Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File:                     TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier:          jAGu0AmIgtzfrpcjOrJk4IfdmZYF8uu099qij6axugs=
Subject key identifier:   6E:24:F0:19:3D:39:D0:39:B5:FA:9B:CC:58:42:FF:98:D1:74:1B:95
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer:       /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial:       018F9C897DCD06B1C17CD773C3AD62722F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number:          1183
Signing time:             Tue 21 May 2024 19:03:27 +0000
Manifest this update:     Tue 21 May 2024 19:03:27 +0000
Manifest next update:     Wed 22 May 2024 19:03:27 +0000
Files and hashes:         1: E5dLY7dlEMxRq2l_L-yv-6CrFYg.roa (hash: nUdBv6iuy3zOMtcf4EMTfw2mTuJ5Q1gfBQQS4iaHBvM=)
                          2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: eFuVAGk0TDvsQkjSHMKAn0JxlH89FPRR3RVJwlvp1bU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:89:7d:cd:06:b1:c1:7c:d7:73:c3:ad:62:72:2f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
        Validity
            Not Before: May 21 19:03:27 2024 GMT
            Not After : May 22 19:03:27 2024 GMT
        Subject: CN=6e24f0193d39d039b5fa9bcc5842ff98d1741b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:b4:70:98:44:2e:46:4b:9b:ac:1d:a2:ef:
                    a0:cf:fc:7e:17:69:11:6b:31:22:1d:e6:76:80:a3:
                    20:2f:e5:df:f2:fd:c2:f4:d8:74:40:67:20:b2:29:
                    6f:a8:55:61:ba:0e:e8:0c:6d:6f:9c:84:12:7e:cb:
                    46:6a:ae:9b:45:d9:5c:91:9b:1b:17:b6:be:99:3a:
                    da:de:e0:74:95:e6:05:9e:bb:a4:a5:b7:a6:d6:7d:
                    4d:9b:80:55:f0:cc:11:de:92:91:17:15:b5:fd:25:
                    d6:3e:2a:70:35:dc:d5:cb:65:e0:b2:a9:fe:fd:2e:
                    90:53:31:3a:6f:64:f1:68:b1:7b:27:70:6f:18:ec:
                    bc:1f:33:f1:fc:fc:a1:3a:0e:23:40:a9:d1:8d:6e:
                    7e:7e:5f:fc:b8:1c:22:ee:c6:a2:6c:be:0c:35:b4:
                    ad:7e:8a:29:7f:ea:ca:d4:48:33:83:62:21:f6:b2:
                    ba:49:90:f9:61:2b:d2:df:cb:c2:83:0c:61:f6:c2:
                    24:de:52:f8:2d:6d:ec:24:5e:e6:76:e2:c4:d6:7f:
                    cf:f3:22:b8:52:16:86:af:39:0c:45:63:41:df:ef:
                    2a:4c:8d:aa:95:0d:db:bd:d0:00:73:9e:cc:89:bf:
                    83:da:25:04:78:ce:8b:2b:20:f4:52:44:6c:72:95:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:F0:19:3D:39:D0:39:B5:FA:9B:CC:58:42:FF:98:D1:74:1B:95
            X509v3 Authority Key Identifier:
                keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:18:dc:a4:be:ae:e5:07:bf:e2:a2:ab:2c:80:f6:4f:05:85:
         0c:1d:c9:04:9f:d3:90:ac:d2:14:94:e8:64:f7:a5:c7:05:31:
         b8:10:c7:34:f0:f1:b2:2c:c2:02:3e:d1:22:75:f8:28:92:8a:
         1e:e0:c9:37:15:36:ac:2c:b8:72:f7:8f:3c:82:35:2a:c6:9d:
         22:b5:0b:e2:dd:0b:45:82:39:78:a3:c3:67:a0:4d:9c:a2:5c:
         ef:0f:09:32:c5:b3:86:cb:63:e0:21:c2:91:34:7c:6f:b3:29:
         4d:72:0b:1a:84:30:38:0e:58:b2:a8:62:94:3b:33:d8:03:1d:
         ec:09:fa:c6:d0:14:e3:47:f1:2b:c7:7a:5d:b5:6c:93:f4:18:
         ff:00:6c:ec:ac:52:d1:9b:1c:87:50:c6:20:62:46:29:9d:63:
         35:b9:c0:aa:cf:82:30:49:d4:33:53:37:75:12:41:9f:a8:87:
         30:27:c2:c2:27:3d:86:80:36:0f:fa:d9:76:f2:a9:68:7d:ca:
         bd:e8:9c:3b:48:54:c1:78:48:3e:5c:33:76:05:e3:3d:03:48:
         8c:20:51:29:1a:87:22:a0:13:98:78:01:1d:2e:4f:a3:db:d7:
         8b:a7:02:a0:ca:66:86:50:1d:49:55:ba:b1:d7:01:2c:6f:80:
         86:33:b8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:40:13 2024 by rpki-client on console-ams.rpki-client.org