:
                    5a:af:4d:97:5c:ca:62:57:79:a3:54:8f:93:41:7c:
                    83:6f:cc:a2:45:4e:f7:cf:51:0e:67:23:72:ae:95:
                    9f:df:d7:75:6e:e3:31:f9:a6:7c:f4:29:01:04:af:
                    e1:81:e6:ba:e1:15:06:f5:ab:47:09:6c:54:ab:76:
                    30:2c:7e:a9:18:2c:f5:db:56:62:4d:b4:87:eb:af:
                    44:59:11:c2:1c:6a:fb:8d:7d:6d:1b:1d:b0:3d:56:
                    40:7f:34:5b:bc:1b:1e:17:ef:15:b4:ac:0d:40:fb:
                    bb:e8:86:8c:a8:17:c9:4a:87:31:ce:81:87:54:64:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:10:A5:AB:AE:AC:E6:98:38:60:68:C8:79:57:7E:35:15:68:50
            X509v3 Authority Key Identifier:
                keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:37:fc:2d:c1:3d:d3:6f:32:08:34:eb:75:fe:08:a5:d7:ff:
         71:0a:89:a1:d3:5f:73:8c:6c:41:85:65:f5:bf:b8:c4:8f:5f:
         72:c3:ed:c4:57:a8:46:5c:92:8e:8f:09:87:ab:13:47:28:ea:
         a4:72:a9:d5:4b:9d:fa:38:2c:d8:ea:b4:5d:c9:d3:3e:00:62:
         00:e8:c6:25:60:e3:e8:1c:b1:18:f0:e7:7a:31:29:18:16:36:
         a2:a4:3d:eb:f5:e7:2f:58:0d:90:ca:52:fd:03:32:2e:21:48:
         a3:b5:0f:eb:9f:35:ab:1a:b6:1f:15:e9:aa:94:2b:52:1a:c4:
         47:0f:a8:1a:54:a0:85:ef:fa:01:5b:10:4b:fa:55:75:38:ce:
         ad:d1:fe:96:c1:91:34:a7:f2:8b:f7:8a:85:c2:bd:d0:e5:5f:
         08:bd:8d:76:d1:b5:64:49:36:1a:9f:fe:8c:68:fd:23:96:3d:
         83:53:1a:de:ea:a8:a3:4a:54:d2:1e:e7:d9:e0:a8:3d:a9:83:
         3a:8a:f7:65:99:a0:cb:5a:b6:21:11:99:a1:99:38:0f:a8:91:
         1a:3a:aa:52:05:6d:c8:0a:b8:6f:42:87:cf:9a:b4:ad:5b:99:
         38:b4:89:bf:7c:8c:93:13:59:f8:25:2e:8c:95:d0:42:4d:37:
         39:7d:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:42:16 2024 by rpki-client on console-ams.rpki-client.org