Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File:                     TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier:          wCWzCN8ufP5SNcWLSZVZpCaB4eE2RoaggpFan+3KVk4=
Subject key identifier:   66:CD:3A:58:88:B3:F7:30:69:83:14:F3:0F:85:23:BE:BE:E3:4A:6A
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       018F874AEDFED8A529E3F841CD95DF5E79FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: 2drh9Colunxgs1C0oFPd4wi4ch0.roa (hash: Hi2F2tFMmZx3f+btl8VU/cGyRrJ+kKTjOu0EfijYQ4I=)
                          2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: 4T4vvlKT1/CzgK2ydmcnRzIRo2qtBeoubGEF3WEMdZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ed:fe:d8:a5:29:e3:f8:41:cd:95:df:5e:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=66cd3a5888b3f730698314f30f8523bebee34a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:32:46:2a:7e:e5:cf:08:f8:5e:98:5e:48:
                    21:a4:74:6e:e1:c4:75:cd:e5:ac:89:96:57:c6:27:
                    1b:4a:f3:c7:4b:cb:e5:08:e1:47:eb:0a:ef:4c:9f:
                    93:84:9b:c8:13:84:d9:aa:bc:a0:72:5c:c0:d2:a5:
                    b5:6e:5a:0a:b9:a6:8d:10:2c:16:6b:49:9f:9f:12:
                    9d:1b:1f:70:d2:38:41:96:6a:e2:54:4e:22:c4:09:
                    ff:f8:d5:6f:93:bc:fd:7e:0e:51:12:24:a9:00:91:
                    fa:ab:70:d7:02:3a:7a:f4:5d:c0:44:c8:e3:83:24:
                    40:45:16:8a:3c:8f:91:d2:69:3e:58:22:90:56:1b:
                    c7:c2:a9:98:98:b5:66:6a:aa:c4:6a:87:ba:d5:d7:
                    b0:ef:b4:d7:11:b4:9e:83:72:73:3a:d8:25:f6:ac:
                    70:50:63:5c:de:4e:e1:d9:73:0c:e3:f3:08:09:ad:
                    89:3f:b8:29:1f:eb:a2:db:e5:2e:2d:61:51:da:04:
                    9a:e0:7c:e3:8e:64:5a:2e:2d:96:d8:63:f8:67:a5:
                    bf:97:8b:e7:fa:f1:28:18:2e:13:af:20:21:c4:bf:
                    33:b0:33:8f:a2:7e:84:5c:f7:a8:21:e5:84:43:c6:
                    b9:78:91:54:4a:9e:dc:2d:02:e4:30:c8:64:93:e5:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:3A:58:88:B3:F7:30:69:83:14:F3:0F:85:23:BE:BE:E3:4A:6A
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:c5:03:3a:75:48:7c:ca:0c:11:9e:41:24:e7:2b:93:d5:
         dc:4e:87:d9:99:02:bc:a1:d7:23:69:c9:c8:9f:52:fa:e6:63:
         2b:da:ec:0b:24:1d:a0:f3:6e:8d:87:61:4a:d3:9f:9a:d1:01:
         e4:81:49:6c:2a:ba:5f:46:2a:81:d6:41:f3:08:68:79:a0:3c:
         22:6a:31:f1:90:0d:c8:e8:cd:c8:e0:3e:df:48:cc:a5:87:d8:
         62:4a:58:36:97:e1:31:3b:b0:a8:62:aa:b7:54:d5:55:f1:f7:
         f0:b9:7e:55:c7:5b:a9:31:e8:d9:cb:63:13:9f:1b:41:3f:f4:
         bf:cf:80:95:81:00:2a:57:37:cb:62:d3:ce:83:f0:90:b2:cf:
         cf:f9:e9:12:d2:ca:ea:c8:4b:3c:7f:e4:b3:03:cd:69:57:5c:
         22:c9:92:cc:71:e3:ee:a6:20:c6:2a:be:29:1c:87:bc:f6:6f:
         c3:2f:8b:5e:f8:b4:5b:8c:68:f0:98:19:35:72:7e:93:f5:3d:
         ac:d5:c9:ff:09:d5:6c:8a:a5:73:e0:96:18:b4:1a:2e:16:bd:
         fd:ad:54:94:89:9c:a1:87:85:59:a0:57:56:38:ae:78:dc:ba:
         fe:12:7c:fc:62:65:32:28:18:d8:20:0c:13:50:01:42:58:c1:
         23:96:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:26 2024 by rpki-client on console-ams.rpki-client.org