Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File:                     TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier:          KNOtibH3SZ9KIWuivV7r4DgEwU3nrqq5n8drmLrYnRQ=
Subject key identifier:   92:FB:F6:EE:EB:C8:E3:FC:6D:88:43:DD:31:F9:BF:FC:29:FA:FB:DA
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer:       /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial:       01903A3DBCFB707CF4C4B390E20E1D0BA706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number:          11D7
Signing time:             Fri 21 Jun 2024 10:00:42 +0000
Manifest this update:     Fri 21 Jun 2024 10:00:42 +0000
Manifest next update:     Sat 22 Jun 2024 10:00:42 +0000
Files and hashes:         1: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: 0ISsHESAUO8DePkTGBL80VuimWB7QQIJ0P1VOxrOmsI=)
                          2: kbJi1kDtX2FJZDciblJbANLevsI.roa (hash: BqpIwYHCNEZvGsNxWjvYsJd0wSstKF7IKNTgbRyZe2w=)
                          3: rQ_7jjrs8Nx-cpQcBKjn9lwoLbM.roa (hash: 3K0PyOTewchdoIscJoG7H/Yg2Mje4dOyrhQyhxVmh48=)
                          4: xik6KpoZJdqhal-zxXTczkhUcGg.roa (hash: 7rFvZAA0YipF47Ng4kpfiukpxycw1AwAW8S5G18dLPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3d:bc:fb:70:7c:f4:c4:b3:90:e2:0e:1d:0b:a7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
        Validity
            Not Before: Jun 21 10:00:42 2024 GMT
            Not After : Jun 22 10:00:42 2024 GMT
        Subject: CN=92fbf6eeebc8e3fc6d8843dd31f9bffc29fafbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:b5:32:a4:6a:7d:d6:24:11:0d:e6:ee:cf:
                    e2:56:a2:81:04:c0:8c:fa:59:db:8b:da:da:50:74:
                    4b:f5:b4:8a:e9:bb:3c:8e:b0:e1:f1:2d:6a:a7:67:
                    9f:7a:4e:bb:5e:c4:37:6c:44:b4:69:d4:16:d4:a1:
                    a1:f3:aa:1d:ed:b3:8f:d0:21:b4:fe:52:65:1f:f4:
                    b5:87:bf:41:1a:5b:bb:df:2b:d5:e8:7e:ae:87:36:
                    14:ee:09:4c:42:6e:98:f7:46:72:27:0b:21:88:87:
                    ac:f2:c2:4b:bc:fc:3b:88:42:76:35:f6:15:c8:28:
                    6d:c3:fb:d4:8d:6b:17:ff:33:c6:b8:e4:6a:91:19:
                    4a:ef:e4:ca:14:42:99:c8:70:2b:92:8b:54:62:02:
                    d7:55:cf:72:11:41:45:5d:cb:c0:e0:d1:b3:43:34:
                    6c:55:3f:32:09:63:aa:9f:22:57:e8:84:32:70:d4:
                    98:df:09:51:9d:b2:3a:71:97:8e:f7:f7:4f:d5:33:
                    0a:b4:13:ef:11:36:63:fe:86:41:fb:2c:cd:25:3d:
                    d0:c9:74:77:82:92:bb:8b:6c:60:48:9a:9e:d8:8d:
                    14:0d:7d:45:12:61:33:6f:6c:6d:91:8c:f6:8f:82:
                    d1:5b:8f:1f:90:a2:50:b8:c5:79:06:d8:44:82:3f:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:F6:EE:EB:C8:E3:FC:6D:88:43:DD:31:F9:BF:FC:29:FA:FB:DA
            X509v3 Authority Key Identifier:
                keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:28:30:74:12:b8:b9:67:0c:aa:1a:37:d6:4b:8c:e6:5f:a4:
         ed:79:6e:fa:55:b5:37:61:db:1f:34:5d:11:87:d3:f7:d2:39:
         cc:ab:e5:51:53:15:1a:aa:c3:ac:b6:1c:f0:7c:ae:4d:36:21:
         88:ba:0d:57:de:77:a7:f7:7a:48:5e:df:da:2e:f0:57:39:ca:
         ba:ce:65:44:c4:33:5f:1c:66:e6:46:71:aa:87:5b:59:bc:1b:
         05:0e:52:43:1d:b5:2c:ff:59:27:24:de:96:35:60:f5:fd:58:
         1c:dd:d6:b3:eb:0c:a9:77:f2:16:9a:c2:62:5f:21:a8:b0:68:
         4f:cf:4b:c5:28:c2:ac:f5:e3:40:44:d4:6f:35:65:bb:fa:63:
         ee:c3:34:f9:7e:63:1e:9a:f1:14:e1:cc:a1:f1:ae:71:44:1a:
         2c:33:c8:57:f4:a3:3f:1d:65:cf:44:c4:bb:17:55:11:57:64:
         7d:cb:d2:c0:a4:58:4f:0a:5b:29:49:59:4d:2b:e2:5c:92:eb:
         79:e6:7d:ba:e6:a6:2b:db:3f:c1:62:a8:90:ab:99:90:55:4e:
         06:70:bf:5c:82:dd:98:e9:95:bd:6a:4d:4d:da:69:c4:1a:c7:
         c0:1f:a9:f0:d7:0d:71:18:72:17:7b:f9:da:d9:f0:a0:81:3d:
         51:35:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:38:49 2024 by rpki-client on console-fra.rpki-client.org