Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File:                     tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier:          nzXYZmOy7M69sGLkWRN5c91nThzAMBO+QlZqRhoAkL0=
Subject key identifier:   91:5B:D8:28:4B:AF:1E:21:8A:D8:AD:E9:5F:0B:25:5F:06:56:5B:52
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer:       /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial:       018F874ACB337FC36E20E815B00C0234DC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:56 +0000
Manifest this update:     Fri 17 May 2024 16:02:56 +0000
Manifest next update:     Sat 18 May 2024 16:02:56 +0000
Files and hashes:         1: IpfRYquYBREJuGGIMVW0xT4GPrc.roa (hash: zTv66mY2oJacfg5TXhHzQ4eLqggjjXUiUNc2CTfy1Tk=)
                          2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: YRAmGe2E56VGZ5M0cItR+HFCrFCqcHx+BythAMXY10E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:cb:33:7f:c3:6e:20:e8:15:b0:0c:02:34:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
        Validity
            Not Before: May 17 16:02:56 2024 GMT
            Not After : May 18 16:02:56 2024 GMT
        Subject: CN=915bd8284baf1e218ad8ade95f0b255f06565b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:d3:8f:c4:7c:f8:e0:d6:66:07:00:f1:c7:
                    f4:99:75:c6:51:7a:6d:85:f5:64:22:60:cd:ed:6b:
                    b6:93:1c:6c:de:4d:36:4e:dd:c0:b5:20:9c:a0:df:
                    4e:da:85:78:cd:20:f9:87:08:50:e9:ef:37:0d:73:
                    a5:b7:93:33:9a:2f:7e:f0:c8:77:16:83:95:d8:57:
                    52:02:05:c1:b7:09:09:f3:2f:f0:2a:8e:e3:d3:dd:
                    02:04:8a:fd:76:af:dc:c9:23:bf:27:c6:3a:14:7d:
                    07:e3:e0:8e:5f:79:01:3f:82:10:7b:70:46:b4:6d:
                    a3:88:6d:f0:62:da:e0:47:79:8a:40:21:af:d9:5b:
                    61:27:7d:f7:94:40:aa:44:8e:fd:8d:3b:24:43:09:
                    a7:be:5f:b0:6b:a7:70:7c:13:88:35:9a:2a:72:77:
                    f1:8e:91:10:cd:c9:e6:97:1f:90:fe:fd:d8:30:d2:
                    09:d8:80:db:ee:ee:42:62:a7:fc:03:67:4c:63:8e:
                    4b:80:68:5d:b7:4b:9f:58:11:80:23:0c:af:37:58:
                    67:c1:1d:c5:9b:bd:f1:fe:ea:fe:33:f9:14:dc:25:
                    d1:5e:58:59:7b:98:91:6f:15:ca:6d:ec:05:3d:4b:
                    c2:84:62:99:d8:23:b4:f1:6e:0a:bb:1d:34:7b:47:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5B:D8:28:4B:AF:1E:21:8A:D8:AD:E9:5F:0B:25:5F:06:56:5B:52
            X509v3 Authority Key Identifier:
                keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:c5:e2:d6:f2:c0:a8:4b:f2:1d:87:25:cd:d5:f0:72:48:
         9e:54:78:54:4c:9f:bc:52:10:ce:29:fb:a9:4e:04:1e:23:ce:
         95:ce:aa:6b:08:c5:b7:09:0a:bc:ff:ca:3a:12:7d:e7:81:8b:
         f5:05:5b:52:69:a1:40:f0:63:e0:96:d6:5c:bf:9e:bc:01:e8:
         39:09:4e:bf:37:5f:c1:e8:af:4e:91:b2:a0:aa:03:c0:0d:21:
         fa:e0:89:1c:d2:2c:19:bd:e8:54:fa:20:69:85:0e:28:f0:e8:
         0c:70:2f:36:fb:9d:ec:02:bf:47:17:b0:85:52:f7:04:68:27:
         5b:80:a3:2b:cb:84:b2:e5:c9:28:fe:c0:a2:dc:a0:36:1e:9b:
         53:4d:77:cb:8b:b1:04:d9:a3:65:c2:f9:4a:a8:40:ea:79:31:
         38:e7:b7:bf:cc:9e:78:0f:a8:ec:39:98:c4:02:8c:a4:94:6b:
         a7:aa:6f:54:8d:88:95:f0:7d:c6:58:29:34:33:13:39:58:ac:
         ad:48:e4:8d:4d:88:61:1b:0c:32:e7:cc:32:6a:53:3a:29:31:
         72:e0:25:ed:d5:b4:32:7b:9d:8d:f2:e6:71:c0:e6:de:24:3e:
         b8:8b:f8:70:bc:a6:af:b4:d7:de:31:f6:ea:7e:44:18:2b:06:
         69:0a:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:00 2024 by rpki-client on console-ams.rpki-client.org