Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File:                     TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier:          2zMiTiELfDAy1eQKjHppVYrQ47Au22TvQ3Gy7y0aS20=
Subject key identifier:   7D:B8:C8:82:C6:F5:95:59:B4:22:F5:E4:24:04:8B:4E:1B:87:22:B3
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer:       /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial:       01901D0EE87BD5C13A1A7E6F9D5CB884511F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 18:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:34 +0000
Files and hashes:         1: 2N6urlOD0Xl64IaC4GaCBKvvuio.roa (hash: eGojIwzSmaJ45ysVGACMJ7wLajdu1hwCMuQoBMqID5M=)
                          2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: 6WPBIILNnwK54XT94dssqt/aenKJiLr6/0UXlTJ6cek=)
                          3: UQKP7OpIPYREgohsx130-0qpLjM.roa (hash: /9NBl81TdkODjzeLG6fm2+vL/2PdVwEmz6E3cAW5TIA=)
                          4: hYKn6uw-Fus3el3ZqEtdG5nc5QI.roa (hash: LAbbkXsf5xUIoA03H96TxJ0wp736ZL1RA6n3tH+T3uE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:e8:7b:d5:c1:3a:1a:7e:6f:9d:5c:b8:84:51:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
        Validity
            Not Before: Jun 15 18:00:34 2024 GMT
            Not After : Jun 16 18:00:34 2024 GMT
        Subject: CN=7db8c882c6f59559b422f5e424048b4e1b8722b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:fd:8a:82:ab:2a:c7:80:aa:14:f9:50:ff:
                    5a:a4:20:86:cb:c8:5e:99:85:cd:a8:20:38:e6:16:
                    38:1d:71:07:e2:30:c3:6f:3c:46:2c:67:cf:99:1e:
                    22:1b:1a:2b:1a:0d:26:bf:ef:7b:c9:07:30:23:1d:
                    fd:54:76:e4:4c:c4:a8:ae:ee:01:2d:db:a8:f3:87:
                    09:f4:f1:e8:51:de:22:87:c7:66:87:5d:c2:90:17:
                    29:98:b1:d3:6b:97:62:78:e6:27:72:84:70:3c:54:
                    a9:10:9c:ea:48:a9:56:45:bd:41:1d:ba:46:b3:dd:
                    aa:ce:1c:50:10:80:bc:49:e4:12:14:3b:a3:f3:2c:
                    bd:17:ef:d1:a6:5f:6a:52:c4:85:5b:83:6c:9d:69:
                    9e:9a:5e:e5:82:40:d4:80:9f:08:df:d9:d3:cc:b8:
                    12:25:bd:c7:f3:13:17:b2:29:fb:be:21:46:8c:bf:
                    e3:cc:8a:09:8a:fa:0b:97:13:1b:e5:f9:c5:d3:05:
                    68:80:ab:36:40:b4:82:d4:72:16:a7:97:40:fe:67:
                    2f:b5:98:f1:b1:c9:b7:1a:86:b9:50:00:b2:e9:8b:
                    31:81:2b:e1:06:ff:55:04:0b:99:b6:1b:4a:36:a5:
                    a6:71:b1:0d:dc:2c:d3:4a:47:5a:63:0b:1a:c6:1b:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:C8:82:C6:F5:95:59:B4:22:F5:E4:24:04:8B:4E:1B:87:22:B3
            X509v3 Authority Key Identifier:
                keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7f:97:76:0d:e3:25:af:eb:c8:d0:33:20:de:6a:4b:78:67:
         a9:1a:af:0e:66:3e:b2:25:fe:22:6e:a7:b8:18:ce:17:65:e5:
         28:0b:31:70:b9:e9:25:12:80:f1:6b:bb:62:75:57:6a:56:ff:
         ef:16:14:db:60:5c:1a:86:09:4c:6f:d9:1e:26:5d:d4:c1:84:
         51:6d:bd:23:72:ee:07:34:f6:e1:b9:c4:e3:67:a3:b9:05:97:
         12:df:46:dc:71:a7:6f:63:24:30:ef:16:32:ee:44:72:17:77:
         f7:7c:de:2e:7d:d3:a4:79:9b:6f:e0:a3:9d:c4:33:03:ca:7c:
         c1:54:d9:2f:45:5c:55:1a:e6:2d:0c:95:82:82:04:47:fa:b5:
         52:93:27:b3:89:6a:e8:f1:4a:54:09:26:3b:2c:10:d0:ec:5b:
         28:5a:1d:93:f4:05:63:20:1d:6a:75:52:eb:c7:10:66:0b:87:
         48:30:52:75:8d:bc:08:0d:de:04:21:fd:b6:8c:c0:4e:44:95:
         8c:29:5b:a7:ab:ad:f6:ac:33:16:98:84:44:a7:f5:85:d5:46:
         04:75:67:de:a5:d3:23:17:18:1b:0f:e5:b6:41:d8:cb:b3:8c:
         ae:4a:15:44:46:d3:c3:c5:81:9e:90:7c:be:55:0d:bb:20:36:
         9f:79:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:23:52 2024 by rpki-client on console-ams.rpki-client.org