Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File:                     ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier:          3thf3PWsUZvkR4ApwD1Vfj8FthmPYWYTdoK23ZwJ6BY=
Subject key identifier:   BE:70:6E:B1:A3:B0:17:FA:70:AC:C5:AD:85:DA:F8:16:1B:0A:21:D3
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer:       /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial:       01901FD9601F436276D825D35374425AE16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number:          0F31
Signing time:             Sun 16 Jun 2024 07:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 07:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 07:00:57 +0000
Files and hashes:         1: sh1E3u5BM4u8n30xzwi4QY_-p1U.roa (hash: tkYvU3kd1n+LpE3Aa9fyGn5A5SQ6aBEWiC/F7MZyeMo=)
                          2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: n6tEx/wEkqStwZXrJkIM9ZVSRHHoW+24bAaTg+qiX7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:60:1f:43:62:76:d8:25:d3:53:74:42:5a:e1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
        Validity
            Not Before: Jun 16 07:00:57 2024 GMT
            Not After : Jun 17 07:00:57 2024 GMT
        Subject: CN=be706eb1a3b017fa70acc5ad85daf8161b0a21d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:ec:37:62:5c:72:f8:78:37:93:9e:4e:7d:
                    99:31:a1:86:e5:4e:9f:82:4e:c9:9b:dc:57:ac:12:
                    4c:a8:34:c4:83:f1:3f:5b:28:02:bd:e6:01:c1:34:
                    7d:19:9a:50:1f:73:74:0c:19:24:d3:36:a9:5b:70:
                    ae:53:12:df:8f:9e:9e:32:f5:9b:84:48:2b:b7:82:
                    d5:21:6e:38:4e:a8:4c:f6:a4:34:3a:48:58:34:06:
                    89:85:91:82:6d:db:db:6a:fd:7e:c5:fe:2b:1d:df:
                    36:53:bf:0d:dd:6e:91:7e:23:da:b1:93:46:5d:35:
                    3d:0a:3e:66:9e:83:7f:fb:94:40:86:f8:f0:0b:c5:
                    c3:2a:6a:1f:10:ba:af:94:02:ee:ea:4f:4e:1f:fc:
                    23:87:69:bc:d5:f0:60:25:69:b4:05:98:4c:a8:22:
                    74:5e:b1:1d:03:74:eb:4a:56:bc:13:5d:d4:7c:df:
                    ed:db:b4:ff:16:e8:c4:a5:d5:78:8b:53:89:c4:ab:
                    d6:a0:49:f9:98:fd:bd:b0:ca:da:74:03:ee:9e:c5:
                    bc:72:e9:a8:d4:1c:5a:bf:05:77:48:90:7b:d5:10:
                    11:66:af:24:74:04:45:93:70:85:4b:2e:b9:85:9e:
                    f6:2e:34:8b:fb:73:78:9d:31:3e:15:d6:43:ff:d7:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:6E:B1:A3:B0:17:FA:70:AC:C5:AD:85:DA:F8:16:1B:0A:21:D3
            X509v3 Authority Key Identifier:
                keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:57:27:9d:9a:5a:bc:5e:69:26:77:9b:07:d1:4a:bc:0d:7e:
         5e:65:6e:fc:98:07:16:82:6e:74:62:a6:30:ba:db:39:98:f4:
         18:07:8f:41:f5:75:91:c8:45:4a:4f:4f:53:96:7b:70:b7:60:
         06:91:48:e2:42:bf:9c:4f:e5:e9:af:eb:2e:ae:27:85:24:75:
         89:8d:6e:d0:fd:2d:56:1c:98:00:86:b3:6e:05:9c:74:55:b8:
         4a:7d:96:8b:c9:3a:c4:fb:71:25:eb:43:a1:be:ef:76:a2:bd:
         b1:86:fd:9e:3d:af:31:14:87:9b:0e:23:1c:68:73:d2:90:5d:
         82:3f:71:11:12:55:c3:d4:1c:3b:26:5b:6e:9e:72:98:ef:a2:
         25:de:a6:6a:01:7a:37:f3:6e:c6:df:a6:98:af:43:ad:a4:a1:
         b0:98:52:f8:02:1e:a2:a2:07:54:cd:13:28:03:d8:4d:69:f9:
         e7:0b:df:47:48:a5:16:d3:d5:19:9a:e1:74:2c:18:75:17:5d:
         f2:96:d2:f5:d9:fc:19:83:11:c2:6f:72:b9:24:19:d7:32:84:
         42:e0:a9:bb:8d:f4:ff:f8:16:fe:d7:c6:c9:7e:80:10:c5:bd:
         53:1a:d6:23:12:17:6d:20:dc:68:3d:7c:63:f5:4b:92:2c:39:
         b9:0c:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:56:14 2024 by rpki-client on console-ams.rpki-client.org