Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File:                     TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier:          Trh0Wxm1ap8aJeLRXhbZ/DSxFqvSySARddp4Xs17APE=
Subject key identifier:   AA:84:64:1A:40:16:8C:63:76:00:7F:47:98:C9:55:7A:11:42:E4:ED
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer:       /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial:       01901C6A6040674C142C8C64078CE851FE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 15:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:51 +0000
Files and hashes:         1: 43BVPBx9zD5h-Q0DK1OZ6p8WmvE.roa (hash: n3wEzRzA1zzxnrrNmRLcBly13TE2V7iVGBqIngv160A=)
                          2: MD0-yNaqDjWwKQ9Ov-m52l5TYcE.roa (hash: yK5aFhfzHKVtMh4toLMKAANIe7rPl0Q0NGI1ewoo0c8=)
                          3: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: QQLQ+Ne9t7g17/LoT5NzXjf7XKhWYTawwOiZ0R6fxyw=)
                          4: aUL-KwxJs48qxZuNSqoACOmCIKg.roa (hash: UobfjE6clIgV8sU6s1cuREJGPA1J1FohpvaXLGW0uNs=)
                          5: icwjN3YjUTb6RbyEg6Q5L76HPS8.roa (hash: OOpdgUb2ujBwXaLAk3AhxT8v18tvJHs9T2hbVtSHdfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:60:40:67:4c:14:2c:8c:64:07:8c:e8:51:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
        Validity
            Not Before: Jun 15 15:00:51 2024 GMT
            Not After : Jun 16 15:00:51 2024 GMT
        Subject: CN=aa84641a40168c6376007f4798c9557a1142e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:0f:1f:69:56:f1:5d:b3:07:f8:ef:fb:df:
                    1c:54:70:53:e4:68:41:c4:6f:7b:b9:5e:39:89:9c:
                    a9:6f:72:d9:04:1d:ed:84:5a:e2:19:1f:e1:5c:07:
                    54:88:ca:a5:cf:c7:58:a7:15:90:e8:55:ea:c9:8b:
                    0c:ea:2e:da:d8:4b:c4:00:4a:44:a1:0b:0a:71:14:
                    1d:de:23:99:59:16:01:84:a7:40:4b:f3:05:f2:4d:
                    c0:f0:2c:20:46:46:ef:fc:25:10:3e:c5:91:d2:0d:
                    dd:1b:9d:cf:c3:df:00:78:11:db:fd:ee:93:33:4e:
                    0d:6d:b5:27:e4:d3:0c:b7:4a:8e:e5:07:f2:a3:72:
                    99:6c:c3:26:49:e3:0b:73:8b:b1:7d:a2:64:fe:f4:
                    3d:83:b6:1d:89:84:b3:cb:da:79:44:44:0f:6d:4e:
                    81:1d:10:fb:13:13:04:39:68:8f:28:82:43:d5:78:
                    2c:aa:a3:f9:fa:f4:d2:bb:0f:eb:3d:a3:d6:69:04:
                    37:0c:ab:df:41:da:42:74:95:87:06:8f:31:aa:f2:
                    6c:04:39:10:61:a8:19:4e:b8:62:36:77:fa:fe:61:
                    3e:3c:e5:9c:4d:a6:aa:08:41:2f:33:22:69:be:33:
                    42:62:c8:0f:af:fe:2e:d1:92:cc:01:1a:7a:ff:40:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:64:1A:40:16:8C:63:76:00:7F:47:98:C9:55:7A:11:42:E4:ED
            X509v3 Authority Key Identifier:
                keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:58:8f:60:f3:82:44:48:7a:29:e8:b0:30:dc:bc:3c:7f:8a:
         24:45:24:07:5d:5f:f6:70:f6:32:76:eb:aa:99:da:74:d1:e5:
         fe:b7:dd:e2:3d:b9:92:19:cf:f8:bb:1b:6c:c6:c7:2c:9e:06:
         80:4d:92:cc:fc:88:13:8e:cc:d7:ca:ab:95:55:78:20:01:eb:
         03:e4:69:43:0c:1f:64:dd:70:89:97:39:4b:15:a3:d5:03:79:
         c7:90:63:2a:bb:dc:f2:7d:be:57:1b:76:da:7a:e4:d6:36:82:
         cd:ab:a0:64:84:c2:ba:b3:27:f5:b4:61:12:18:0f:91:52:b4:
         d3:07:0a:1d:d9:99:d3:7e:c3:a7:0f:7d:0e:b7:11:70:46:91:
         6b:1d:f6:b1:8c:55:6e:41:91:e4:97:70:a2:6f:e0:c6:c4:97:
         1a:b7:ba:4c:7f:52:0e:ab:f1:d5:64:e3:15:a9:e4:ea:1e:19:
         a8:db:d8:eb:72:e9:2c:34:80:6d:f8:41:10:b0:2b:3e:a2:4c:
         43:d9:79:5b:9d:05:29:e1:ad:91:23:2c:f4:ba:b1:76:45:04:
         d7:52:26:3c:4a:3e:d2:35:2c:b9:c1:e2:f1:0a:28:b2:d8:8d:
         83:fe:6b:45:15:c1:08:e8:94:ea:de:36:1b:f1:d1:39:06:b0:
         b7:92:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:33 2024 by rpki-client on console-fra.rpki-client.org