Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File:                     Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier:          p3Hcl2EgU91qgGQ58ltjcMO7erABBzTGyV1e4jHaPe4=
Subject key identifier:   4D:8B:41:C2:07:17:8F:5E:C3:C5:93:6A:6D:C3:F4:0D:38:9F:6E:BA
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer:       /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial:       018F87486CAF7BAD0662C48A78F17027ABC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:21 +0000
Manifest this update:     Fri 17 May 2024 16:00:21 +0000
Manifest next update:     Sat 18 May 2024 16:00:21 +0000
Files and hashes:         1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 3r72GKEa+T4iJCVqRm0LorYwHWqJVOZdgjSl8dx5Q4E=)
                          2: btL_TImCT6OdoZ_AGH-5Hj9XOKs.roa (hash: LsYMN0Agkyut1u7Lj6Twz6ef/06MQHZ2F8KxwB2HOI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:6c:af:7b:ad:06:62:c4:8a:78:f1:70:27:ab:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
        Validity
            Not Before: May 17 16:00:21 2024 GMT
            Not After : May 18 16:00:21 2024 GMT
        Subject: CN=4d8b41c207178f5ec3c5936a6dc3f40d389f6eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:b4:0a:84:60:1b:95:12:7a:0e:28:9c:88:
                    31:8d:14:63:7b:d7:69:96:db:05:35:fa:ef:81:ad:
                    55:aa:2c:4e:b3:2c:ea:18:85:d8:b4:cf:4f:56:50:
                    b6:46:c7:0c:4e:ff:44:56:91:5d:3a:ac:7c:31:00:
                    0d:de:66:26:ee:0e:29:e9:44:c8:e5:50:d1:02:b1:
                    17:de:79:c3:a8:62:4b:84:49:56:d4:8e:a0:06:4a:
                    56:46:0c:2a:ce:8e:87:68:6e:b8:26:96:f5:7c:5e:
                    3f:18:20:91:11:db:6b:9c:4b:33:ba:b5:53:0a:f9:
                    a7:15:e4:e1:d9:5c:ba:a5:7e:46:cb:63:36:0f:aa:
                    e1:55:33:1e:5f:e0:8c:5f:aa:f4:a8:d3:aa:a9:fa:
                    7d:e3:df:ad:e1:10:34:b2:ee:af:9a:7c:54:b4:c9:
                    f5:45:75:9f:1a:f3:c4:37:3c:76:d2:eb:29:2d:d8:
                    5e:98:f5:f7:76:7a:4c:95:c0:d5:02:45:0a:c6:e4:
                    8b:3c:93:f8:b9:cf:da:4e:ec:2a:1e:9b:11:17:32:
                    4a:52:40:5a:07:a0:f1:c7:7e:4d:dc:a0:6c:52:30:
                    d0:31:5c:44:64:eb:61:87:05:9f:9b:93:cf:9e:b9:
                    27:50:a3:83:e6:8d:ff:9d:7d:70:5a:48:5a:c2:2f:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8B:41:C2:07:17:8F:5E:C3:C5:93:6A:6D:C3:F4:0D:38:9F:6E:BA
            X509v3 Authority Key Identifier:
                keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:c4:14:17:f3:bf:f1:df:8c:fe:b0:24:0e:5f:98:b4:44:
         17:32:9b:1e:e1:83:d7:38:5d:cb:69:c0:ff:ce:0e:50:99:07:
         8e:19:62:76:f9:dc:7e:81:63:4c:fe:1a:d8:e9:2d:0a:29:07:
         fd:e3:cb:1f:c4:7a:58:ab:89:8c:25:e5:01:45:6b:16:70:10:
         01:8c:77:11:ba:27:66:d0:e0:4a:0b:67:35:c1:fb:24:78:0a:
         1d:d6:c0:87:ec:1d:28:9c:9f:53:4a:82:f7:cc:16:22:16:96:
         c3:bc:c7:8c:a5:31:19:67:9e:2c:30:50:75:06:df:96:5a:99:
         83:f5:57:2f:57:e3:35:15:58:f0:83:70:56:8b:0e:f5:6e:fb:
         7d:fc:54:3e:78:d7:50:f8:ff:5d:98:82:39:74:85:04:38:3c:
         bc:fd:d1:9b:8b:4d:34:7e:d5:21:9e:f6:51:85:cd:20:b2:de:
         3d:32:f6:2b:73:f8:19:b4:23:f7:b7:3e:b4:57:cb:aa:f6:39:
         b1:27:23:0d:a1:83:84:d9:2a:3a:22:1e:eb:59:e7:63:3c:b9:
         e7:bf:7a:a8:fe:d5:82:2e:64:75:79:55:1f:c4:d7:0d:b8:f2:
         50:09:a6:18:e6:54:0a:6d:b3:ed:5b:ff:83:0a:cb:cb:78:7c:
         b5:d8:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:05 2024 by rpki-client on console-ams.rpki-client.org