Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File:                     TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier:          Cev4xa0/i94+3B770gJZetKtoYktiH13PIugV/7Dubg=
Subject key identifier:   6C:7F:5A:07:5C:22:49:6E:06:70:E0:88:DC:06:4B:C8:09:96:CD:97
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer:       /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial:       018F8748A72C5CE9D9B87B23F39E1434ED45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: 1sz7PGY8zY0JbRGXSd2rleyTANM.roa (hash: kMItTuZuWYX3G9TI6akhYrTJaSksgCYU3Hrsae6Dn08=)
                          2: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: EQO/3LIqP6KcN7jFn6pXGi0uWWGwqN22hw9CFr07qes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a7:2c:5c:e9:d9:b8:7b:23:f3:9e:14:34:ed:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=6c7f5a075c22496e0670e088dc064bc80996cd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:07:50:4c:85:15:b9:e2:01:c6:06:c9:7a:
                    95:f5:2d:9b:b0:ce:4e:f2:80:bc:82:5f:5f:55:3d:
                    c4:b6:83:1f:e5:64:de:11:b6:b9:ed:95:1d:c5:70:
                    9f:86:af:48:c8:9e:50:b1:7d:42:25:9b:5d:c9:13:
                    92:c7:92:a8:54:fc:ff:e2:47:56:cd:b9:56:62:d8:
                    f1:1b:d3:6a:7e:43:e0:89:c5:9c:75:b2:5b:d4:bf:
                    b6:ff:a5:d7:f5:04:e8:da:6f:50:4e:f5:fb:c1:c7:
                    4a:59:5b:d6:2c:0d:48:4d:6b:6b:6e:74:8f:59:e1:
                    2b:b6:ed:be:db:af:c5:4a:09:31:b7:ca:93:79:20:
                    63:8f:3f:99:43:fa:53:61:9c:c3:c0:7e:c9:19:75:
                    bd:e0:a7:f0:4f:8e:fd:ef:27:5d:22:c2:e2:9b:ac:
                    a4:82:1e:5e:2a:62:50:1d:69:67:aa:6a:19:71:06:
                    8d:92:8c:04:d4:f2:a5:3f:bb:a0:58:3d:b9:b6:9c:
                    e3:49:a8:1c:bc:fe:fd:60:96:d6:4d:f4:46:4b:d4:
                    3f:da:72:49:f2:07:bd:bc:bf:b7:fe:da:43:8d:5e:
                    68:2c:9b:27:bb:1c:63:a9:bf:05:e5:00:41:59:74:
                    87:1a:66:c9:c4:a5:dd:b8:81:5b:cc:76:bb:ef:ee:
                    64:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7F:5A:07:5C:22:49:6E:06:70:E0:88:DC:06:4B:C8:09:96:CD:97
            X509v3 Authority Key Identifier:
                keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:bc:c7:e0:34:26:9b:74:d1:f8:35:07:cb:8f:89:d1:57:
         16:18:3e:54:b4:08:d8:75:41:58:a2:6a:74:2c:79:28:06:27:
         5f:ff:ec:36:9e:fb:2e:b7:c2:88:f9:99:a2:fe:d0:fe:b1:c2:
         c4:b9:82:7f:65:e8:b0:98:53:75:63:36:ff:82:ca:80:2a:ce:
         f1:5e:9c:61:9f:e5:40:73:0d:09:8d:39:c9:98:e2:13:ba:9e:
         a4:2c:93:3e:53:e9:91:fe:10:28:e1:12:06:60:8b:11:1c:c9:
         33:e8:a3:44:4b:41:95:64:25:9c:d4:9a:ea:62:03:95:00:1a:
         81:45:35:32:c6:86:26:7c:2b:c6:79:4b:7b:f9:ea:cc:16:2b:
         8d:30:f1:2e:74:fe:9d:41:e2:18:e0:cd:9c:90:dd:84:91:c5:
         1c:d6:ff:62:fc:7c:ff:8b:0e:85:5c:e4:4a:bb:63:ca:89:8e:
         75:82:66:ba:b4:32:1f:94:d6:88:9f:b4:47:4c:f8:2a:29:39:
         b4:0b:7e:0d:41:0c:7e:70:81:55:3a:a5:82:e2:d7:25:53:13:
         87:a2:2c:24:81:ee:b6:f2:a0:8a:a8:05:ab:46:6c:d1:94:8f:
         c0:7e:f2:88:71:12:f3:90:fc:39:fb:99:d4:b2:c9:21:27:71:
         0c:fd:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:25 2024 by rpki-client on console-fra.rpki-client.org