Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File:                     tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier:          I8nhskYUyL9GJ/TIaTeyBAtSFZVtuvbIfmlpeuWCfqA=
Subject key identifier:   11:07:EF:88:CF:09:EA:B0:6F:D4:07:AC:E8:F3:CF:02:ED:23:6E:02
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer:       /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial:       018F58F05E5CB7875ED540CB20B458F38A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number:          04B9
Signing time:             Wed 08 May 2024 16:01:38 +0000
Manifest this update:     Wed 08 May 2024 16:01:38 +0000
Manifest next update:     Thu 09 May 2024 16:01:38 +0000
Files and hashes:         1: d2Q5XhdBNaLOJ0JlzWKqnSr9XIY.roa (hash: hSfHhFW6pknw0YwjCOxxz/oUcoq/RaESjWYlyrkfLlo=)
                          2: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: XQeVfgz6vKD70dBs4h+NxBLDAR7n88gnyycn0d5wfYE=)
                          3: vXtE71rFjE-7S-Wx3V9vBBb8-Gg.roa (hash: gyjTo+BgwSYy6jrQqKUAMUCpDvSClUwOfaUrJGBEqtE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:5e:5c:b7:87:5e:d5:40:cb:20:b4:58:f3:8a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
        Validity
            Not Before: May  8 16:01:38 2024 GMT
            Not After : May  9 16:01:38 2024 GMT
        Subject: CN=1107ef88cf09eab06fd407ace8f3cf02ed236e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:52:02:00:d0:e3:0f:b2:95:a0:48:24:e2:
                    0f:b5:4e:d2:4c:e7:c4:d2:5c:88:39:2d:68:05:d6:
                    15:5e:0e:2f:4e:42:7a:1c:f4:fd:6a:f8:7b:8f:19:
                    7d:30:69:4a:11:ca:48:db:25:df:19:35:f3:5d:b9:
                    ef:b1:3f:64:96:5f:48:42:fd:1a:0c:1f:a0:ab:e9:
                    40:e5:ad:c1:a1:ba:30:be:bf:57:74:6c:02:96:91:
                    a0:08:ef:f2:ec:de:f1:5d:bc:9b:b2:a2:0c:c8:4f:
                    3a:8f:bf:32:b5:33:42:b8:46:aa:5b:91:8f:2c:38:
                    fe:4d:b9:37:0c:90:e4:65:66:f0:df:a8:0d:0b:70:
                    bb:9c:3d:f9:d8:b5:11:6c:93:65:95:2a:cf:ec:ca:
                    81:46:f9:b8:c8:ab:d8:82:c1:01:d9:91:58:89:ec:
                    3d:e8:4f:5e:18:0d:8d:4d:61:45:3a:6a:61:f2:5e:
                    4f:b6:4b:1a:0c:93:a0:98:c2:f0:25:2a:d0:88:a1:
                    6e:37:ba:bf:b5:fd:c2:50:08:7e:c3:e4:ce:b7:23:
                    23:26:f1:d5:31:e8:1b:ee:3e:4d:df:9f:71:b2:fe:
                    4d:d0:48:2d:3a:b2:d9:90:8d:a9:6a:90:e8:27:80:
                    9a:a0:4b:3b:a3:8a:46:9d:a5:3e:4d:66:25:bc:41:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:07:EF:88:CF:09:EA:B0:6F:D4:07:AC:E8:F3:CF:02:ED:23:6E:02
            X509v3 Authority Key Identifier:
                keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:45:81:de:49:69:54:23:f8:42:f6:23:0a:ee:9f:03:3c:27:
         a7:90:ab:27:fb:9e:70:5a:1d:8d:bf:bc:84:56:82:04:41:64:
         44:f7:1d:49:9a:da:3a:26:ad:e5:c4:ec:72:bc:ff:e7:26:35:
         8b:fb:33:25:c8:f8:c3:4e:0b:a7:df:ec:28:3a:ef:bc:d2:ca:
         56:cd:ef:07:8b:48:ed:a3:c8:91:3b:66:d9:a6:e6:df:09:4d:
         bb:9c:b8:0f:bd:72:52:25:c5:76:6d:fd:ca:c2:15:69:f4:5c:
         40:63:3a:d4:74:11:bc:01:ca:21:3c:0e:3a:79:2f:a7:fb:61:
         b7:e4:58:4c:47:33:0f:41:36:d1:fa:ae:f4:89:09:0a:7f:6a:
         76:4a:e5:73:84:d8:95:fa:a5:2e:27:bb:7a:15:89:3f:0d:72:
         2f:f4:b5:c1:7f:9f:d8:a4:59:4f:e2:17:85:5b:9a:5d:df:f0:
         3d:fa:a3:2c:d9:e3:da:93:6f:81:9f:6d:95:70:bb:19:28:b2:
         5f:af:cc:a5:98:9b:9f:4f:bb:37:44:cc:7e:37:45:a6:dc:8b:
         db:6b:13:7e:d7:0e:f4:79:f4:4b:56:4b:c9:7a:7b:2f:6f:59:
         a0:f3:ad:04:87:96:69:56:be:7a:95:e2:28:12:12:5a:10:0a:
         97:83:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:39:43 2024 by rpki-client on console-fra.rpki-client.org