Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File:                     TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier:          f4WhF38PUirjbzVx9tDcptlJXwsDyrcWLb62e9L+zDc=
Subject key identifier:   71:34:F0:E9:1E:68:73:00:A3:3F:38:1E:3B:23:CD:6C:93:14:54:9F
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer:       /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial:       01901D4613C96352327436580F7F98EF4494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number:          0503
Signing time:             Sat 15 Jun 2024 19:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:50 +0000
Files and hashes:         1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: /uP3HU6z3mX6+mBNsTABFIWEXTIfaqqP4GbJdRxScEo=)
                          2: vSjoUl21SGZebiuvhw2cEwvRBW0.roa (hash: afnV6Hzc9LDu/h9HWXXNdznUKlzPz+pQaazo7J5w9gE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:13:c9:63:52:32:74:36:58:0f:7f:98:ef:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
        Validity
            Not Before: Jun 15 19:00:50 2024 GMT
            Not After : Jun 16 19:00:50 2024 GMT
        Subject: CN=7134f0e91e687300a33f381e3b23cd6c9314549f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:a1:f1:6f:84:24:bd:14:8e:8a:c7:aa:6b:
                    e9:dd:07:ce:25:ac:56:ff:23:aa:df:31:fd:2b:dc:
                    8d:51:c6:9c:4e:15:30:31:08:78:8f:ba:c1:31:d1:
                    c9:c8:dc:e0:a5:9b:d4:28:51:b8:c2:31:56:e0:a7:
                    39:dc:23:1c:e6:cd:00:05:02:97:0b:4c:30:06:81:
                    5d:04:3a:aa:0b:01:99:2a:9e:e5:4b:f5:54:e7:df:
                    6b:33:b2:e7:8b:20:9f:83:1f:bb:53:e8:e3:7e:2a:
                    1e:1c:84:5d:5a:aa:e7:ee:29:69:21:8d:ad:a9:2e:
                    85:b4:d5:b8:83:6a:93:36:e6:c7:ec:56:a7:c9:bc:
                    5c:cb:92:5d:eb:5e:9f:10:70:c8:9a:a5:f7:7b:7e:
                    d3:f6:82:37:62:ca:53:7f:fa:89:f7:9c:65:82:34:
                    61:b9:3a:b6:1f:26:aa:15:74:db:a6:18:4c:ec:a4:
                    38:c0:67:85:f8:de:08:33:1f:ae:96:c5:be:21:4f:
                    64:6a:a1:75:f5:fb:a1:cf:6f:aa:dc:ea:97:4f:f9:
                    84:72:be:12:a4:bc:8b:e9:1c:49:82:d2:00:15:ee:
                    c6:67:65:d5:b5:fe:05:5b:75:b5:73:99:72:f5:c6:
                    7e:b5:de:f0:16:c7:4b:3b:a2:1d:78:12:87:09:c0:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:F0:E9:1E:68:73:00:A3:3F:38:1E:3B:23:CD:6C:93:14:54:9F
            X509v3 Authority Key Identifier:
                keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:84:17:b5:38:0b:b1:67:e1:cb:ee:53:93:5c:34:5d:98:3a:
         c5:a4:cc:59:48:cf:2a:94:aa:26:5d:ad:05:36:3d:58:7a:dc:
         48:3e:9d:b1:5d:f2:cf:d3:2e:44:ea:b2:41:ee:79:85:63:f8:
         0e:cd:f7:b0:07:cc:9e:8d:74:b7:b7:77:6f:8c:f7:ed:9b:ca:
         92:26:9a:6f:fe:63:57:45:ae:89:cb:05:b6:c8:87:3f:d7:b1:
         13:e0:8e:f8:86:9c:a6:c3:75:c3:41:ad:c6:89:98:0d:7b:58:
         ea:d9:76:9c:e6:72:72:b1:15:0b:63:40:03:51:99:b1:5e:0d:
         d4:48:55:ce:94:a2:e9:1f:1f:85:9a:75:5c:46:6f:70:5a:8a:
         18:3c:f5:04:2f:82:27:45:a4:b9:cd:85:b4:38:78:31:86:e1:
         e8:7a:3c:20:3c:1c:55:41:e1:bf:8e:ec:4b:29:a4:c7:d6:0d:
         5a:7c:4c:e0:ec:eb:36:dd:22:5e:1c:72:af:0d:ee:60:d5:2a:
         13:76:59:2e:44:57:e4:f7:d2:e7:67:b5:7c:e4:b9:c6:b1:7d:
         69:3b:50:68:bd:2f:d5:1d:b8:9f:34:65:ba:c5:ea:67:4a:9d:
         60:3b:4b:cb:ce:88:b5:1f:e8:19:8b:05:6b:64:f3:a5:e8:01:
         18:f3:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:08:44 2024 by rpki-client on console-ams.rpki-client.org