Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
File:                     TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft (raw, json)
Hash identifier:          3h6J0oXZLT/I+/v1xHvZC/bsIH+667Ggvg3CPy3qkK8=
Subject key identifier:   F0:28:0C:4D:EA:3F:2E:D3:E9:99:23:BB:EB:6F:C0:F3:35:62:93:16
Authority key identifier: 4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
Certificate issuer:       /CN=4cd25482a7d739913551e1de151bfecc417f8770
Certificate serial:       018F174890151574D29A7FEFF2CDFB8EBE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
Manifest number:          113E
Signing time:             Thu 25 Apr 2024 22:03:02 +0000
Manifest this update:     Thu 25 Apr 2024 22:03:02 +0000
Manifest next update:     Fri 26 Apr 2024 22:03:02 +0000
Files and hashes:         1: TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl (hash: UlUrFjMoMfUErq4LszA21JlbyDAYjjO6fjuLDGzPQiA=)
                          2: VkvuQxfIwOzRVHNwW8MuMnEJnDQ.roa (hash: qNNQV+RhDxSjiQhQ7fOR00GejNNTcS7rifBHa2Gu/8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:48:90:15:15:74:d2:9a:7f:ef:f2:cd:fb:8e:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd25482a7d739913551e1de151bfecc417f8770
        Validity
            Not Before: Apr 25 22:03:02 2024 GMT
            Not After : Apr 26 22:03:02 2024 GMT
        Subject: CN=f0280c4dea3f2ed3e99923bbeb6fc0f335629316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:39:1d:a2:6c:f9:2f:e4:77:76:4c:c5:ae:
                    97:59:44:72:20:f6:82:30:13:ee:34:fa:05:b6:14:
                    23:18:30:41:bb:cc:91:c8:87:0b:dc:78:5f:cb:e4:
                    69:4c:2f:b1:6c:8a:31:1e:52:d0:47:67:aa:4d:ca:
                    9a:b2:1c:d3:b6:67:5d:ab:9b:94:33:52:16:91:ba:
                    24:63:d6:59:8c:c7:39:ea:41:34:f2:44:06:67:2f:
                    c2:cf:ed:d8:37:a9:64:db:a2:fe:71:41:d0:2f:32:
                    d5:16:7c:5a:51:ff:d2:c1:bd:a3:79:9e:06:37:8c:
                    d9:d7:bd:51:bc:be:b5:2b:5c:fd:21:9f:b9:32:6d:
                    11:76:41:65:e5:ff:83:5d:cd:07:bd:70:5f:8f:8c:
                    c8:57:26:e2:ad:52:a7:fc:ff:6b:f7:35:e8:4e:05:
                    d3:cb:d2:1e:4c:6f:1c:63:35:b2:c6:7a:0e:50:05:
                    e5:44:e0:a8:72:c5:bc:cf:f6:a2:64:aa:96:2a:d6:
                    52:b1:02:68:a8:a9:b8:e1:96:d5:79:f1:65:46:aa:
                    11:1f:c2:17:c6:9c:87:e8:d8:da:b9:b3:50:8e:6e:
                    6c:d8:9d:bd:23:23:ae:69:dd:96:82:b0:e4:90:9b:
                    8d:32:84:bb:e9:73:74:ad:4d:f3:b9:c4:ac:9f:ce:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:0C:4D:EA:3F:2E:D3:E9:99:23:BB:EB:6F:C0:F3:35:62:93:16
            X509v3 Authority Key Identifier:
                keyid:4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:eb:a9:a3:3f:48:ad:64:ed:39:f3:65:76:d1:d5:25:cc:
         80:85:e9:65:0a:0a:e1:a2:c7:5a:3d:86:00:4b:19:6c:2e:07:
         94:d5:fb:df:12:92:e8:0c:99:23:9c:2c:f2:a3:6b:dd:a2:ca:
         78:dc:e0:e2:8d:65:68:6e:b8:d9:6a:0c:8b:f1:a6:af:d3:d3:
         4e:af:36:4a:da:42:2f:24:fb:73:5d:fe:f3:d5:48:69:de:a0:
         97:97:83:b8:4a:88:8f:71:6c:85:b7:01:a5:28:72:62:b2:da:
         5b:ab:9e:76:eb:13:c3:75:e9:e5:5d:20:27:95:84:72:78:5b:
         29:24:32:8f:9a:d8:9d:5f:22:f0:80:54:65:22:b1:b2:78:a9:
         59:62:e0:60:e7:c2:fe:55:c8:5c:4d:a8:32:cf:c9:fb:e0:43:
         57:54:63:15:e6:8a:ab:1d:8a:19:80:a0:9a:55:18:e7:77:3e:
         af:cf:2c:63:f0:df:87:42:12:98:ed:17:46:3b:4c:09:cd:7e:
         d2:76:74:a0:b3:22:bc:6f:2c:b4:67:12:c0:95:2e:7e:f7:be:
         f9:a6:d9:6e:3d:4f:80:9e:62:1f:f0:f0:7b:7e:2d:f4:83:a0:
         b2:4e:3b:fa:d8:ad:dc:1b:58:ff:8c:02:90:a4:d5:78:c3:67:
         e9:8c:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 07:20:37 2024 by rpki-client on console-ams.rpki-client.org