Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          Penkc2JToKXOnBHF3wEjyS6wDImeFWxkIxGAfNW0A2w=
Subject key identifier:   6E:38:DA:38:32:EF:13:D4:25:D1:55:17:B0:7B:64:82:5C:72:40:A4
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       0190448B9B3FD645B8AD21526E5437B0A61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          0BF4
Signing time:             Sun 23 Jun 2024 10:01:58 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:58 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:58 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: tZ+398/0W5jgXabqitLPWMLGArUsmw+T5oUq7IilTbI=)
                          2: ufv3lVEbNE5UWRkmGx3BQDZxFEw.roa (hash: CDZkP9lIRnvNR/m2/fPOKCr5sHE/r8Yt+zOz71WxBPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:9b:3f:d6:45:b8:ad:21:52:6e:54:37:b0:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: Jun 23 10:01:58 2024 GMT
            Not After : Jun 24 10:01:58 2024 GMT
        Subject: CN=6e38da3832ef13d425d15517b07b64825c7240a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:7c:d1:41:79:92:20:96:9e:80:4a:ae:9b:
                    68:a2:a6:03:84:00:e9:1d:5c:e7:6c:8a:1c:b8:55:
                    de:e7:29:8b:1a:22:d5:47:6e:4d:30:33:6f:b3:99:
                    1f:60:d6:dd:09:ae:5e:74:6a:2d:4f:91:7e:82:ca:
                    a4:9f:57:ab:8e:02:c2:cd:b9:e6:90:b5:68:63:f3:
                    83:ef:df:e1:df:a3:a4:bd:3d:6f:ef:9f:5c:4e:1f:
                    cd:15:2b:66:27:59:8c:30:c3:0b:63:dc:38:3d:00:
                    98:78:1a:01:55:b7:23:74:42:23:d8:7c:c2:d8:ca:
                    17:ce:60:43:cf:42:dd:2b:2d:68:16:fc:9f:c5:74:
                    45:98:ab:ec:2f:d8:e5:e7:95:a0:7b:af:ea:64:35:
                    f6:c8:27:d7:e6:b8:07:02:58:19:81:ee:f6:9f:fc:
                    63:09:09:31:59:a7:a2:ed:a0:6d:bc:fc:96:17:fa:
                    40:ac:4e:b1:9b:05:69:c8:bf:07:66:37:a1:b5:7c:
                    fa:92:b1:d6:76:dc:88:6d:31:7a:ca:ce:36:ed:b9:
                    53:fa:a8:ef:3b:6b:56:33:0e:5c:cd:84:1f:56:8b:
                    7a:c7:db:85:4a:75:25:80:3d:cd:10:34:e8:06:8b:
                    30:a5:e3:4d:2a:d9:62:ae:37:1f:13:db:ac:ef:5b:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:DA:38:32:EF:13:D4:25:D1:55:17:B0:7B:64:82:5C:72:40:A4
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:5e:b1:41:91:f1:1a:6b:01:f6:82:ae:91:cf:40:1d:86:
         6f:09:7a:a9:93:c5:f4:f4:24:55:47:a5:ea:a5:da:3f:e4:c6:
         74:e4:b8:0e:c3:21:08:f5:4b:44:7a:1d:b1:29:b5:8c:fa:60:
         1e:f2:e1:a8:c9:af:9a:e7:1b:26:5d:8f:6c:09:c5:83:1e:64:
         5f:59:ca:b8:7f:7d:2d:b6:cd:12:d7:06:df:87:a0:81:f3:fe:
         e5:fc:ad:84:ca:74:5a:2a:a5:d8:f9:8b:14:a3:e3:c2:3d:66:
         f4:d8:59:39:9f:ed:c1:ea:89:ba:f9:ba:51:1d:8d:27:31:9a:
         f5:b7:be:02:d8:8f:7e:4d:97:44:59:d6:d9:43:ab:b2:04:b5:
         06:72:a2:9d:1b:98:0e:1e:3d:42:1f:87:68:e5:8b:f8:70:5f:
         23:b7:29:4e:2b:dc:19:b5:52:ca:94:fd:a5:65:9d:58:8d:92:
         ca:df:a0:64:49:bc:a9:02:fd:2a:7b:11:bc:84:56:8b:66:9f:
         65:3f:6a:6a:27:d4:b4:79:20:6c:f4:f2:1b:c9:86:28:14:9f:
         96:fc:cd:0b:a0:23:f7:87:57:c5:20:98:51:4f:af:6f:2d:ff:
         40:40:e0:8d:65:38:04:ae:51:0f:32:2c:7b:0e:30:9a:6d:90:
         23:90:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:42:50 2024 by rpki-client on console-ams.rpki-client.org