Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File:                     TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier:          VTXxpr3rj5vyglZwHDuoYC1VL/hPa89sptQuljMLktA=
Subject key identifier:   59:A0:81:E5:11:02:31:56:D6:9B:1E:B9:2A:5A:D0:03:AA:10:8A:62
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       01901C6A3659EDA2912D11BE20004FFFE634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number:          0A1F
Signing time:             Sat 15 Jun 2024 15:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:41 +0000
Files and hashes:         1: M4FdP55ph1uI--J-7zyJSmBPvFI.roa (hash: q4rYtac8Ue24UIwXHpoLJI7ILqD/ODou0Z9TGDL5MtE=)
                          2: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: gJCvS1d5wzMbkaSRDPcpWmzL3j0twm3U63Izw+aPghs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:36:59:ed:a2:91:2d:11:be:20:00:4f:ff:e6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Jun 15 15:00:41 2024 GMT
            Not After : Jun 16 15:00:41 2024 GMT
        Subject: CN=59a081e511023156d69b1eb92a5ad003aa108a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:14:7b:35:3b:56:6e:95:22:27:24:2c:a5:
                    38:cb:8b:e4:4c:ac:11:1a:67:66:ea:8e:1c:3b:ac:
                    6f:4c:ab:e6:4d:82:7a:e4:ab:0d:c6:c3:4a:0c:fd:
                    22:63:fd:ab:a8:58:e4:c2:d9:fc:50:60:5f:dc:07:
                    38:6b:70:11:61:4d:6e:91:9d:60:49:b1:59:6b:10:
                    4d:9d:a9:53:2d:19:0a:c0:1c:09:9e:b6:6b:18:13:
                    c0:7a:b5:3a:1f:a7:75:16:80:00:5f:f0:5b:80:0e:
                    f3:bf:16:66:19:4c:2e:13:d5:96:57:b5:38:e7:2d:
                    47:9b:2b:0a:63:28:85:bf:21:26:5b:fa:d4:e2:92:
                    40:df:0c:46:e2:f2:1f:c7:26:79:19:d2:e9:e6:b3:
                    24:c7:54:3a:04:41:da:31:75:57:a4:44:61:06:f9:
                    3a:d2:4a:4f:6d:dc:ef:45:26:a4:f6:31:ae:f0:88:
                    31:69:c3:00:d5:e5:e8:ed:94:c2:ff:c8:be:17:a9:
                    93:c2:59:c6:49:01:b3:1b:ce:0a:e3:fa:9b:cf:bd:
                    f6:b2:95:45:c0:20:da:50:c3:35:65:2b:75:2f:06:
                    f1:7d:c3:c5:b7:eb:d9:a6:0b:6b:f0:d4:48:1e:ed:
                    c6:98:2f:10:2e:b3:6e:e8:6b:54:10:a7:99:6b:2c:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:81:E5:11:02:31:56:D6:9B:1E:B9:2A:5A:D0:03:AA:10:8A:62
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:ce:e1:b9:01:76:f6:d7:2c:3e:fd:2f:c4:5d:31:9d:e1:
         67:bb:48:c9:62:b3:57:8f:07:fc:6d:bc:92:a9:3f:db:af:29:
         6f:c0:15:0d:66:f9:9b:2b:4c:69:ff:ce:2c:31:4b:72:82:a3:
         0c:d2:2d:c4:7b:04:38:32:ad:0c:35:69:f3:91:3a:59:c0:d1:
         0c:78:57:49:27:87:fa:65:3b:29:2a:f8:18:2a:dc:e1:da:27:
         3d:92:ed:27:43:ed:68:5c:44:8a:51:dc:2f:87:c4:7a:72:01:
         7b:5e:8d:c4:0b:8d:27:2f:73:fb:ca:84:e9:f7:3e:9e:0f:ff:
         ad:d0:1b:07:89:4e:88:e3:91:35:9c:33:4e:2f:2e:92:25:4a:
         c2:f8:9a:90:96:6c:42:d9:c3:1a:bd:80:a4:5d:ad:01:c2:8f:
         23:79:a7:d8:40:58:bd:c4:ac:89:02:93:6d:ba:b5:35:6d:b6:
         c3:b9:ca:eb:36:da:a4:07:76:c0:0f:20:6d:80:12:ac:23:f3:
         85:ac:ec:6a:77:9a:76:12:0a:ea:d8:3b:74:3d:a9:40:f9:14:
         1e:1c:c9:a8:e1:1f:95:52:5a:21:a9:74:18:e4:f1:92:72:f0:
         67:86:33:2a:ce:40:9e:90:ec:d8:38:d7:94:cd:70:1d:9f:36:
         4e:88:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:32 2024 by rpki-client on console-fra.rpki-client.org