Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File:                     tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier:          eFS6HkJnghM0xAprdWK2byhSXhPas1/DAWNCnPYdFmI=
Subject key identifier:   26:7F:3A:00:02:74:70:89:CE:F8:49:C7:68:B3:86:31:39:87:1A:98
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer:       /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial:       0190520FDEDEADFA4281EB468F86DBBFE047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number:          11E4
Signing time:             Wed 26 Jun 2024 01:01:30 +0000
Manifest this update:     Wed 26 Jun 2024 01:01:30 +0000
Manifest next update:     Thu 27 Jun 2024 01:01:30 +0000
Files and hashes:         1: RPwGyZABObCpLoeZsKLtcUm3vRY.roa (hash: CQNeZRgmUzjhGb2pqpSB3OG37a0PP9qSQmqKLnSKFLw=)
                          2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: GOmMatLk5Y6NXtVkAHIh0XwFRQmJtQJvP85SVLsW9gg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:0f:de:de:ad:fa:42:81:eb:46:8f:86:db:bf:e0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
        Validity
            Not Before: Jun 26 01:01:30 2024 GMT
            Not After : Jun 27 01:01:30 2024 GMT
        Subject: CN=267f3a0002747089cef849c768b3863139871a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:0a:46:1f:d7:81:50:24:da:44:b8:b6:f2:
                    e6:2a:2a:f7:34:2c:88:83:e5:b3:80:08:02:f7:4b:
                    b7:bb:bd:57:d3:e8:83:97:e6:fe:72:0f:c9:f9:92:
                    62:94:06:e9:3d:00:9e:1b:49:cd:c6:47:43:72:37:
                    eb:0e:0a:3a:80:41:c1:a6:1a:5b:c6:eb:c2:75:23:
                    06:26:27:31:14:c2:e4:94:8c:18:b0:43:39:64:2b:
                    cf:e9:cf:4d:c3:65:1d:33:cb:f1:ba:bd:05:f7:7f:
                    0e:6e:ca:fc:aa:ee:48:57:98:b2:f8:37:b8:20:10:
                    18:be:f2:3b:25:01:d7:f4:84:6f:09:c9:9b:b0:16:
                    b9:21:7f:3d:a7:25:20:b0:ae:af:a8:12:68:2d:e9:
                    9e:cb:b7:2b:4c:5e:d4:8a:d5:52:b5:db:1e:0e:28:
                    24:03:c6:d5:96:e9:22:b6:b4:4a:f2:49:9d:1e:35:
                    55:a4:2c:99:40:9a:ef:e0:f5:0e:39:02:78:28:6b:
                    6b:24:c1:3a:1f:df:b5:39:55:92:a4:e8:6a:4a:8d:
                    f5:ef:84:4e:17:ff:ab:73:6c:75:c5:e3:7f:99:51:
                    8f:88:21:eb:10:ff:96:91:00:ed:fe:54:fa:00:cc:
                    84:52:81:52:4c:cf:99:51:1c:16:03:3d:e7:6e:8f:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7F:3A:00:02:74:70:89:CE:F8:49:C7:68:B3:86:31:39:87:1A:98
            X509v3 Authority Key Identifier:
                keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:75:f9:a5:0e:7f:47:a8:3f:44:82:85:b7:8d:f2:3f:43:
         9f:9f:e2:a0:eb:a1:36:13:ce:2e:f8:50:71:84:14:ca:61:91:
         57:ac:45:dd:e5:bc:eb:53:f8:ab:71:ed:58:15:85:e6:31:a2:
         0a:d4:f7:8b:46:07:cd:57:bf:88:5c:50:f2:3f:4d:a7:9c:33:
         e7:df:78:45:c4:ad:65:77:2b:5b:08:8a:8f:75:36:ee:bb:4b:
         92:a7:37:45:13:b7:9e:2d:16:db:04:dc:00:16:c2:61:85:79:
         a2:42:d2:04:4d:ec:0c:92:cf:1c:f7:b1:48:25:a1:e5:24:c3:
         79:b9:8c:17:66:48:57:8b:b9:14:15:1b:2c:31:c8:ed:12:61:
         d2:2c:f4:e1:f7:cb:3f:42:1a:4c:0c:ec:41:f8:bb:8c:10:9f:
         89:cf:cd:c5:70:9d:f8:3f:37:0c:50:49:f3:09:6b:36:d3:16:
         2d:4e:c1:75:1d:df:b1:32:82:d2:ba:93:e5:da:82:9a:56:df:
         56:92:e7:24:40:f0:3a:74:3d:db:e4:f0:1f:eb:72:2e:d6:41:
         8c:f7:dd:50:20:a4:9b:e5:06:b6:47:b5:e5:17:3d:c0:f0:40:
         7c:a0:e2:6e:0b:06:de:c2:bd:60:ff:ba:fa:98:31:36:0a:35:
         9b:94:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:25:55 2024 by rpki-client on console-fra.rpki-client.org