Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File:                     TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier:          RCccr9ZxDCcAYC1W0F8RISLDMcfglDcxqhlLcJEzRxA=
Subject key identifier:   C1:D5:3C:C4:3C:91:BF:81:1D:D6:29:AA:A1:55:C4:BC:26:18:2C:54
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       018F87B66C33DCECF0D0506C1C3395A63FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number:          09D2
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: M4FdP55ph1uI--J-7zyJSmBPvFI.roa (hash: q4rYtac8Ue24UIwXHpoLJI7ILqD/ODou0Z9TGDL5MtE=)
                          2: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: BjoGk2uqW2Z5/G7OQqNvc5/f+uqBPM5J5me0RxblAio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6c:33:dc:ec:f0:d0:50:6c:1c:33:95:a6:3f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=c1d53cc43c91bf811dd629aaa155c4bc26182c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:e0:9b:70:8d:7b:f7:5e:29:e9:2b:e0:3f:
                    ec:11:64:cf:99:d7:75:82:d4:41:25:4f:27:d9:88:
                    ad:a0:fa:2e:2b:8f:5d:b5:f9:a7:65:45:2c:44:e0:
                    e5:55:fa:af:d6:f8:1c:c0:c5:40:36:e2:33:61:52:
                    b0:ef:57:16:cd:d1:5c:30:f2:b0:01:ac:7e:1a:b4:
                    d4:c4:54:eb:79:fb:5a:5c:3b:33:1e:f5:62:87:34:
                    90:04:d7:d0:86:b2:09:9c:5b:b9:c2:f8:1d:62:54:
                    89:a7:30:be:1d:89:5e:89:33:44:bf:96:fc:98:1b:
                    aa:b5:94:24:cb:ef:9d:da:d6:d9:80:46:13:02:19:
                    6a:ac:c3:7d:cf:b0:fb:8a:4d:f6:d3:85:2c:d0:c5:
                    fe:26:8b:a0:c5:c2:d7:68:5d:6c:54:44:3e:4b:ae:
                    2a:33:68:4b:9b:ac:c2:c5:e0:6b:0d:72:bd:d7:41:
                    f8:f5:3f:bd:92:70:21:10:fb:1e:e0:2b:87:9f:10:
                    45:08:e1:2a:64:60:bb:b5:8a:ba:26:2a:3d:b3:cb:
                    5f:b8:68:96:75:02:fc:58:c1:4e:09:e4:26:77:6d:
                    1b:bb:8d:f8:6d:90:32:66:55:9f:da:2d:ab:41:29:
                    04:81:c3:8a:47:c7:74:d1:fe:92:37:a7:f2:28:14:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:3C:C4:3C:91:BF:81:1D:D6:29:AA:A1:55:C4:BC:26:18:2C:54
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:f2:87:0b:74:29:b6:82:ec:cc:dc:98:77:88:f0:f9:cd:
         52:b9:7f:ee:b0:10:dd:46:32:50:2d:08:11:71:15:f3:03:f2:
         b7:e6:95:ee:30:32:2b:83:5a:38:36:df:9b:4c:3a:4c:db:6d:
         9e:d2:f2:90:0e:a4:c3:84:6f:80:a0:ba:02:89:de:90:24:7e:
         1f:7e:5e:02:4e:0c:08:3c:21:bb:aa:33:5d:ae:8a:77:e0:75:
         de:c0:40:29:33:50:71:ed:ab:46:7b:88:3d:48:e9:2d:57:d7:
         df:f3:4d:d3:6b:3f:ea:ab:15:d3:7f:14:1a:84:80:ba:13:0c:
         4f:0b:1f:79:db:38:e3:9d:3c:1b:7c:b3:dc:78:63:a0:3b:18:
         99:90:0e:d2:1f:dd:8d:b6:25:51:7f:67:df:1b:8d:2a:b2:d2:
         e6:4f:65:d3:53:54:48:30:e3:b4:3c:66:31:8b:7f:12:74:85:
         7c:2f:d2:00:32:18:4b:c4:9b:58:fc:fa:ba:c2:f2:7d:f3:60:
         17:56:6f:ce:f4:de:f9:9d:a3:9e:42:73:86:ad:3b:0f:14:29:
         a9:53:b9:b9:b3:8e:ea:3e:c3:3a:8f:3b:d5:b2:96:8f:00:a1:
         b6:94:07:be:8d:e5:3d:e0:39:d0:04:aa:52:ef:c5:a6:60:49:
         89:47:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:46 2024 by rpki-client on console-ams.rpki-client.org