Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File:                     tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier:          uS+Tec5s98eTmIzJrVzZbAYX6tL3BBeIaqXsxc/k9/U=
Subject key identifier:   6B:26:66:8D:4B:E2:44:1E:20:BB:90:A1:77:BD:B9:6F:C8:E3:4C:04
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer:       /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial:       018F86A3A5E66D919B12BF5D554A4BE20AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 13:00:22 +0000
Manifest this update:     Fri 17 May 2024 13:00:22 +0000
Manifest next update:     Sat 18 May 2024 13:00:22 +0000
Files and hashes:         1: RWeFxFPV3hM9CwC4oJ8iu7XON40.roa (hash: rS64+IvHs0j4X6wqsMVcOGZ/Dz5xP6Sn32Qc5b8VgvU=)
                          2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: +W6l7wm1M/SsVRJNkH5S1LaLDUHzcyLnEfoTzKUGHHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a5:e6:6d:91:9b:12:bf:5d:55:4a:4b:e2:0a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
        Validity
            Not Before: May 17 13:00:22 2024 GMT
            Not After : May 18 13:00:22 2024 GMT
        Subject: CN=6b26668d4be2441e20bb90a177bdb96fc8e34c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:65:5d:a7:86:c0:b9:d3:90:2e:18:e8:22:
                    fc:05:04:4f:df:8b:da:c3:fe:65:58:be:35:8d:92:
                    b5:ae:28:18:b4:eb:7e:49:18:5e:36:17:bc:77:c9:
                    67:c5:14:42:94:aa:75:33:6f:e0:f8:92:e1:c1:1d:
                    0d:56:ff:a0:3a:d1:5d:6c:31:8a:b8:12:a3:b6:0d:
                    dd:0d:48:c5:30:e5:da:93:2d:5f:ee:f8:70:f7:90:
                    93:b1:cc:77:84:6b:ef:f0:89:cd:9e:bf:87:f9:f8:
                    89:7d:89:96:b6:ad:14:20:8b:9e:2c:f5:e5:5a:9a:
                    11:44:7b:39:e4:56:e6:0b:9f:de:1d:78:d4:13:c6:
                    51:de:7a:91:c2:c1:d5:39:0b:0e:ea:cd:11:38:3f:
                    96:b7:88:8f:05:8f:a4:43:8e:95:e0:f6:30:e1:7a:
                    54:9c:32:a3:cc:72:d8:9e:2d:ea:de:90:4d:0a:9c:
                    64:0f:29:79:d4:f6:2a:4b:99:f0:e6:d4:d5:d0:87:
                    8b:22:dc:31:4e:b0:36:ef:db:17:ee:65:ea:8e:3d:
                    e9:ae:ad:98:0a:1e:de:44:58:18:2c:9a:c8:70:cf:
                    97:e2:5f:36:d7:07:0c:aa:ed:e4:8d:7c:1a:be:d4:
                    ea:59:a1:22:f2:ea:25:12:67:76:1a:a1:b2:5d:64:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:26:66:8D:4B:E2:44:1E:20:BB:90:A1:77:BD:B9:6F:C8:E3:4C:04
            X509v3 Authority Key Identifier:
                keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:69:75:7b:96:29:85:2c:fb:02:6b:bb:de:47:be:7f:43:
         44:fc:dd:ef:d5:38:0a:38:7f:a7:01:6a:28:29:fb:6e:f2:70:
         f3:a1:44:4c:f0:b8:1e:64:2e:a5:12:45:0f:83:27:b3:08:12:
         94:dc:21:cc:7d:1a:16:10:89:83:78:38:48:7c:cf:07:fa:c7:
         c8:b1:40:5f:c8:46:04:74:12:46:c7:f3:a4:32:ef:0c:ab:1a:
         db:8a:cb:86:90:da:1f:5c:04:23:26:6b:9a:cf:67:ac:fa:60:
         00:a5:bd:fc:75:63:1d:f3:89:c5:ce:b6:32:94:6e:9b:f6:af:
         f9:c7:99:dd:ac:9a:5d:c7:eb:ac:45:5e:35:b6:79:01:bd:bd:
         11:4b:a7:d7:fd:99:c3:79:00:1a:b4:dd:21:42:71:9c:d8:7e:
         9a:8e:77:8e:1f:56:06:d4:db:e1:01:cf:bf:07:3d:fe:89:a1:
         da:1e:f9:c4:d7:ea:13:33:ba:06:fb:92:1a:8a:44:59:1d:02:
         21:da:db:27:e6:9b:b4:a4:d3:15:d2:ec:4f:46:14:dc:e9:12:
         62:7b:da:43:5a:de:8f:92:c5:f0:b8:dd:7e:cc:81:83:2b:b4:
         20:ca:92:c2:30:02:e3:85:42:e9:7c:84:84:66:0f:ee:1f:97:
         ae:74:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:18 2024 by rpki-client on console-fra.rpki-client.org