Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File:                     TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier:          V2sWKcWwBAYI+IdjHcpN/wxxAnzVdq7ncL5gVxGO8gY=
Subject key identifier:   C1:F3:EA:BF:4E:42:AA:BB:DE:11:82:CE:3B:E9:30:61:8A:2B:CD:F8
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer:       /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial:       018F874A14F99ECA884BE9F3E0644503ABF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:10 +0000
Manifest this update:     Fri 17 May 2024 16:02:10 +0000
Manifest next update:     Sat 18 May 2024 16:02:10 +0000
Files and hashes:         1: 7gAnW5gv7M2UOFz3lHFY5UWSKq0.roa (hash: RU7nQGs2L4u2+3yY8EIVjlhH142WmDVeEVreb67QvjI=)
                          2: Rv_8IwWZ7B7W2BieBRO86HpCHoo.roa (hash: qcMqZjU1x0xsTUD/QVqOAeZJTu7cdeay/Junj1QSoaY=)
                          3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: B5BavuH8PkD+6lm6i65cDBzeriyZSQkeHYTc+JcskA8=)
                          4: me0Tn5M89U7bAS_skRfEsVfQhTU.roa (hash: L2BUA7tzgbFNuUh5CdmgK+pJMFK8RYHMzg6wrPC5J+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:14:f9:9e:ca:88:4b:e9:f3:e0:64:45:03:ab:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
        Validity
            Not Before: May 17 16:02:10 2024 GMT
            Not After : May 18 16:02:10 2024 GMT
        Subject: CN=c1f3eabf4e42aabbde1182ce3be930618a2bcdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:05:09:9e:73:7b:ea:bd:e7:b8:2c:5d:7d:e7:
                    ae:08:01:15:98:ff:44:07:03:58:64:b0:a3:9d:dd:
                    d2:c3:6f:06:c0:a4:2e:57:12:71:1e:d8:86:34:0f:
                    2c:ad:e1:a9:08:aa:3b:f1:96:97:49:ba:02:ae:50:
                    ce:4e:fe:e5:cd:7b:17:9d:b6:56:e3:0f:9c:31:3e:
                    35:df:bb:c6:06:f8:24:66:3f:77:cd:75:c0:f1:3f:
                    58:26:43:b4:f7:89:7b:85:9a:06:22:fc:90:0a:91:
                    c1:f6:a5:c4:90:ad:88:c4:22:ff:91:9c:20:1a:e9:
                    cc:58:a4:f1:55:bd:8c:f2:b6:6a:14:7d:75:9e:69:
                    42:c3:01:f0:ff:1d:94:2f:f6:27:38:45:1f:c5:d1:
                    1e:e0:ec:42:0a:8c:9d:c9:f3:6e:54:54:d9:84:68:
                    16:9c:84:7e:c7:6c:19:d4:ca:1b:5a:53:92:42:e6:
                    12:3b:b9:07:f6:12:f2:8e:ea:8a:72:6c:0c:84:c7:
                    dc:81:95:05:bd:df:13:c3:19:5d:80:40:b6:4a:9a:
                    0c:5b:40:9a:45:9b:d2:25:bb:da:fc:25:c5:aa:9b:
                    64:3f:9a:bf:67:20:19:5f:4e:b3:e5:14:dd:7d:f7:
                    ac:80:d9:21:0b:13:ba:45:7e:ca:83:f0:c2:04:33:
                    1b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F3:EA:BF:4E:42:AA:BB:DE:11:82:CE:3B:E9:30:61:8A:2B:CD:F8
            X509v3 Authority Key Identifier:
                keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:80:89:fb:e8:6d:83:48:94:bd:71:a7:09:48:9f:e7:cd:46:
         3f:0e:59:36:d3:d8:66:43:ea:f8:32:95:4c:9e:c1:9a:cf:12:
         a7:d5:b6:e6:64:1e:9b:aa:c3:bb:5e:69:07:81:13:56:f2:b6:
         a7:71:ea:73:dc:29:dd:36:f3:c6:6b:24:f8:02:9e:20:64:c8:
         d9:9c:ec:12:5d:13:75:9e:6a:1f:e4:8d:9a:e5:3c:ae:ce:34:
         b5:95:54:cd:c3:bb:3b:d3:13:e9:03:45:43:1d:79:74:32:a1:
         51:e1:a9:69:43:0c:f7:af:63:0e:3d:ee:12:a5:42:ff:f8:af:
         c5:43:24:4c:ce:58:fb:bb:bc:bd:09:8a:8a:ea:c7:54:d7:e7:
         d1:72:e2:87:dd:f2:c5:77:fa:f9:82:69:73:f1:bd:09:20:d5:
         55:14:38:65:ff:b4:ed:78:d1:09:cc:52:7b:7c:4c:41:ec:5f:
         f7:64:48:cb:f5:cc:28:17:b1:3d:5a:1c:3e:51:c7:01:5d:4d:
         aa:00:6d:5c:ce:9b:61:16:99:03:4b:04:a0:a5:45:38:17:e1:
         1d:69:3e:7f:08:04:ad:84:be:3a:de:c4:4a:0a:14:2f:f7:07:
         57:bc:ba:54:4b:79:bc:22:69:30:89:f7:8c:1b:64:a3:f9:17:
         af:4b:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:00:53 2024 by rpki-client on console-fra.rpki-client.org