Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          UmpdP9nlcUCjZ+EYtAIzJVS9mWfTdS9GEHBOyKZO0os=
Subject key identifier:   04:83:CE:53:DB:AC:41:14:2A:2D:91:82:9F:05:80:13:40:1A:FC:34
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       01901D462E0711109712D88207FF19DAE0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          02BA
Signing time:             Sat 15 Jun 2024 19:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:56 +0000
Files and hashes:         1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: F7t0L1emUgVgqTZsI782E97W00uV2Sgc4Ol8+Uw+630=)
                          2: siOfQhv_q1PKVfeCyZhOezZpRLc.roa (hash: lvqczXph1cEKIVNBqB8FpTTlLOQNfESBwwewLU0U/qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:2e:07:11:10:97:12:d8:82:07:ff:19:da:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Jun 15 19:00:56 2024 GMT
            Not After : Jun 16 19:00:56 2024 GMT
        Subject: CN=0483ce53dbac41142a2d91829f058013401afc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b9:c6:ee:5b:fb:31:85:c8:b1:2d:ae:31:a1:
                    4a:42:b9:bf:6a:50:04:bf:15:aa:38:aa:4f:bd:69:
                    13:17:c5:c9:d7:dd:bf:c5:bd:d1:76:ce:5e:df:f6:
                    e2:18:a5:d1:b3:be:4d:06:55:c3:fa:3e:4b:42:e9:
                    85:05:02:ee:99:f9:df:6f:7d:0d:d7:52:2f:ef:b9:
                    db:1e:35:eb:85:29:2a:ea:36:07:7a:87:60:13:a9:
                    f3:18:22:75:7d:97:65:5e:88:a4:55:70:15:f3:0c:
                    66:75:3a:8c:9a:22:28:00:8b:8a:b4:31:f5:1f:24:
                    94:ef:a2:a5:6e:6c:f4:74:e1:0b:82:dc:aa:fb:8a:
                    52:d6:94:62:1c:6c:8b:7f:90:a2:80:df:55:c7:34:
                    60:59:0f:29:54:78:26:81:24:c0:5e:bc:f5:52:58:
                    b8:1f:21:fa:4a:97:09:39:db:ba:1e:98:4d:5c:e7:
                    2b:66:61:da:2a:85:97:67:29:24:2c:88:d0:05:96:
                    25:f8:b8:44:26:d3:f0:4b:75:f3:39:e5:c2:56:a0:
                    d2:08:bb:28:fe:b8:08:8c:bc:c1:48:cc:cb:d9:29:
                    01:5a:14:76:4e:d3:79:18:01:bf:5e:7a:28:cd:f6:
                    9a:87:0a:33:df:a2:68:66:dd:75:2f:78:bf:aa:6a:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:83:CE:53:DB:AC:41:14:2A:2D:91:82:9F:05:80:13:40:1A:FC:34
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:06:a8:f0:88:24:6e:af:14:80:57:ed:86:58:c4:30:a4:
         c1:0d:74:24:aa:a4:b5:fe:15:7c:4e:7f:17:1b:68:9f:3b:e2:
         99:e9:8c:f8:e4:a2:d3:66:d5:24:86:36:8d:75:48:9c:f5:ec:
         3a:bb:e3:2a:93:24:b9:70:3d:36:ee:f6:41:4d:68:52:b8:90:
         62:3b:58:ec:6a:a7:b1:c9:a1:19:32:ab:07:db:84:3e:4d:cc:
         83:26:e2:25:bb:b1:60:27:b2:3b:5d:d8:51:47:13:f9:95:e9:
         74:ef:a5:98:1e:22:70:d7:e1:a6:d4:2e:24:e3:85:95:3c:ad:
         83:26:ef:70:3a:cb:e4:d9:54:d7:63:97:d5:5a:04:c7:9b:6e:
         39:d7:84:55:c4:d5:e4:9d:e4:c7:db:ac:93:98:c4:92:8c:80:
         b1:0b:27:70:3a:a2:73:b6:54:d5:77:ff:86:7a:2a:5c:b1:3a:
         27:4b:cc:03:dd:03:67:e3:5f:c1:2a:4c:3b:c2:1b:89:82:ff:
         ec:2f:ae:74:4e:3f:14:75:03:d9:41:94:02:bc:c8:1e:93:64:
         90:c4:b8:f5:97:ab:c0:4d:9f:6a:23:bd:4a:cd:c5:f6:3a:4a:
         7f:c6:46:ce:83:c9:57:28:c6:f8:e2:30:a7:b2:82:db:63:ed:
         63:65:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:31:48 2024 by rpki-client on console-fra.rpki-client.org