Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File:                     TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier:          EOcSjkqTs/n611oq9KRYSbYGUi2FVbYu8rFiYSU27e8=
Subject key identifier:   59:26:48:7D:31:AD:51:70:1D:7A:6E:8A:4D:87:8F:16:B1:D8:19:C7
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer:       /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial:       018F8447BD6A928A47DB1A812DC1047F5933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number:          0E64
Signing time:             Fri 17 May 2024 02:00:45 +0000
Manifest this update:     Fri 17 May 2024 02:00:45 +0000
Manifest next update:     Sat 18 May 2024 02:00:45 +0000
Files and hashes:         1: 9H3_e57M-2X8NzBH_qsaNkaaX7I.roa (hash: C8TOPCzA/mLq38FsLRecTo6A/5bYraYVWGwTRDzacLY=)
                          2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: trY7+pDKjse5GyLWPQsN0BlZ6iv+Waybcc+mBQO3gWc=)
                          3: q36Dr2wXRWqeX944qGew3sxNnO8.roa (hash: NxY3f0K0Xq84opUftq3uZzK7xshUreOybNHgMjSTeQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:47:bd:6a:92:8a:47:db:1a:81:2d:c1:04:7f:59:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
        Validity
            Not Before: May 17 02:00:45 2024 GMT
            Not After : May 18 02:00:45 2024 GMT
        Subject: CN=5926487d31ad51701d7a6e8a4d878f16b1d819c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:d3:12:9a:ba:3f:1d:eb:82:18:5d:14:9f:
                    6a:2b:12:76:71:5f:7d:b9:a5:46:90:6a:86:42:f1:
                    f3:11:96:0a:81:3f:46:e3:35:80:15:9c:72:5a:53:
                    d7:19:36:5d:b6:06:be:0e:9f:4a:e1:78:43:64:7c:
                    34:7b:fa:86:05:c8:5c:d3:77:97:6b:a4:ca:33:94:
                    9b:73:f0:09:0b:21:89:01:ad:63:65:3c:55:25:78:
                    25:b7:6f:a3:c2:45:44:fa:f8:38:4c:a6:ed:8a:a5:
                    51:bb:b4:79:48:d5:d2:d8:48:75:b8:9f:a7:ff:1c:
                    3a:21:0e:28:7b:92:f3:59:72:af:4d:7b:49:da:2b:
                    dc:2b:77:82:09:ba:9b:58:87:4b:8a:d4:56:24:ad:
                    e5:64:91:66:05:a2:c5:77:65:4b:a7:b6:4f:be:f3:
                    a4:d0:ba:77:20:e7:42:87:df:75:d3:01:52:ef:c2:
                    94:50:59:a4:10:3b:c0:d9:60:05:dc:cb:15:5f:92:
                    b6:d1:b7:f0:31:ea:42:06:c8:0c:46:9c:57:ad:6e:
                    3d:89:a6:32:2c:8b:8a:74:45:da:6c:5b:3c:4e:29:
                    5a:28:a4:7b:e6:c1:30:5f:3f:43:e7:85:76:92:08:
                    ad:c0:e2:d5:a1:c6:b1:78:c4:5a:ad:11:40:cd:f9:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:26:48:7D:31:AD:51:70:1D:7A:6E:8A:4D:87:8F:16:B1:D8:19:C7
            X509v3 Authority Key Identifier:
                keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:43:35:a6:5e:cb:64:b0:79:ee:fa:b7:7e:e4:f0:7f:e9:
         1e:2a:99:ea:47:fc:15:3e:ee:1a:b0:64:75:8f:06:fa:d6:e5:
         f3:b2:d9:65:f2:09:ca:8f:98:1f:68:63:96:4c:15:62:df:fa:
         02:58:10:ed:b9:0f:11:d2:68:66:60:c5:81:3b:c3:c9:20:2d:
         4e:3c:3e:b4:63:74:f3:ac:85:c7:b2:4e:2b:17:b3:79:64:19:
         9b:20:26:3a:6e:d0:99:c9:c5:b1:26:40:70:2d:5a:0c:25:fb:
         f0:6f:6e:45:19:4c:02:a8:e4:6d:70:e8:5c:2a:00:87:f3:68:
         3c:3a:f7:1c:0b:61:9f:12:50:10:fd:dc:ca:c8:f1:c0:e8:9e:
         77:41:7e:41:f2:7e:26:ed:62:ed:ca:bd:5d:1b:4b:b9:91:b6:
         e5:28:14:e8:f7:32:b9:69:c9:b6:13:27:82:11:de:ac:67:49:
         50:fb:41:b9:bf:ad:9c:09:c9:0d:8f:c5:ca:82:59:ff:42:3e:
         b1:11:4c:f2:ba:dd:45:b3:87:98:2c:01:2e:7e:0a:88:28:72:
         0b:ee:e5:90:18:66:ca:00:3f:09:f4:e4:cf:f1:ea:5f:00:98:
         27:8a:fc:4e:ea:01:89:67:54:50:60:a8:74:c2:0d:9c:5c:12:
         e3:db:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:12:52 2024 by rpki-client on console-fra.rpki-client.org