Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          EM67yv71cIbZGM7zcpiDBK/Aw7u2oc1Dd7dBun9WD4Y=
Subject key identifier:   D2:83:11:24:A2:4A:A9:88:8D:9D:42:76:54:3A:77:58:D7:C8:53:85
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       018F98AA6B57B8DBC5A90EF37903AD831B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          1181
Signing time:             Tue 21 May 2024 01:00:56 +0000
Manifest this update:     Tue 21 May 2024 01:00:56 +0000
Manifest next update:     Wed 22 May 2024 01:00:56 +0000
Files and hashes:         1: FqHVmkJz2LeePqI9esBKzqII4S0.roa (hash: C7YaYNuyaxr7GXeZUaDERL3zxQ53iEs2uwQHirGLWzo=)
                          2: OlsJTeabmAGdHkgiStDl2J3Yia8.roa (hash: 3LB59E2zGfoZNdBhX0Upke/031gDOY/8Kr/gYOwgZuI=)
                          3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: xplj2xxWXrDFg2C6rLhfNpgRdmcwALliQviBsB/t2y4=)
                          4: XAy_ofcAvnQkaEcULMh_zhoUVCg.roa (hash: LjZl2Qe5BQnsWFUVqq7DKQUnCgrFNrfO4KH7NwP0nV8=)
                          5: foLOcYg-7LcPiDsn8-AZ7Azgn2I.roa (hash: rsStUQnqgnUH/Bh9XKegu1/sfdllrflKVFiM18NkVK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:6b:57:b8:db:c5:a9:0e:f3:79:03:ad:83:1b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: May 21 01:00:56 2024 GMT
            Not After : May 22 01:00:56 2024 GMT
        Subject: CN=d2831124a24aa9888d9d4276543a7758d7c85385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:ca:68:76:c4:83:81:96:01:2a:b2:d5:ae:
                    67:8b:9d:2f:4f:c4:e6:1e:69:9b:0f:a6:be:f9:cf:
                    f7:b2:7b:73:37:bd:02:cb:67:55:e2:7f:43:42:45:
                    91:0d:91:7d:cc:27:e4:c0:25:60:d2:27:6f:17:8e:
                    81:5a:51:b9:42:ef:5e:c4:46:0a:64:96:ac:a3:13:
                    99:fb:d9:a0:7b:fb:a1:1f:a6:23:e3:d4:2d:39:3b:
                    8b:1e:df:12:5c:1d:fd:0d:98:a2:44:dd:b6:32:16:
                    d6:94:3a:81:ed:c2:d8:57:45:5e:24:25:54:3e:19:
                    de:d3:85:e1:49:5a:a8:49:d4:67:25:ba:4f:d3:71:
                    35:5d:04:14:3b:d5:a7:ea:a9:f7:42:b4:43:8e:e2:
                    b1:02:2b:67:71:b3:28:d3:ae:f8:50:83:a1:fc:dc:
                    68:11:13:b2:30:df:11:36:82:4e:2d:77:b3:56:ed:
                    67:62:69:40:c8:da:79:68:e4:03:a9:e0:2d:e7:f7:
                    63:ae:86:44:57:c5:2f:f1:f2:b7:60:0c:68:a1:b2:
                    3d:6d:c4:ad:15:0e:bf:61:22:4f:c5:0e:da:f8:4e:
                    0c:47:a4:a0:cf:ee:17:c8:62:1b:d7:95:52:03:2d:
                    0c:62:14:a9:ef:7f:9e:76:e7:90:8c:02:27:a4:97:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:83:11:24:A2:4A:A9:88:8D:9D:42:76:54:3A:77:58:D7:C8:53:85
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:92:43:19:13:07:d4:9c:72:74:ed:25:e0:18:a0:8f:fb:
         d1:7d:d3:98:e5:cf:8e:e9:ec:e6:01:83:61:70:62:11:b1:a8:
         60:8c:45:3f:b2:51:79:27:f1:e0:5b:10:55:de:d0:55:6e:8f:
         2a:fb:d3:ce:1d:98:56:34:93:dc:fe:ce:63:64:dc:f0:32:46:
         c5:23:d7:df:71:a8:83:22:e7:fd:1b:72:af:c2:e3:84:90:d1:
         66:52:fa:e2:24:98:44:eb:16:84:bc:7d:e8:dd:aa:2b:dc:50:
         94:47:b8:d2:be:83:5b:d3:e7:58:bc:60:c2:1d:41:5b:59:64:
         b4:83:e3:15:c6:a8:57:9e:0b:b9:fa:61:b0:60:44:ea:46:e2:
         82:b0:fc:ba:7e:be:4e:10:c8:40:7a:2c:0b:15:35:00:3d:dd:
         6f:13:00:d5:58:b1:45:42:e7:8d:05:30:b5:0b:ab:fd:2a:30:
         b4:23:7c:af:43:b1:e7:d1:3d:2a:1d:69:59:b4:6c:30:c1:9a:
         13:8b:f9:af:30:16:51:15:c0:3a:85:92:f9:22:57:4d:78:27:
         4b:5b:6a:dd:64:fd:4d:a3:92:39:00:5d:a3:d4:40:5d:01:e1:
         1f:3c:65:62:86:e2:f1:fe:87:6b:31:99:ee:1e:b4:b4:92:c4:
         64:8e:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:16:31 2024 by rpki-client on console-fra.rpki-client.org