Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File:                     TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier:          g4s30IYGEC6jtD6IXNf2LbG/KKUqRek8bGSRvABHiWY=
Subject key identifier:   98:36:45:8F:D8:60:90:8F:DE:8D:50:BB:9F:9A:9E:0D:A4:A2:89:9B
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer:       /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial:       018F874A4F3E99D2C21C05F1B658B6AD8F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number:          0B02
Signing time:             Fri 17 May 2024 16:02:25 +0000
Manifest this update:     Fri 17 May 2024 16:02:25 +0000
Manifest next update:     Sat 18 May 2024 16:02:25 +0000
Files and hashes:         1: 3o9rDYIDhymbeM_M5RzTU9xgs6U.roa (hash: THW6+UMkXptXBd6IoF5mKsd8Oz2+bMyxo5IRmhTUv2E=)
                          2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: 9va0i3qQNXDhoWKd+shY4atdEMItZY/L+HGewsiTGPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4f:3e:99:d2:c2:1c:05:f1:b6:58:b6:ad:8f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
        Validity
            Not Before: May 17 16:02:25 2024 GMT
            Not After : May 18 16:02:25 2024 GMT
        Subject: CN=9836458fd860908fde8d50bb9f9a9e0da4a2899b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:74:6b:78:0e:e5:b1:76:1b:45:24:d1:f7:
                    3c:59:3a:2d:cf:42:0f:50:da:db:ed:07:52:c1:4c:
                    de:94:62:1f:0d:96:8a:2c:c1:c8:bd:99:77:d2:9c:
                    c3:42:77:0c:14:aa:56:69:e5:c0:a4:66:1f:06:be:
                    b8:50:97:1e:5c:f8:bf:c1:01:9c:71:fe:38:33:84:
                    e5:b9:69:f4:a5:fa:7f:cf:97:e1:fb:4b:ef:fe:ec:
                    fb:b2:54:32:b1:f4:a6:7f:0e:29:75:1e:2d:f8:2d:
                    1d:39:c5:4c:a2:26:a2:cd:75:99:9d:f3:6a:2a:d2:
                    14:b9:22:ec:95:ba:3c:71:c5:ea:81:5d:d4:46:14:
                    de:42:c9:93:c9:02:99:af:4d:33:09:ea:2c:01:e2:
                    fd:ea:06:6e:d0:c0:ec:67:ea:a7:5d:43:b3:e9:9d:
                    68:5a:d2:b1:16:cd:61:8c:c6:5b:f2:39:0b:56:30:
                    38:68:48:11:90:30:79:43:1c:c5:d9:54:a4:66:06:
                    96:e7:8d:6a:04:3b:ea:95:84:23:a2:75:10:12:a5:
                    aa:f6:77:7e:12:8d:6c:b5:64:1c:3b:c8:c2:2c:64:
                    ea:a4:cf:af:4e:4c:3b:22:95:e7:6d:66:69:e7:8b:
                    f6:92:5c:8f:af:b0:b8:14:80:ad:70:e0:39:51:f7:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:36:45:8F:D8:60:90:8F:DE:8D:50:BB:9F:9A:9E:0D:A4:A2:89:9B
            X509v3 Authority Key Identifier:
                keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:73:77:a2:e5:72:cc:1f:7f:6c:92:12:98:11:92:d3:fb:f5:
         45:7b:10:37:99:d4:cd:fb:64:40:9c:1f:10:f0:94:8a:67:70:
         8f:f5:f3:17:6a:8a:d6:cc:87:5e:44:cf:56:a3:b5:99:8b:79:
         3b:f1:59:76:bb:0b:a1:27:c9:34:ca:ac:02:42:76:6d:a0:fb:
         1b:5f:1d:a6:00:5c:96:44:7c:03:46:16:85:c7:ab:21:7a:85:
         2b:5e:6d:15:13:04:f7:fa:90:9f:a4:9c:44:a2:c8:54:85:cd:
         76:9e:01:8c:57:e6:1a:34:12:dd:ab:8f:fe:db:cf:e9:0e:1d:
         02:b0:a8:bf:f6:a0:ef:6e:a4:73:de:5f:62:7f:01:36:4b:54:
         a4:29:5f:62:d5:7e:38:05:ea:7c:c4:d7:bf:26:a4:4b:59:fc:
         ef:b4:3c:70:f6:7d:19:e3:98:a2:46:05:05:67:83:39:24:c3:
         7c:84:9f:6d:95:b6:2e:6a:f6:70:11:f5:90:a0:24:a5:76:c5:
         f0:08:06:cc:02:37:c4:30:46:3a:c2:61:d9:47:f9:2e:1e:41:
         a7:42:9b:a8:79:f0:45:9a:e5:15:a1:a4:b8:6d:26:a0:b4:86:
         11:4e:ab:75:c3:9d:3f:a8:1a:8a:70:e6:46:b1:25:39:d6:d1:
         1d:b2:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:52 2024 by rpki-client on console-ams.rpki-client.org