Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File:                     TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier:          3+MWNWrMHx2ALXlnYvWMQamzsdbkOI/jTjICHxsftas=
Subject key identifier:   93:44:6E:60:BC:A4:EB:A9:85:0F:B2:1C:D5:88:3A:20:90:75:2C:5F
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer:       /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial:       018F874970FB8D76764EB4D7A1E8D21903AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:28 +0000
Manifest this update:     Fri 17 May 2024 16:01:28 +0000
Manifest next update:     Sat 18 May 2024 16:01:28 +0000
Files and hashes:         1: DN1_t4c3BdVmEXGgJQlqiXDr2LM.roa (hash: wuGX5ImnGaWeFrc0sj5M3Xpks0bo3kRV8GbIWmZEgWw=)
                          2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: Sgk571dGM5W1jDE1DnjKzI1Way4TT8JNoaIcVFs+Rgw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:70:fb:8d:76:76:4e:b4:d7:a1:e8:d2:19:03:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
        Validity
            Not Before: May 17 16:01:28 2024 GMT
            Not After : May 18 16:01:28 2024 GMT
        Subject: CN=93446e60bca4eba9850fb21cd5883a2090752c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:9b:f6:c3:44:fd:5d:4b:51:1d:9a:38:de:
                    fc:8a:d8:a1:9a:e0:a6:29:3a:0f:7a:88:d7:60:fd:
                    a1:c3:ff:e5:22:1a:37:da:67:0b:42:ca:f5:3e:52:
                    91:43:50:b5:b6:88:03:27:95:04:4d:77:fd:df:d8:
                    6d:58:a3:3b:79:08:17:d8:a2:48:0e:af:f3:bc:44:
                    fb:a0:0d:68:fe:4e:80:c2:c1:8f:3c:8d:fb:43:63:
                    8f:7c:0e:77:be:24:10:bc:22:7c:b9:46:e3:35:22:
                    3c:6f:42:a4:56:43:48:3d:d6:bb:95:1b:78:26:48:
                    6e:dd:d4:f7:80:57:a7:f2:8e:7e:15:2c:d1:5d:f4:
                    a2:c2:50:ca:14:b1:ea:cb:ed:e1:06:62:a7:57:28:
                    a5:75:1f:91:11:6e:3b:98:6a:16:0b:4f:76:ff:ba:
                    2b:4e:01:4b:85:56:f3:21:82:5b:9b:fd:4c:e8:6d:
                    30:41:b1:86:90:85:7d:99:a8:40:45:66:06:f0:70:
                    71:98:0d:d0:db:bf:43:f9:10:41:57:9e:ea:8f:42:
                    e4:19:c8:c5:23:63:ed:58:73:0a:9c:cf:3a:fd:b0:
                    82:7a:41:28:25:6f:93:7e:d7:ee:b5:a4:85:a1:4e:
                    90:0b:28:4d:a7:03:87:15:45:71:64:1b:ce:92:fc:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:44:6E:60:BC:A4:EB:A9:85:0F:B2:1C:D5:88:3A:20:90:75:2C:5F
            X509v3 Authority Key Identifier:
                keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:97:3c:20:a3:a8:25:f3:f2:cb:f2:53:80:2b:2c:a2:b6:75:
         e4:fd:5d:7c:e3:71:32:53:df:19:e3:a3:f5:8a:bf:0e:ea:f3:
         46:46:cc:9c:d5:6f:87:c1:fc:35:13:fb:73:8d:71:08:62:fe:
         03:05:dc:43:6d:08:fd:00:e8:5d:e9:8e:ea:09:6b:43:a4:f2:
         da:2a:8a:f0:97:48:ee:c4:56:5a:0f:27:68:1c:4e:73:8b:a6:
         bc:ee:1f:5b:ae:c4:0c:5a:c6:57:bf:4d:8a:2c:14:f6:20:13:
         79:26:7a:64:f7:a1:b4:fb:59:35:d8:72:fd:43:b7:32:e9:3d:
         11:54:17:f0:3b:17:f3:3d:60:e3:25:90:94:b6:43:de:dd:1e:
         2e:31:72:e7:71:0e:d4:e8:eb:1e:ff:e9:55:bc:da:26:20:24:
         ef:9e:5e:1c:01:d5:35:aa:8b:21:c4:d9:f5:06:ed:3a:dc:61:
         68:d0:cc:51:44:07:32:37:4f:91:30:cd:13:01:74:6c:c5:d4:
         eb:2f:16:ab:01:6b:e8:fb:94:db:6e:d5:23:27:db:7e:db:19:
         18:44:13:ad:bc:60:2b:eb:2e:fa:12:93:a9:7c:39:e2:5f:90:
         ca:77:6b:50:02:25:b7:ac:cd:2e:c9:e5:6d:8a:2d:33:9e:bb:
         44:5c:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:00 2024 by rpki-client on console-fra.rpki-client.org