Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File:                     T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier:          URGqdBOuovZFi3538TlnPKZYzNx8r5vmAk0mZw84FEA=
Subject key identifier:   79:49:63:53:B5:3B:3B:96:A2:09:3A:11:43:FC:F7:DA:8F:3B:13:EA
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer:       /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial:       018F874A1D716EA2716F6F7B70073A9AADFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number:          0DDB
Signing time:             Fri 17 May 2024 16:02:12 +0000
Manifest this update:     Fri 17 May 2024 16:02:12 +0000
Manifest next update:     Sat 18 May 2024 16:02:12 +0000
Files and hashes:         1: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: c61tuR2MUhcdIMWI7SajHvcPL/t57yCLd7j4RxmyvHg=)
                          2: e-RnjFIlCm8TZxht82B3LxYS3ac.roa (hash: ohh6LP4UqlNdOtm6OENVkdIGvrhFcseay8nWl5jLWDE=)
                          3: j5jltcxlE7wYiBIP8Ah2seSeJQg.roa (hash: cL5+I57WV96n7r00ADw0sK1L81B1XUzuHXn77ojK2/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1d:71:6e:a2:71:6f:6f:7b:70:07:3a:9a:ad:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
        Validity
            Not Before: May 17 16:02:12 2024 GMT
            Not After : May 18 16:02:12 2024 GMT
        Subject: CN=79496353b53b3b96a2093a1143fcf7da8f3b13ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:5c:46:f5:cf:95:26:07:1d:32:ca:e6:0a:
                    e7:0b:1b:ac:46:9b:e0:14:af:2c:3a:b4:f7:bc:b1:
                    9c:82:9e:29:4a:3f:28:7d:b2:c6:cf:6c:2e:bd:93:
                    f3:13:3c:c2:87:af:11:15:bb:64:e2:54:ec:d1:1e:
                    5a:f0:e3:ee:39:a3:f7:b2:84:96:80:a5:4c:69:15:
                    24:dc:31:23:29:70:fd:1b:fd:cd:f7:c8:48:68:ac:
                    60:7d:b3:39:50:4d:c1:71:84:03:e7:ee:68:21:d9:
                    a6:53:ee:a7:f0:0b:0a:a1:37:ba:80:7a:0b:42:fa:
                    18:f7:4e:18:55:8f:74:42:c5:a3:69:72:e9:e1:79:
                    c1:21:2f:97:9a:3c:40:2b:a4:0b:42:5a:b2:22:76:
                    5b:31:09:66:33:72:8b:a5:34:ff:6b:bf:a3:a2:9a:
                    45:45:ed:2b:96:c3:61:0b:55:49:3b:dd:0e:65:9d:
                    6e:5b:69:24:a6:83:8b:63:60:71:cb:9b:27:f6:44:
                    6a:cf:86:fb:58:30:fc:1e:55:df:03:1a:79:4d:28:
                    c6:db:ab:00:e2:a2:ac:65:cf:35:33:62:6c:a8:2e:
                    84:4b:62:71:bd:07:0f:7c:94:90:c5:4b:e2:10:6f:
                    97:fa:fa:32:c8:b1:16:39:d3:3f:a6:ae:72:5a:51:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:63:53:B5:3B:3B:96:A2:09:3A:11:43:FC:F7:DA:8F:3B:13:EA
            X509v3 Authority Key Identifier:
                keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:56:ad:87:a2:d1:55:5e:50:2e:3e:65:f8:99:b6:bc:75:69:
         89:e1:18:4f:4f:34:d2:af:eb:f2:6f:e1:ac:e2:7e:e8:9b:76:
         d1:29:c9:f7:3b:9b:96:a8:d7:c1:66:81:a3:f1:8d:70:b7:7c:
         d2:de:38:a4:a9:c3:6e:93:3c:c9:c8:d7:e5:4c:e1:d3:59:c9:
         18:16:cb:54:cb:e9:63:f7:72:d8:d7:26:1e:8b:5a:f5:b1:f7:
         d3:59:f8:5b:0e:a0:5f:b0:1c:74:d7:97:c3:84:c1:b6:ae:13:
         7e:50:05:60:44:e7:23:62:df:36:0b:f9:bb:bd:cf:0a:d0:57:
         a2:3e:da:1e:9b:e0:3f:94:23:36:15:58:e6:da:7a:14:86:d1:
         54:2c:d7:b7:d1:76:49:5c:ee:cd:db:98:bb:72:de:96:ce:00:
         f2:76:f3:e0:25:2e:28:99:ca:a5:21:96:a9:0f:72:ac:39:03:
         e8:14:40:4b:be:63:59:71:82:2b:8c:4e:26:29:ed:c5:71:11:
         d1:02:2f:4f:bd:31:74:59:8c:09:12:f7:4e:fd:ca:74:6b:19:
         78:82:f8:c0:40:1b:4d:a5:30:95:ac:f4:85:ef:5d:57:4f:0a:
         49:47:b4:2f:a4:14:c4:b4:f6:d8:42:a8:41:7b:22:eb:9d:f4:
         ba:12:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:16 2024 by rpki-client on console-fra.rpki-client.org