Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File:                     sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier:          ujjQQb66HtkqpxOp+JMVHZ9GWbA1lApYQBryWeyL2Vs=
Subject key identifier:   8E:F6:32:D0:6D:7C:48:12:B4:8C:A5:3A:40:17:38:FA:10:B6:2A:1A
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer:       /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial:       018F874A2EFFF8067F99F9B8EABFFFAA7F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number:          065B
Signing time:             Fri 17 May 2024 16:02:16 +0000
Manifest this update:     Fri 17 May 2024 16:02:16 +0000
Manifest next update:     Sat 18 May 2024 16:02:16 +0000
Files and hashes:         1: NgR37ANmrNNE3A5AMvaae_t1K50.roa (hash: kc+REan9AHLTX7fNR4EhWFNE8aSR1vqbijjkQz1B1vw=)
                          2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: 9ytYPfuVf2rAVpmXBDAyihH7U394UjtZH2RqLVlqLbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:2e:ff:f8:06:7f:99:f9:b8:ea:bf:ff:aa:7f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
        Validity
            Not Before: May 17 16:02:16 2024 GMT
            Not After : May 18 16:02:16 2024 GMT
        Subject: CN=8ef632d06d7c4812b48ca53a401738fa10b62a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e5:fe:e5:3d:ba:b7:5e:dd:37:29:77:93:68:
                    71:48:d4:19:b9:1a:b9:51:ec:bc:fd:b9:14:07:08:
                    ae:8c:f2:f4:a4:79:e2:58:74:4b:ea:e0:b4:42:5b:
                    64:b0:1a:72:be:7a:5b:75:41:ab:b6:14:3d:8f:8a:
                    26:29:93:1e:3b:38:63:a0:5a:e8:07:be:f7:60:35:
                    e7:b3:92:a7:ca:9b:a3:96:78:9a:7f:65:c5:40:bf:
                    3f:81:dc:bc:15:85:59:26:ea:4d:9c:a5:81:4d:65:
                    23:63:12:d1:31:32:92:41:b8:57:13:04:60:c3:6f:
                    2d:06:98:12:70:e9:d5:b9:5b:10:dc:1b:6a:e8:5e:
                    57:32:50:ae:7b:64:f1:8b:e6:16:46:79:e3:3b:73:
                    7b:d8:40:ba:82:12:ec:06:fa:ed:c0:24:3f:f4:e4:
                    60:2c:b7:46:69:87:78:73:82:97:8a:8b:ed:1d:ed:
                    50:68:6b:15:0b:94:9c:63:eb:44:15:e7:88:d9:6f:
                    34:f5:fb:7c:d6:54:fa:d1:4e:3c:14:24:b9:ef:74:
                    70:ca:af:79:2e:5c:40:9c:d4:d1:37:45:6b:bd:60:
                    f4:95:1d:67:90:28:c6:ed:ae:dd:26:89:1a:bb:2a:
                    a7:7a:58:8e:d2:aa:fe:d0:d8:2a:85:be:84:8f:12:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:32:D0:6D:7C:48:12:B4:8C:A5:3A:40:17:38:FA:10:B6:2A:1A
            X509v3 Authority Key Identifier:
                keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:48:81:1f:a2:99:7f:81:0b:92:ca:cd:e9:a5:83:1a:42:8f:
         f8:b0:88:aa:9c:c0:5e:bd:d4:65:4f:35:a4:a8:36:b0:1a:3b:
         ea:b3:f9:b1:3f:07:18:35:79:10:e6:d1:ee:75:3e:16:8f:35:
         93:d8:c2:ef:ed:e5:de:8e:fd:fe:c3:ed:43:cd:b0:ac:3b:6c:
         29:33:f8:10:63:0e:cb:f1:9c:2c:dd:9c:a7:73:ff:29:43:3b:
         07:66:2f:e0:e7:49:77:36:51:25:c6:dc:cc:16:24:f1:d5:f7:
         d4:8b:b5:de:a8:53:ae:b3:38:75:cb:5c:6b:e1:66:80:58:5b:
         2d:41:b3:68:a9:1e:b3:05:bd:5a:cd:fb:cf:6b:c3:dc:c7:6c:
         4d:89:e2:54:75:d4:7a:db:81:e0:78:4f:1e:87:f1:52:e7:bc:
         52:69:80:f8:f3:44:05:06:84:05:85:5c:f2:47:12:ab:17:35:
         84:bc:64:47:e9:35:33:1f:bd:5b:cd:bd:6f:c0:96:26:1d:ce:
         5f:bf:80:ff:37:62:6b:9b:8e:4c:90:bd:c5:26:dc:9a:34:26:
         a3:67:e9:a5:08:69:c9:01:d9:50:fa:2e:ae:11:b4:73:a8:14:
         4c:24:ae:87:cc:cb:e2:2f:18:cb:bf:47:59:6b:e5:a8:4b:26:
         46:37:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:51 2024 by rpki-client on console-ams.rpki-client.org