Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File:                     TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier:          2DG2M62VARuK95tegMmiCoW9hpztBM2LguQlB+z+iBY=
Subject key identifier:   5F:30:4E:0F:E3:C6:64:79:40:98:3B:F4:FC:46:27:86:72:6D:1F:04
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       0190520F783F31020F9A81E3C968013A8962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number:          11F3
Signing time:             Wed 26 Jun 2024 01:01:03 +0000
Manifest this update:     Wed 26 Jun 2024 01:01:03 +0000
Manifest next update:     Thu 27 Jun 2024 01:01:03 +0000
Files and hashes:         1: 18ZPhXMHuvzVxi0dQ-Jn8vcDA_o.roa (hash: 0W6+wcUAbuDDeiFlSxGrZ8YlqYucGO1T/KcQ9Ea1seQ=)
                          2: 5lwKN8bWv7RETFO4R2KnB6nMZdI.roa (hash: IgJTLjIZI4K1bMNiUeD2nIz0kjhMcPsWAdZMQ8Gddio=)
                          3: 9WKehCxjsufpL0TalMHPJnz7PHs.roa (hash: npIYWO0gU2+WwJPB6Z7znViP7vWDuFhU7YxJ4s5X2w0=)
                          4: K72sahkHzNTlh2OOiV6IahgHT48.roa (hash: B+N0hfHnmNQDhXiIg8zL6Gug+BT0Qx2nJvcc1l0mFaM=)
                          5: SATDiNk0aElld777RnLTntcnKpo.roa (hash: Jmab3JIqcIJ9KNbjJd90ZwG16MQs/kl9qm75b5lKuTo=)
                          6: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: g7Qhm9wyixkaYz8Qwx0yTKWf/6AwAA4qISSR+23XDXY=)
                          7: gZyquP1mxcwuOOXT6I9kTGvOEag.roa (hash: TxXLvG//c6kHTnG8moS7GQZK6013BBe73jGmXDd0zL0=)
                          8: pjNDkIkGxgwB_N3FTBlJp8KzyE4.roa (hash: aegTzg7mfaIVc0+qJVC3C0WYtnX28HUGzseK44MpYRU=)
                          9: u-xmEnH33cI2XzeJpDf_JZqPzD8.roa (hash: QYwyKG9zuAc+Xw3he02b7abgNTC78ENb8d95Hvvxqmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:0f:78:3f:31:02:0f:9a:81:e3:c9:68:01:3a:89:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Jun 26 01:01:03 2024 GMT
            Not After : Jun 27 01:01:03 2024 GMT
        Subject: CN=5f304e0fe3c6647940983bf4fc462786726d1f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:ad:1f:32:a9:6c:eb:86:d5:88:e8:03:2e:
                    e8:0b:db:d9:a3:5d:e1:13:46:dc:00:9a:4a:b2:f7:
                    bc:2e:c4:fa:f2:19:7a:1e:6a:95:f8:aa:87:5f:22:
                    48:76:e7:9e:96:48:4e:82:91:13:58:19:d5:88:8e:
                    14:af:bf:6f:75:74:0c:2e:b6:49:32:29:ec:7f:dd:
                    b5:b9:f1:6b:52:8c:cd:fe:42:64:0b:b3:6d:c8:38:
                    bc:18:e1:7f:32:94:16:0a:90:fe:cf:8a:a9:08:64:
                    df:d1:7e:29:76:1d:95:ab:8a:a0:96:ea:5e:21:fc:
                    3a:e5:ce:cf:e9:4d:49:ea:93:f4:42:03:6a:d8:df:
                    57:77:ea:5a:7e:1d:cc:f4:48:01:f9:89:07:6b:3d:
                    ef:c3:d6:d8:b7:62:6b:f5:f8:27:e3:db:cd:a1:5d:
                    68:5d:5f:88:5e:8a:d3:a2:b9:05:a4:27:49:2b:f2:
                    eb:dd:89:ad:4c:b6:c6:f4:96:e0:49:0d:1b:92:01:
                    cd:e8:12:f5:a0:47:f2:6c:09:04:f2:11:8c:3f:e5:
                    15:e4:09:15:df:e2:f3:90:e8:a6:77:8f:dc:59:f2:
                    14:ae:30:9a:28:ae:7a:86:24:ff:39:42:31:8d:50:
                    28:62:ef:0d:35:5c:31:51:51:e8:5c:22:49:d7:56:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:30:4E:0F:E3:C6:64:79:40:98:3B:F4:FC:46:27:86:72:6D:1F:04
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:93:ba:df:27:7e:41:c6:bb:6e:54:26:87:19:fa:6f:43:
         3f:d3:bd:44:90:c8:f6:58:d6:9b:9d:b4:cd:0b:29:cd:72:e3:
         a1:c1:bc:13:86:39:28:7c:f5:13:11:75:bd:a7:70:0f:ee:1d:
         08:1c:82:8f:65:d2:41:a1:db:50:c8:13:20:c9:d3:95:ec:66:
         a7:83:26:a6:4e:61:d4:06:55:25:bf:7e:3d:7c:d1:ce:4f:6f:
         ef:52:8b:a9:43:7b:c6:a8:41:9f:39:9d:2a:02:20:94:3f:4d:
         50:f3:1a:75:4c:51:d2:77:8b:ce:e8:d1:ea:80:99:8a:7f:46:
         a8:30:61:72:b5:ef:be:8d:dc:10:2b:f4:f6:f2:49:00:ed:e0:
         e7:97:ee:b7:b5:f7:4f:3f:0f:5c:9f:c6:32:91:73:0c:3b:3e:
         d8:c3:94:11:ec:44:b5:34:14:12:7a:c2:9c:10:b6:ef:39:6b:
         ef:14:c3:2e:d2:a3:4c:74:2a:36:05:2d:f5:57:c8:9f:f8:be:
         46:96:70:1b:51:a2:f2:79:1c:28:fb:45:1c:b8:0c:12:56:2d:
         89:60:14:81:ba:b9:99:38:9c:7c:0b:fe:df:86:a0:25:b0:7c:
         1c:24:73:ad:20:2e:57:d1:3e:93:ce:c1:93:47:bf:78:2e:a6:
         ed:17:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:30:31 2024 by rpki-client on console-fra.rpki-client.org