Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File:                     TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier:          q5AcLkiMJ6AVbzzqkRfbSs0xDuYJ3PV+ghBzEqWkeO4=
Subject key identifier:   1B:C6:AB:22:13:CF:9E:F6:69:3B:0E:78:A7:88:DA:9F:17:39:83:31
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer:       /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial:       018F87B64B608860CA15EC56E2D6B6676F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: xkBoobLuHrcoqXto3J+9Wf84X6gn21hLl3tyFGCLEAI=)
                          2: yvsLrEzSUKVV9YqeU0Lftt1DVd0.roa (hash: ophJHKsMbBEv9Ysh5GeC94WH9SrnyEu7YP10uM6VTG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4b:60:88:60:ca:15:ec:56:e2:d6:b6:67:6f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=1bc6ab2213cf9ef6693b0e78a788da9f17398331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:2b:02:23:15:9c:fe:8e:44:91:53:20:8c:
                    57:69:11:a1:9a:c7:9c:87:60:f8:86:dc:39:1f:72:
                    85:85:b5:c8:d2:77:af:37:ea:ac:27:de:02:44:55:
                    21:6e:49:eb:8d:8c:f5:bd:a1:2a:f9:f2:b1:a2:9b:
                    db:7e:59:7e:b3:e0:45:8d:73:8b:58:fe:9b:6d:08:
                    2d:ed:84:c9:82:2c:2a:7e:d9:1f:11:e4:ae:1b:49:
                    9f:0a:ab:6c:7a:99:36:08:bf:ed:54:6e:05:e9:00:
                    c0:ca:fe:62:04:43:0d:d6:07:55:89:26:3e:fc:a6:
                    01:3f:56:a8:50:62:e8:cf:03:23:be:76:da:ed:30:
                    78:15:a7:6e:55:e2:d9:2b:af:51:e2:5c:df:c1:90:
                    c6:64:ea:16:fd:1b:54:62:7a:8c:73:e4:30:37:67:
                    1d:03:a3:44:ab:62:ff:4e:7a:44:94:3d:8e:cd:fa:
                    18:ec:ea:8b:04:14:49:f9:16:35:54:8b:e3:a0:a8:
                    d0:82:d6:c5:18:23:03:04:66:6a:e2:26:55:c6:49:
                    68:c4:11:03:0c:c2:54:17:02:84:34:19:a7:1f:c6:
                    c4:d5:78:2a:68:81:38:96:40:15:23:e4:53:e7:72:
                    a2:f9:d3:d5:81:81:6c:b7:6e:44:3d:cd:15:53:78:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C6:AB:22:13:CF:9E:F6:69:3B:0E:78:A7:88:DA:9F:17:39:83:31
            X509v3 Authority Key Identifier:
                keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:39:4f:aa:6d:b1:13:92:60:2d:99:87:13:1e:87:57:9e:50:
         21:16:cd:25:9f:87:8e:be:d5:b1:2d:74:c0:c6:e8:9a:6d:61:
         7f:1e:a1:be:10:ff:de:27:21:9d:95:d7:73:8e:bd:53:3b:3c:
         3e:99:8c:bc:53:23:b2:a7:df:32:d8:19:86:78:7e:ee:d0:dc:
         ce:c1:1b:86:e3:45:b0:11:65:1a:65:90:c8:a8:7c:8c:8e:f2:
         3e:63:ca:03:23:7a:47:4b:3b:a6:81:fe:7f:6e:1f:76:19:19:
         06:31:07:c3:a1:04:6d:f5:33:04:a9:56:99:fa:bc:e4:9f:7d:
         61:06:a4:a0:31:28:08:fa:55:93:c3:5b:cf:62:a3:8d:e7:e1:
         e0:03:82:c7:bf:de:c3:4a:ed:7d:1f:25:91:92:4a:b5:34:c6:
         21:a8:48:30:e9:dc:40:92:f9:eb:a7:98:09:93:32:ae:ac:7f:
         ee:a5:87:fd:c2:d2:df:63:d6:d9:07:5b:00:58:94:11:a6:3b:
         c6:0d:07:78:02:35:04:d6:c2:ff:57:d8:20:5d:eb:6f:2a:80:
         f9:b1:ea:54:6c:4b:fb:46:af:25:51:78:99:b6:8e:54:4b:fe:
         ea:bf:ad:24:65:7c:61:63:61:35:c8:7f:13:bb:1a:f7:0d:0a:
         88:98:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:15 2024 by rpki-client on console-fra.rpki-client.org