Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File:                     tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier:          AGyuFvYbbKdFfmstQIXe/9VvwYrI63MLrIfcqkYOuhs=
Subject key identifier:   67:3D:6C:B1:88:E5:2E:EE:48:F6:96:4B:9E:5E:58:79:08:0E:DB:76
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer:       /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial:       018F866CB1ABCD99B68EADF28C6E01A492CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number:          0D0B
Signing time:             Fri 17 May 2024 12:00:21 +0000
Manifest this update:     Fri 17 May 2024 12:00:21 +0000
Manifest next update:     Sat 18 May 2024 12:00:21 +0000
Files and hashes:         1: B1t0cf6jKVPfi9F4ZvS2asdaWKg.roa (hash: 6tAbuyHG30JV7evUDcp/1DNqGl1tO0RQx4DKZ/6zjuA=)
                          2: GwGyiWi1lJtGUOMwLS1LhYnGjds.roa (hash: PO1ZB8DGEc/8PvDomdUaHeQnJxhE2WK1GZQI2WZvJS8=)
                          3: TJpRf4VjTvVZ97ojGmOnP-N2u1I.roa (hash: bkTi+K7rMkPuqNp2adpGE0kXjDOSnzMkyYoFck08jBI=)
                          4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: njQcl2/SE8dE8oJ9jC7cpR/B4VDR8gt3dMSiYszBTvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:b1:ab:cd:99:b6:8e:ad:f2:8c:6e:01:a4:92:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
        Validity
            Not Before: May 17 12:00:21 2024 GMT
            Not After : May 18 12:00:21 2024 GMT
        Subject: CN=673d6cb188e52eee48f6964b9e5e5879080edb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:a5:7d:ad:9e:c1:f8:54:8a:11:cd:09:13:
                    8a:3a:59:24:40:e0:ab:d8:4a:f4:3b:63:3f:5c:4a:
                    70:ce:9b:43:99:f7:fb:61:0f:1b:8b:67:cf:f2:97:
                    1b:2a:01:b9:2c:a8:1f:01:c3:d9:ea:46:f7:2c:e3:
                    69:24:2e:62:b6:e8:89:5f:4e:a4:bd:38:b8:24:f3:
                    f8:50:9a:c4:65:0e:a6:77:c1:29:5a:da:fb:d5:7e:
                    75:5f:60:5f:5f:ae:82:de:03:b0:1f:34:0d:45:06:
                    f2:71:c5:67:99:ee:b2:89:a1:72:7c:d8:5d:68:d9:
                    f5:24:ae:e6:a3:d9:b3:29:09:c2:f2:98:87:56:11:
                    13:03:39:c0:d0:31:b0:a9:73:2b:5a:1a:5e:93:59:
                    cf:e8:c9:75:eb:e9:6f:22:9b:0b:19:6e:c5:dd:99:
                    89:f3:7d:4d:63:a7:c3:63:b3:60:13:9e:d8:8b:e9:
                    4d:a1:92:ed:37:8f:86:9a:7c:b5:67:43:2f:ea:cb:
                    01:dc:da:64:fe:b3:34:40:a2:7b:d3:22:6d:77:28:
                    77:39:79:d3:3a:98:37:52:37:ac:27:96:d4:b9:03:
                    69:b9:45:b3:80:ca:08:3c:27:f1:9a:8a:be:f5:94:
                    e7:06:ba:8e:6d:50:b0:13:f0:12:fd:2c:9e:a4:76:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3D:6C:B1:88:E5:2E:EE:48:F6:96:4B:9E:5E:58:79:08:0E:DB:76
            X509v3 Authority Key Identifier:
                keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:89:b9:51:e2:5b:32:89:1f:fa:12:e8:13:1d:e0:28:18:ef:
         36:57:57:7d:7f:a9:32:4f:1b:92:4d:89:07:83:45:c9:b3:a9:
         be:70:c6:92:7b:09:02:ea:61:06:ad:f6:a3:cc:28:51:a1:e6:
         dc:25:33:62:5f:27:d1:39:a9:6a:dc:19:25:9c:50:ee:17:8b:
         08:ca:0e:a2:aa:2b:73:1d:c9:39:68:0d:eb:20:ea:23:22:ca:
         42:08:96:aa:26:92:6f:dc:3b:33:10:45:58:68:c3:2f:ec:c4:
         cf:71:ae:2a:cc:17:86:87:e5:00:2e:6e:e2:b2:a0:b8:bb:f3:
         f0:87:e1:95:45:81:e3:a3:85:eb:ad:6e:55:ac:2f:ce:c9:58:
         f4:96:f0:85:f6:d2:af:6d:64:88:e5:ef:c5:6e:af:9c:c1:7b:
         b1:47:23:7e:76:0d:ec:27:a8:53:01:d5:3f:72:39:f5:aa:18:
         48:93:55:7b:43:0b:fa:47:1c:f5:c2:fb:98:d5:ac:66:87:b5:
         12:2b:32:f2:fa:ab:f7:f7:40:0d:a2:bd:6c:10:f5:ba:fa:5c:
         96:12:af:12:e6:64:94:f6:59:55:fb:3d:31:68:65:81:bf:2a:
         f2:03:59:0c:0f:87:02:54:fe:e9:e8:fc:40:32:ce:a9:57:0c:
         ed:31:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:32 2024 by rpki-client on console-ams.rpki-client.org