Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File:                     Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier:          zFk59QZJSo8Lyavqb0RqRg2meiKF7tK/RKupnnwtz7o=
Subject key identifier:   1E:FF:2A:9B:05:67:8A:B3:D0:92:4C:61:85:64:9D:2E:2A:50:C4:E2
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer:       /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial:       018F87B6765E36C11EE579F210C7C858DEEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number:          0449
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: KN2DE5zx30wA3HZ6GhtUp5tJOHU.roa (hash: ztrrRwWnXKdR+vV8MaRAJcvwyk+CPYfarokcbFZsD8U=)
                          2: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: htuT1bFAhq/PVR2Rahy3zBrEgUiQNrv+L8sdKhTdA1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:76:5e:36:c1:1e:e5:79:f2:10:c7:c8:58:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=1eff2a9b05678ab3d0924c6185649d2e2a50c4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:ea:c0:df:fb:c8:e4:31:c7:c1:7d:3f:78:
                    32:5b:dc:b2:30:27:d5:a4:f3:f8:a7:72:db:00:3b:
                    6d:12:21:b0:b0:23:82:d3:f3:b6:06:43:8b:2c:01:
                    b9:e4:01:bf:65:62:0f:52:1c:35:28:a5:61:13:05:
                    f6:aa:b5:6b:9e:3c:71:91:fc:d0:2e:05:51:d0:9a:
                    ad:55:81:58:2b:ac:9c:69:16:a3:15:90:86:ec:b3:
                    6a:57:04:c2:00:b8:b7:b0:44:17:2a:02:30:72:5e:
                    5c:57:87:9d:5e:4e:bb:75:9c:52:46:2b:de:b7:63:
                    84:8c:32:c1:f5:60:f8:12:63:e1:98:3d:94:a6:15:
                    56:01:1d:5e:41:1b:fe:07:45:03:8b:61:b2:16:e3:
                    b1:60:b9:0d:84:09:0a:ba:b2:1e:03:20:9e:95:7e:
                    9d:28:cf:be:be:d3:ac:4d:e5:bc:27:16:d7:1c:61:
                    14:be:82:18:2f:f9:be:a6:ae:68:93:cd:69:c9:4b:
                    39:af:b1:aa:22:b5:4a:ee:10:ee:39:23:6f:c9:bb:
                    27:74:e0:e8:2d:c0:33:44:3e:d9:5d:04:e1:19:61:
                    2d:9b:70:b9:fe:fc:92:bf:36:e4:61:7e:55:cf:37:
                    f0:33:79:eb:15:19:09:cf:59:2d:e0:4f:99:a2:d9:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:2A:9B:05:67:8A:B3:D0:92:4C:61:85:64:9D:2E:2A:50:C4:E2
            X509v3 Authority Key Identifier:
                keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:26:11:18:e9:df:58:6b:2e:b6:19:79:5e:c0:83:0e:05:e3:
         12:c2:b9:53:eb:c2:3c:3e:33:6d:31:4f:40:1d:ff:6a:03:72:
         e9:8b:d8:e3:c0:bb:1d:03:11:8d:08:9d:62:48:f1:de:88:8b:
         93:ad:56:6c:c1:f1:0e:f8:64:a8:a8:46:10:1d:d3:7f:02:2b:
         bd:20:75:b6:df:7c:32:71:d5:e5:a3:bc:fc:94:ad:fc:6d:10:
         5b:29:84:cf:23:e4:35:34:f3:5b:78:63:c2:7c:97:49:37:c7:
         db:39:44:9e:96:e5:91:ba:61:a0:e4:4d:0b:9f:2a:4d:df:86:
         b2:b5:64:f1:68:26:bc:e7:b8:bc:ce:ff:44:e2:e3:a4:45:cd:
         af:18:59:be:e1:ea:78:23:96:e4:c4:67:a9:8d:0e:5f:7c:57:
         45:11:67:87:1e:73:cb:76:e1:d6:9e:b5:ea:16:da:31:d3:76:
         66:a6:56:4a:35:fc:74:67:f6:ad:8b:e3:e8:24:e8:5d:26:48:
         ee:52:8e:e7:e5:f1:3a:12:31:31:ca:76:4a:b4:7d:b0:2d:cf:
         31:8e:1d:c5:c4:c1:73:04:b0:5d:12:ab:a9:75:c7:7c:7e:0a:
         5e:df:eb:83:84:85:81:ae:03:de:49:bc:06:9b:db:fd:c9:af:
         ef:93:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:56:49 2024 by rpki-client on console-fra.rpki-client.org