Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
File:                     TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json)
Hash identifier:          IrYnHFGGilTztLNpdNX3WxVlDDV4UJyGvp3uXC4CL+o=
Subject key identifier:   31:A9:44:63:46:5C:3D:57:C7:4D:41:5E:B5:81:B7:DD:96:B2:A9:3F
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Certificate issuer:       /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial:       018F3A409B2DFCAEF00090AFBBBA55D0FEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
Manifest number:          1157
Signing time:             Thu 02 May 2024 17:01:03 +0000
Manifest this update:     Thu 02 May 2024 17:01:03 +0000
Manifest next update:     Fri 03 May 2024 17:01:03 +0000
Files and hashes:         1: 7oP-KwcW6HL5dsy0Qt2uHCmlNrw.roa (hash: NtjbpOGx9I1qw6nUh+lDxj28zLIaPjp2WT2BhA/rO0s=)
                          2: 8ED_x4934iZzCn59jN1jCACASy4.roa (hash: 7SRe4+WpEwsgqIDLqsWyPRe41x0e2v9knMpPH7RfQFg=)
                          3: 8rGzTfCTrXwwDtmji3mKAOk0XyA.roa (hash: IOjc3X/eZAaUKjf0+ZCB5lzdwzUbPJl3qllaI9JIN8o=)
                          4: LG4mu_cNIPurkJ8EQDfX5Wd6-YY.roa (hash: ExludKFGbqrdV48fPq2ORTcrerANRKxzzbShgrQ9fkk=)
                          5: QxzZseWdf0HAnLVzsTHbB6TZRPo.roa (hash: LcVkagAwGQNjDVIqU06sG6TuMZ2ITtZZGjuQtkOWeTg=)
                          6: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: 8JulTyJRooy+RzCVw14tYNKf6jLKqEG0RWHu9oPgYRU=)
                          7: mx8m9BRNHVUqIv94YMMUnWbyuiw.roa (hash: p7JNKoyDAeD9iOth0OgxJ80VoIYzoYDNGE0TRPYHR5s=)
                          8: o_hJ2HiXuU9WzCOqJNXx_RR71UY.roa (hash: qPFZm8g8mTBXy/p62YB/ypMK59Zqifa+y8Y3Kg6ZlsE=)
                          9: wiqYGcEbKL7O3fQ04aq5xlbU_k4.roa (hash: qyEMiH/LdaEjzM2vJ/TeHed9QCM9DdiEm7T1G0Fb75I=)
                          10: xjRqY1PE0UpjFF1kLH8erq2zhl8.roa (hash: 52NzW4kOm/zjd/L0Kr+3U2F3S49OgjpiYLNwePdoGD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:40:9b:2d:fc:ae:f0:00:90:af:bb:ba:55:d0:fe:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
        Validity
            Not Before: May  2 17:01:03 2024 GMT
            Not After : May  3 17:01:03 2024 GMT
        Subject: CN=31a94463465c3d57c74d415eb581b7dd96b2a93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:07:68:d4:b4:67:76:cb:02:21:cb:78:28:
                    81:23:52:5a:d5:4b:1b:d2:47:06:35:d8:12:bc:1b:
                    0b:0a:39:ca:dc:d0:3b:46:9d:aa:fb:99:62:21:8b:
                    a1:bd:33:31:1b:25:71:95:ff:d2:2c:39:14:47:85:
                    6a:cb:44:d2:73:b5:01:a9:c8:a1:e3:0a:27:24:b4:
                    fe:ee:a1:ea:03:22:65:58:58:46:79:fc:68:ea:ac:
                    1c:76:f9:9f:b8:64:e5:15:bd:ca:25:c1:b4:0d:23:
                    23:15:8c:0d:f5:c0:d9:69:a4:1c:fc:d7:3f:05:d9:
                    35:22:96:5f:3f:23:a1:ca:7b:f0:42:9e:7b:44:1d:
                    cc:c4:3b:a8:71:13:fc:be:0f:04:bd:c5:dc:a5:db:
                    4a:36:1a:db:1a:48:51:24:6b:05:67:33:e4:78:db:
                    51:6c:8b:73:73:11:8f:2c:9a:43:b3:51:5d:f4:c0:
                    fa:e6:47:2e:6a:2c:31:8a:2b:2a:4a:3a:1e:2e:9a:
                    a9:e7:22:cd:cb:fb:d9:dd:6c:8b:ab:ae:d4:d0:98:
                    14:37:de:ac:a1:b4:74:42:94:68:b1:01:b4:01:e9:
                    73:cb:e4:dd:cb:72:21:ed:bb:7a:b6:b3:36:02:c2:
                    d1:f4:c6:62:44:76:9c:a2:07:62:67:94:5a:bb:5e:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:44:63:46:5C:3D:57:C7:4D:41:5E:B5:81:B7:DD:96:B2:A9:3F
            X509v3 Authority Key Identifier:
                keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:65:b0:f9:00:fe:14:00:ac:d6:9b:05:b8:d2:0b:ce:fa:
         51:81:f1:66:b3:46:77:dd:2e:1c:c6:87:23:d6:07:06:8e:c3:
         5c:c0:ae:66:ce:24:b9:f3:3e:eb:92:17:5b:c0:fd:2f:73:81:
         33:f5:b5:89:8f:02:96:be:d0:e8:7b:3c:1b:dc:bf:c6:d2:70:
         14:13:2c:31:b0:4c:db:d5:35:3c:ca:7c:5c:a7:c1:e9:76:bc:
         79:b2:96:db:76:bd:d4:25:38:bf:b9:3e:7f:dd:d6:92:1d:48:
         58:b3:f0:5c:fd:0a:4f:4c:73:64:89:17:b3:6a:07:72:ba:48:
         e0:3e:5f:5e:a7:9c:8f:8a:85:70:fa:a2:9d:91:b0:72:71:4a:
         5a:9b:d6:92:30:e5:e3:6c:60:70:1e:3c:ce:73:b1:5b:80:88:
         04:9c:ff:21:7e:87:e2:02:49:37:f0:b0:4b:54:17:0c:84:c2:
         ea:bf:a9:2a:0c:8d:45:78:a2:ab:ea:05:31:9f:76:6c:1b:20:
         86:94:20:01:54:af:0e:65:10:4c:d0:b0:48:24:8f:86:78:11:
         b8:10:b5:e7:60:5f:20:31:e2:3d:14:95:ae:d3:2f:57:09:7a:
         47:2b:0e:90:46:b3:2b:5f:aa:2a:4e:46:26:08:69:9b:25:47:
         5a:db:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:38:22 2024 by rpki-client on console-fra.rpki-client.org