Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
File:                     tHaMo_cbExcnlBIa2nizWaNrhVo.mft (raw, json)
Hash identifier:          mK/hGqTQmvf/wPhRuKh3AV3AeMQYqHDva88hUH1z7N8=
Subject key identifier:   A6:8A:9E:1E:27:B4:6F:76:B9:92:14:33:A7:FE:4F:45:CD:2A:9B:19
Authority key identifier: B4:76:8C:A3:F7:1B:13:17:27:94:12:1A:DA:78:B3:59:A3:6B:85:5A
Certificate issuer:       /CN=b4768ca3f71b13172794121ada78b359a36b855a
Certificate serial:       018F8748B16B6E58FC659C8C07AB1DA4A5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
Manifest number:          10D5
Signing time:             Fri 17 May 2024 16:00:39 +0000
Manifest this update:     Fri 17 May 2024 16:00:39 +0000
Manifest next update:     Sat 18 May 2024 16:00:39 +0000
Files and hashes:         1: tHaMo_cbExcnlBIa2nizWaNrhVo.crl (hash: 4mlMJEThBuccXeKUbEc+4bjg4M+olrJmFhOFUeV7Me8=)
                          2: wQzyjAnS4CSbJAzrZzUwXOaG6Lk.roa (hash: /2SQAfHwxixzIJD38ZGTF9bcOvjJhsFk/RP2IpmCvk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:b1:6b:6e:58:fc:65:9c:8c:07:ab:1d:a4:a5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4768ca3f71b13172794121ada78b359a36b855a
        Validity
            Not Before: May 17 16:00:39 2024 GMT
            Not After : May 18 16:00:39 2024 GMT
        Subject: CN=a68a9e1e27b46f76b9921433a7fe4f45cd2a9b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:86:56:5d:39:d1:7b:73:2f:4d:c3:5c:6c:
                    fb:e2:b2:f7:e5:22:7f:fd:14:20:f7:38:22:9d:89:
                    cb:a2:41:ee:4b:7b:5b:3a:8d:43:9c:11:65:93:16:
                    32:a5:c8:27:2d:61:76:cf:d7:ac:0a:56:f8:c7:e8:
                    64:0b:a0:a4:64:a3:66:aa:83:96:14:80:d1:95:92:
                    95:5a:77:b7:c0:e3:60:5c:89:88:c5:a9:b1:94:f6:
                    df:f6:79:77:f3:c2:b8:07:77:bd:a4:b1:f8:06:d4:
                    1a:58:f2:36:8a:ff:39:51:fc:23:5b:bb:f8:ec:91:
                    2d:34:a9:ff:fe:78:ef:2b:66:5d:db:4d:ad:ff:46:
                    f8:48:69:ed:a7:2d:2c:ab:fe:af:a4:d1:1b:b7:66:
                    4c:9a:cb:4b:79:7f:e2:8c:b2:0e:b7:01:52:28:15:
                    30:7b:09:dc:03:22:21:36:56:26:2f:f8:37:54:ec:
                    2a:13:f7:3f:e0:78:91:e0:08:21:ee:4d:89:be:eb:
                    d2:71:d0:60:96:5c:3d:d2:a7:da:1e:ea:56:e2:b2:
                    54:94:29:f0:8f:1c:6f:0a:df:48:db:8c:bc:05:f6:
                    f8:08:20:b3:27:0e:03:1b:f0:53:c4:7c:72:5e:54:
                    a2:d0:4a:4c:12:4a:63:cb:c9:ad:43:d6:92:f8:ff:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8A:9E:1E:27:B4:6F:76:B9:92:14:33:A7:FE:4F:45:CD:2A:9B:19
            X509v3 Authority Key Identifier:
                keyid:B4:76:8C:A3:F7:1B:13:17:27:94:12:1A:DA:78:B3:59:A3:6B:85:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e4:fd:b8:c3:c0:3d:b5:9d:ff:89:bc:4b:7c:b1:0e:c8:5e:
         29:08:32:e0:44:e0:25:98:0c:00:10:03:69:71:1e:0f:d9:34:
         d8:71:94:26:c5:be:4e:40:7a:0e:3b:2a:fd:72:27:f2:05:d2:
         3d:f1:c3:9c:36:db:95:9b:0a:3f:9e:d6:e4:3d:3f:e1:09:7c:
         af:b3:7e:66:68:36:ea:f7:5a:05:22:0a:bc:85:d0:5a:9a:6f:
         8e:12:ed:55:68:4a:33:1d:20:f8:de:70:f2:4e:e2:58:55:cc:
         ad:45:c8:1c:73:1f:0d:89:c7:72:1e:cc:b8:6e:7b:10:ca:31:
         f8:42:78:52:4d:d1:2c:90:2d:4b:06:4a:8d:f4:08:e3:9e:f3:
         20:34:e1:17:e3:86:98:dc:60:dc:4a:4b:94:0b:2f:cf:28:01:
         b5:37:e0:7e:b0:cb:fe:b1:fc:dc:4d:95:6a:e9:91:1b:22:46:
         d4:2f:9c:06:c7:9b:5a:56:4d:6d:d6:22:76:99:6e:5f:80:23:
         a2:18:f0:2e:96:cf:ca:b2:d9:81:df:af:ae:83:d2:31:01:d3:
         4b:85:90:9d:f5:20:f5:94:df:58:3a:57:47:a3:49:87:66:eb:
         26:f3:71:ab:37:e9:a2:28:54:c5:0a:3c:ad:7a:c6:77:ed:86:
         63:60:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:40 2024 by rpki-client on console-ams.rpki-client.org