Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          StGAINW2n6Sc3QLFrgSoGfkXNgRnhlcVij+QsnAcW9Q=
Subject key identifier:   42:24:B2:E9:9D:90:98:6E:FF:BD:C3:C9:2C:C9:37:8E:86:B8:1E:31
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       018F8749DB10B8DFFB3C46E34F53D7BE3E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:01:55 +0000
Manifest this update:     Fri 17 May 2024 16:01:55 +0000
Manifest next update:     Sat 18 May 2024 16:01:55 +0000
Files and hashes:         1: AjnIXp1oMzvpYvRGTQ_r2CN0XSo.roa (hash: +bk+QwZKc2JXHn2tgAtzlEhKr/7A+b0ohvUyivjcsBE=)
                          2: IbI07LQ22nbhua3zdt6Hs0h6JHw.roa (hash: YftXpyfcnPKIfW1q7D3R5EZVbXQ65XG0/ZlZCZDnYP4=)
                          3: OqeWW29XF3TV4JiYZMshFmcOmPI.roa (hash: 2zF8zdAiY1Vu65/7ReYALXmK4T7KsELGCYBnuIV1JXw=)
                          4: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: /NWJwpbBd3nE6QjSyoMiOKZEtEJULN79MTjZO/rbHxA=)
                          5: iaCMHVBu0_bUpYbfLFCw69Xv6qY.roa (hash: n8YFksfLxTssmGnZHir4W6PzMs+W3yHclF985wiqCNA=)
                          6: ymmmTMOjuGw8y3bSiLrYGBxbTqU.roa (hash: oVcdMx9cjkPth4zxxRQNkD35x4VHhyi1C6lAViqenCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:db:10:b8:df:fb:3c:46:e3:4f:53:d7:be:3e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: May 17 16:01:55 2024 GMT
            Not After : May 18 16:01:55 2024 GMT
        Subject: CN=4224b2e99d90986effbdc3c92cc9378e86b81e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:d4:7f:2f:f0:b6:41:89:32:6e:ad:fc:6b:
                    f6:36:3e:5f:78:3d:7f:ea:52:0f:2f:20:93:24:3a:
                    24:b5:59:c1:83:59:5a:d0:0b:78:8a:bc:b6:ff:81:
                    4c:c1:e4:2a:b4:ad:7b:12:21:f0:26:46:2c:af:04:
                    56:3f:5e:a9:ca:c6:9b:fc:b0:31:23:23:a1:f9:ed:
                    2f:c2:ff:10:f6:e2:c8:06:05:6a:72:9e:5f:da:be:
                    8f:1e:be:ba:9c:69:a8:d8:9f:56:12:2e:89:78:89:
                    56:9b:f4:33:bc:ef:37:5c:34:9a:13:96:b2:8b:4e:
                    f1:77:64:93:16:d4:54:fd:50:d0:4d:0f:9b:47:9e:
                    0e:7a:df:31:51:6b:61:1d:b4:60:af:c0:f8:54:9c:
                    0b:8e:5d:0e:a4:1b:25:41:b3:f3:36:ae:69:d5:45:
                    41:e5:75:30:75:03:60:6e:f3:b5:fa:d4:38:32:f8:
                    05:ab:29:11:9d:d7:61:9a:23:f6:14:7a:6c:03:fb:
                    c4:55:8d:f0:89:a7:78:50:2f:c4:20:01:40:e5:49:
                    a6:e5:c9:34:fd:aa:e3:50:8d:8a:27:df:1a:f9:85:
                    b2:91:b5:f2:d4:c6:8a:d0:fd:f2:f0:9e:13:d7:a3:
                    7b:fe:69:0a:be:af:0e:c1:3d:7d:c1:c3:a3:84:25:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:24:B2:E9:9D:90:98:6E:FF:BD:C3:C9:2C:C9:37:8E:86:B8:1E:31
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:48:38:fe:b9:ac:b1:b4:80:02:4f:85:cb:4f:f5:81:07:
         80:aa:49:70:cc:8c:14:39:04:4b:9a:ad:44:d0:ff:ca:56:fd:
         79:be:73:f6:7d:81:8f:5c:a6:84:ce:76:0a:37:b2:6f:e4:b1:
         d7:61:b2:f6:6c:6b:63:73:4c:85:17:fc:06:0c:90:eb:f7:85:
         47:f2:24:cf:5b:76:e4:aa:95:1c:3a:8a:38:b1:5f:d0:76:32:
         86:f1:69:64:29:4f:f5:ba:78:be:4d:cb:5b:22:e1:f5:c5:d7:
         b9:99:da:68:04:54:4c:e9:eb:8d:cb:73:3a:67:50:5f:f0:01:
         46:3e:53:5b:ef:56:75:a5:4c:7c:71:6a:9b:5e:56:70:ec:1b:
         6d:26:1e:93:09:e3:ef:8c:2a:87:1f:5b:6d:8f:6b:32:31:9d:
         0a:54:85:25:20:5b:43:80:51:a6:35:9c:d3:15:9c:f2:7d:99:
         5e:32:d0:d0:74:c8:fd:1e:e1:36:85:7f:60:9f:44:19:93:08:
         44:ac:bc:8d:7f:3a:35:e9:99:69:06:4a:c1:d2:12:21:44:7e:
         0c:66:68:be:44:17:11:39:bf:bf:b3:72:50:f6:e6:80:5a:06:
         9e:9f:07:93:f1:32:17:8e:5f:f4:5a:9d:5e:fb:44:41:6b:04:
         db:39:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:27 2024 by rpki-client on console-ams.rpki-client.org