Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          t6dz2G+7ZZWLxIQr7iuFv3f4k7PA7WjJvDZkQDLm3/g=
Subject key identifier:   08:B8:28:6E:6C:CD:DA:35:EA:82:28:5D:EC:03:2D:68:B6:F5:87:A9
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       0190411C1F37215BB9BD44A67482ADD0511C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          1160
Signing time:             Sat 22 Jun 2024 18:01:20 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:20 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:20 +0000
Files and hashes:         1: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: iCP296RqAV/2o4ruQmcN+M5XNzuJHzHu4x0Hwe0fL8k=)
                          2: UtcepnppnEU4iJJ9kYdtlXHCwFc.roa (hash: ek4gd1O5n5w83sQbvTZQxYskTql0OXAUZM+2c245O+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1c:1f:37:21:5b:b9:bd:44:a6:74:82:ad:d0:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Jun 22 18:01:20 2024 GMT
            Not After : Jun 23 18:01:20 2024 GMT
        Subject: CN=08b8286e6ccdda35ea82285dec032d68b6f587a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:44:2f:2c:37:af:76:ec:a8:dd:a7:97:ce:
                    31:06:64:88:8a:f6:6e:86:f2:d2:8a:90:0f:a7:65:
                    f7:ef:b8:cf:7d:ed:5a:14:46:fc:1d:a7:ea:d8:d5:
                    f3:1e:b7:1d:d6:1d:40:0c:02:f2:f3:b6:a7:74:8b:
                    b6:cc:f7:44:2c:e2:85:dd:20:be:57:c8:64:29:d1:
                    6e:41:5e:22:4d:73:00:82:80:f6:f7:02:df:51:ab:
                    13:a7:2f:55:c5:e9:c8:11:22:bb:cc:11:a2:d2:ff:
                    36:0e:58:1f:d1:2b:a2:86:4b:a7:da:b0:a4:b2:7d:
                    dc:5f:a5:97:6d:a7:43:b5:21:eb:46:9c:ac:97:0d:
                    0a:ca:ff:43:a4:2f:d4:07:51:eb:89:40:53:b6:3b:
                    19:a1:6e:74:4c:e6:30:7a:76:55:bd:b7:3a:f3:21:
                    aa:b6:87:b4:d0:17:8c:a9:de:17:f6:bc:24:a0:7e:
                    6c:34:a6:37:76:85:01:c7:22:7b:ab:96:b3:96:68:
                    9a:33:49:76:c6:b4:ce:90:e0:5b:b7:8c:16:5e:39:
                    8b:23:75:e8:91:49:35:2e:3e:1d:ac:55:54:c4:e8:
                    db:19:e3:19:44:2f:85:c6:9b:cd:f6:3c:fd:72:78:
                    4b:46:e5:b3:21:93:b4:35:11:be:d4:3b:d0:62:36:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B8:28:6E:6C:CD:DA:35:EA:82:28:5D:EC:03:2D:68:B6:F5:87:A9
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:46:a1:96:4c:3a:dc:ee:6c:d3:01:83:c6:e4:06:21:c3:
         f9:a2:fb:da:06:9e:d0:c3:e3:3b:67:24:25:5f:cf:e3:01:9f:
         6e:64:d5:af:f7:f0:6e:59:9c:f4:cc:4b:c8:b3:37:61:11:78:
         23:92:f7:fd:20:e5:cb:c3:9b:86:6f:81:5b:70:42:14:25:9f:
         cd:87:1b:2e:0f:10:bb:28:74:c9:80:d1:41:42:e5:f7:d1:e1:
         8a:ff:ee:ee:dd:41:28:0b:5a:6c:3a:d1:cc:7b:86:44:a4:28:
         30:95:a8:64:e0:a2:85:0a:f1:32:44:48:c3:7b:25:9b:b6:c8:
         ca:40:03:e5:df:93:45:14:97:e7:1f:a9:66:65:5c:e2:45:cb:
         46:6f:b6:a1:32:64:84:15:84:c4:7a:64:71:dc:cf:5b:1a:e2:
         6d:4f:3d:e9:82:93:f7:1c:94:83:dd:05:88:17:1e:63:b0:e6:
         8e:e5:4d:d7:b7:e2:de:3a:fc:7b:ab:d6:66:61:86:12:a3:b6:
         9b:e1:e2:b5:bd:97:3d:6f:bd:3b:30:70:16:b1:fa:ea:c6:92:
         c5:07:c8:b8:9e:0c:58:84:2d:12:8d:41:0c:a9:1c:7a:db:a1:
         9e:17:72:90:f4:79:16:e4:d0:01:60:cf:10:17:31:0e:79:65:
         65:f0:39:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 20:58:17 2024 by rpki-client on console-ams.rpki-client.org