Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File:                     Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier:          Wx9QAwh/UvqL0mxtLMuzDuODFZ8FsFG7o8YqpnWcpU0=
Subject key identifier:   14:6C:E7:61:20:63:AE:D4:B7:6B:12:E9:9A:6C:63:B2:6C:E4:37:3F
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer:       /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial:       019063714BDCD1E387E9476C03BF5D9D6DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number:          08CF
Signing time:             Sat 29 Jun 2024 10:01:27 +0000
Manifest this update:     Sat 29 Jun 2024 10:01:27 +0000
Manifest next update:     Sun 30 Jun 2024 10:01:27 +0000
Files and hashes:         1: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: y/mn8cU/t1dXEEUXcYce8oBEo/1oJ9k90+j8Qm/bWPw=)
                          2: qthVK-JMfpDxPTfb6zFjT7cbYi8.roa (hash: Xwp0NZByuFdXZP4JE7OBQ7WhvN6gr6Il95h9QV/NR4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:71:4b:dc:d1:e3:87:e9:47:6c:03:bf:5d:9d:6d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
        Validity
            Not Before: Jun 29 10:01:27 2024 GMT
            Not After : Jun 30 10:01:27 2024 GMT
        Subject: CN=146ce7612063aed4b76b12e99a6c63b26ce4373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:92:f1:25:25:db:05:59:cd:1e:71:23:23:
                    65:b5:43:00:7b:1c:09:71:8a:68:bb:b6:e2:95:d7:
                    24:21:14:c5:88:54:b8:1d:19:a3:0f:67:f1:3d:3f:
                    99:22:16:42:8e:cc:c3:d5:94:d3:ab:90:62:c7:6a:
                    80:ff:2a:13:ca:4a:89:62:1e:94:5b:5d:05:73:6d:
                    3e:4d:f0:f9:54:9d:d4:19:18:7d:c5:37:ca:fd:97:
                    f4:85:28:88:3e:58:93:ad:da:90:25:16:9a:de:ac:
                    16:c9:22:e0:32:e1:d0:90:69:15:01:9a:4d:1e:24:
                    1b:14:b7:e1:76:42:1e:cc:97:a1:d6:03:41:a5:6f:
                    ae:2f:25:24:fb:e0:ec:ae:87:5d:52:30:fc:8d:68:
                    17:6c:ef:4c:ef:01:77:2b:f1:99:9a:21:58:9f:59:
                    6e:3d:c1:59:63:ae:23:74:38:e1:50:42:ee:1e:75:
                    22:6c:77:fc:5f:62:7d:60:37:bf:af:3d:b0:b6:53:
                    a6:e5:b2:4b:77:3c:ec:84:7d:97:da:40:22:f9:e5:
                    86:ee:25:1e:78:98:c5:4c:d9:71:f4:5f:62:73:a0:
                    25:78:6f:66:8f:82:c7:ab:da:55:48:3b:32:1a:aa:
                    9a:bb:6f:55:e5:10:76:6e:86:73:6e:d2:34:b4:94:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6C:E7:61:20:63:AE:D4:B7:6B:12:E9:9A:6C:63:B2:6C:E4:37:3F
            X509v3 Authority Key Identifier:
                keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:3c:34:64:c7:4c:45:b9:85:8f:ab:d2:d9:9c:19:3d:1a:
         17:76:ed:8a:65:5f:3e:5d:a9:f7:dd:10:d2:7e:85:8b:fe:3a:
         ea:5e:98:d0:a2:53:8e:b7:aa:ce:58:1f:f4:28:ed:f7:f8:27:
         fc:83:83:52:4f:52:af:0a:21:2d:74:ce:b5:a1:64:c9:57:f4:
         8c:05:2f:4f:08:44:60:f8:3a:4a:f5:e1:a1:e1:ac:98:55:1a:
         1d:28:f4:70:f2:b5:b7:9f:54:45:0b:03:73:aa:5d:1b:b1:5b:
         64:55:44:25:62:2a:c0:68:99:c0:4a:aa:b9:5a:b0:b9:66:3a:
         a7:ac:55:30:94:60:8d:b2:76:7e:1e:fc:0c:12:1c:26:ed:2a:
         90:42:7d:89:69:ee:2d:27:6b:22:9e:a8:dc:cc:00:94:ea:2a:
         d5:5e:7d:21:62:85:e3:c9:31:97:e1:01:87:dc:72:49:0e:06:
         49:b1:34:7a:d9:75:cf:ae:6a:2d:eb:5d:44:a9:8a:e6:44:dc:
         b4:e6:bc:60:a3:8e:c0:55:cc:57:6c:41:1a:d4:bd:af:e1:fb:
         e2:44:c1:e1:04:bc:3c:de:08:b8:a7:67:70:ee:a6:2c:38:34:
         db:33:bb:06:a5:1a:b1:fb:df:ae:b0:3f:4a:ea:39:44:bd:77:
         85:7e:82:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBjcUvc0eOH6UdsA79dnW3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4
MDhmYjUwHhcNMjQwNjI5MTAwMTI3WhcNMjQwNjMwMTAwMTI3WjAzMTEwLwYDVQQD
EygxNDZjZTc2MTIwNjNhZWQ0Yjc2YjEyZTk5YTZjNjNiMjZjZTQzNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm+S8SUl2wVZzR5xIyNltUMAexwJ
cYpou7bildckIRTFiFS4HRmjD2fxPT+ZIhZCjszD1ZTTq5Bix2qA/yoTykqJYh6U
W10Fc20+TfD5VJ3UGRh9xTfK/Zf0hSiIPliTrdqQJRaa3qwWySLgMuHQkGkVAZpN
HiQbFLfhdkIezJeh1gNBpW+uLyUk++DsroddUjD8jWgXbO9M7wF3K/GZmiFYn1lu
PcFZY64jdDjhUELuHnUibHf8X2J9YDe/rz2wtlOm5bJLdzzshH2X2kAi+eWG7iUe
eJjFTNlx9F9ic6AleG9mj4LHq9pVSDsyGqqau29V5RB2boZzbtI0tJRtwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRs52EgY67Ut2sS6ZpsY7Js5Dc/MB8GA1UdIwQY
MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNM8NGTH
TEW5hY+r0tmcGT0aF3btimVfPl2p990Q0n6Fi/466l6Y0KJTjreqzlgf9Cjt9/gn
/IODUk9SrwohLXTOtaFkyVf0jAUvTwhEYPg6SvXhoeGsmFUaHSj0cPK1t59URQsD
c6pdG7FbZFVEJWIqwGiZwEqquVqwuWY6p6xVMJRgjbJ2fh78DBIcJu0qkEJ9iWnu
LSdrIp6o3MwAlOoq1V59IWKF48kxl+EBh9xySQ4GSbE0etl1z65qLetdRKmK5kTc
tOa8YKOOwFXMV2xBGtS9r+H74kTB4QS8PN4IuKdncO6mLDg02zO7BqUasfvfrrA/
Suo5RL13hX6C5w==
-----END CERTIFICATE-----
Generated at Sat Jun 29 13:13:00 2024 by rpki-client on console-fra.rpki-client.org