Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File:                     tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier:          yRLUnpdaMn+rerafc5lF8m1k6tESg6rT9WQc7aXVQIo=
Subject key identifier:   16:23:60:11:2F:1F:56:59:AE:98:24:B9:1D:F0:7E:4C:4D:A6:3E:3C
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       018F8447C6FEF2FB0DEA5972C8E093730D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 02:00:47 +0000
Manifest this update:     Fri 17 May 2024 02:00:47 +0000
Manifest next update:     Sat 18 May 2024 02:00:47 +0000
Files and hashes:         1: MIDXNSWjIhULQb8E4WP1UboAY9U.roa (hash: C7qbLjUtcbapVvbxb1un9lYjbiieubM8Ywh3jGsbkDM=)
                          2: cPlIOHY_prWuoWNTC3wdmczhAlI.roa (hash: xJGtxpKPO3uELeXBLRhrhC/pk2VehMKqrPh9NweVeF8=)
                          3: g6M4n9DqNfPKPaWqLr9z6m9VJe0.roa (hash: zgBQA3y4+wI3uG//AAPYkkLxdmAKQpqGoWrKnKdQB7s=)
                          4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: 5OqjcX18oJrgS5JH/cGwG3kzggvHwhPsMD8baD/daLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:47:c6:fe:f2:fb:0d:ea:59:72:c8:e0:93:73:0d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: May 17 02:00:47 2024 GMT
            Not After : May 18 02:00:47 2024 GMT
        Subject: CN=162360112f1f5659ae9824b91df07e4c4da63e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d3:c9:14:8c:01:17:5c:b5:e0:0b:5b:76:60:
                    18:44:50:42:8a:10:dd:b5:85:e1:e9:16:61:16:80:
                    4c:9c:41:d6:65:47:73:7e:73:21:02:2c:5e:43:a5:
                    22:5c:2a:83:58:4f:cc:98:39:a4:0f:d9:e1:55:9b:
                    da:53:fa:f6:6b:b8:c4:00:08:84:17:ed:af:83:b6:
                    b7:b1:73:b3:c9:d1:67:2f:b9:3f:eb:7a:b6:c7:7f:
                    11:09:44:71:e3:b7:f0:02:c2:cc:4c:89:29:49:f7:
                    af:9d:9f:55:75:ac:42:34:f0:19:25:7b:ff:48:d7:
                    5a:4f:6b:51:15:30:25:42:c9:95:5d:85:0b:4a:35:
                    45:0f:17:9a:6d:59:c0:d5:dd:92:d7:9d:f6:80:0c:
                    9b:0c:35:fc:ee:d5:31:d7:8a:2d:83:77:6a:3f:7f:
                    a9:fb:00:d3:f7:6f:92:6e:8f:ef:01:27:16:6c:66:
                    ab:ee:26:c4:bd:f6:41:db:5f:69:da:3e:71:e4:90:
                    7f:58:dd:4d:84:81:c4:a2:14:f9:15:37:c7:da:2a:
                    0c:3b:4c:1b:87:bd:00:46:f5:80:ae:85:2b:e4:e4:
                    13:9f:c7:21:22:63:02:29:20:36:83:63:31:c6:83:
                    c9:a1:74:71:ba:35:cd:7d:1a:f7:59:22:ec:ae:1b:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:23:60:11:2F:1F:56:59:AE:98:24:B9:1D:F0:7E:4C:4D:A6:3E:3C
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:08:8e:bc:4e:4d:45:1d:54:26:b7:3a:b1:f6:5d:19:2d:c3:
         70:3e:2f:32:ec:18:80:4a:c9:df:51:bb:76:28:ae:1b:15:64:
         06:05:8b:6c:9e:c0:46:74:9e:83:1a:76:c4:6a:85:70:40:0e:
         5b:e0:58:63:fb:25:39:fc:9a:7e:0f:d8:1b:45:2f:69:81:27:
         42:79:52:85:a6:05:8e:0b:5a:8e:62:87:2e:96:0e:18:95:42:
         13:5b:de:a1:0d:69:59:df:83:87:e4:d1:fa:44:da:05:b7:b9:
         4a:d6:01:19:20:f6:24:db:5d:c2:ad:c6:2a:90:d1:37:9d:60:
         bf:5f:a7:9a:d4:0e:a3:37:05:b9:20:9c:b9:07:fb:23:ce:97:
         67:16:61:03:26:dc:71:09:0a:9b:28:9e:d7:a7:57:48:2d:94:
         7c:42:f9:6d:cc:44:9d:43:66:e5:e5:d5:34:c4:0d:dc:46:58:
         3f:b5:ce:f1:88:b3:69:a2:37:1c:f0:9c:72:f3:0c:ef:c1:cc:
         4d:8a:cc:c0:e9:63:a0:c7:13:e0:0c:54:99:a0:e7:05:61:11:
         a4:4d:6a:ec:58:d6:36:83:5a:85:e1:52:30:73:18:f8:88:10:
         9e:8c:3b:2f:7c:e5:59:18:8b:f7:2f:a2:8c:ab:84:7a:82:1d:
         2b:a5:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:08:32 2024 by rpki-client on console-fra.rpki-client.org