Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File:                     TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier:          Z/BQ/KPZj2OR/5ll2ptq/clv6adyoxZ19gW43gW9xZI=
Subject key identifier:   3B:97:09:DE:F4:BB:95:B7:65:01:E3:E7:A4:63:60:E6:10:06:00:01
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer:       /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial:       01901D0F06F77F35CB118786883FC90D76A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number:          0425
Signing time:             Sat 15 Jun 2024 18:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:42 +0000
Files and hashes:         1: OJb1pZlJ7AqfhbpMjgdMKlaM4fI.roa (hash: 7aUK8y5bbezD6FY0zfLOweC08kXfcvLBRKi+hbxC/G0=)
                          2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: L6aGKxvsYf4PVbD4vBrMyGsTVoEm0z8Ahr1LyVbSQvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:06:f7:7f:35:cb:11:87:86:88:3f:c9:0d:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
        Validity
            Not Before: Jun 15 18:00:42 2024 GMT
            Not After : Jun 16 18:00:42 2024 GMT
        Subject: CN=3b9709def4bb95b76501e3e7a46360e610060001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:83:5c:85:2c:ea:16:37:8d:bb:a2:1e:24:
                    e8:ef:b1:fc:6d:85:2a:a2:c8:76:bf:32:d5:e9:8f:
                    4d:be:92:c5:0f:3f:2d:00:5a:ba:f9:bc:f2:15:a9:
                    5f:80:4b:46:ad:22:ce:a6:62:af:bb:50:24:78:8f:
                    78:09:33:f4:59:00:12:fd:4d:92:88:7a:7f:59:c3:
                    1e:dd:2b:32:ba:8a:f6:96:30:23:7e:9e:c5:16:0d:
                    24:1c:6c:31:4e:19:9e:e9:d1:b3:0a:6d:d5:c6:f7:
                    76:dd:0b:49:27:16:83:ce:9a:21:9a:f6:9f:4e:2a:
                    4b:69:56:f8:65:eb:43:20:04:2a:18:36:15:2b:83:
                    80:c3:00:7b:16:c2:59:6e:08:82:94:ef:b3:65:d9:
                    21:9f:37:84:32:0a:12:42:70:97:fa:1f:09:3a:21:
                    f2:be:35:8a:89:0c:29:99:7c:00:48:6d:30:58:7e:
                    44:89:61:e7:17:e5:b2:dd:40:0b:ea:b8:ab:44:3a:
                    5b:6b:71:4f:69:9c:be:49:5f:e5:0b:db:04:67:5f:
                    5b:ac:c5:71:8f:1e:9a:c5:7c:5d:11:14:41:60:e9:
                    c0:fb:4e:96:52:47:fd:41:9d:03:13:39:0b:ec:f0:
                    d8:fd:80:6a:10:37:d0:15:2a:4d:8c:e2:be:54:d3:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:97:09:DE:F4:BB:95:B7:65:01:E3:E7:A4:63:60:E6:10:06:00:01
            X509v3 Authority Key Identifier:
                keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ac:df:c8:f3:37:e8:1b:e9:1d:d2:90:96:47:4d:96:f4:fa:
         81:62:d6:7d:3f:00:09:a5:93:33:74:99:eb:4d:d1:2c:8b:5e:
         c4:de:fe:7c:c1:14:36:54:07:23:e4:ff:b8:5f:c4:b2:a9:03:
         b1:b5:c8:c8:7c:3b:d9:18:39:41:e2:e8:d4:d0:99:96:10:75:
         43:d7:89:46:bd:1c:3c:a7:b3:1f:36:13:2e:f2:e2:ce:69:5c:
         ea:38:f4:c3:e8:2c:f0:39:2c:e1:75:32:c6:27:e4:d9:1a:6c:
         1c:d0:4c:aa:de:0c:91:db:9b:c5:ec:45:d9:b4:36:6c:6f:68:
         82:75:37:5e:45:48:12:46:22:a0:aa:c9:23:c3:84:f5:7a:2f:
         99:bc:13:f5:0a:02:54:fe:4b:8c:3b:98:b6:32:e8:03:89:7a:
         2f:dd:4b:af:18:0d:b3:cc:7b:ee:85:3e:bb:cc:01:5a:30:0b:
         48:74:3a:dc:18:ca:47:c9:5f:c2:a9:43:2b:de:80:88:25:87:
         d4:14:34:4a:2d:de:51:fb:15:51:7d:19:56:82:21:c7:34:9b:
         58:f0:b4:5d:5a:7d:df:8a:45:1f:3d:cc:b6:e2:3d:40:0d:70:
         d1:6e:cf:d0:99:1a:01:66:bd:98:98:23:57:49:e5:0e:9f:92:
         a4:37:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:55:40 2024 by rpki-client on console-ams.rpki-client.org