Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File:                     tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier:          utlQhCQ6Pl0IF7RjRPYGcGWLmW1ZnQIRuieYV1Euarw=
Subject key identifier:   27:40:78:9D:B6:65:EA:6B:6D:42:17:6C:75:C3:F3:D8:ED:98:BE:ED
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer:       /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial:       01903BBEC7B0A8C54724D6FF8F43F120232C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number:          0839
Signing time:             Fri 21 Jun 2024 17:01:16 +0000
Manifest this update:     Fri 21 Jun 2024 17:01:16 +0000
Manifest next update:     Sat 22 Jun 2024 17:01:16 +0000
Files and hashes:         1: mmHxUjBzz6OeDViACPRt1iyYyFQ.roa (hash: F7nvFHHWUqgrTNQ/dn+w7/x8gVmeYjzPWTQsmpF+0Ak=)
                          2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: P/v/vsg0GVDNEN1b9622pLXnOf/Udhh5Ebn+7XcBfoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:be:c7:b0:a8:c5:47:24:d6:ff:8f:43:f1:20:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
        Validity
            Not Before: Jun 21 17:01:16 2024 GMT
            Not After : Jun 22 17:01:16 2024 GMT
        Subject: CN=2740789db665ea6b6d42176c75c3f3d8ed98beed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:95:80:41:b7:f9:96:b8:3e:30:e6:cc:8c:
                    6b:c8:20:0a:ab:0b:13:b1:6f:a2:d4:33:85:7e:dd:
                    d7:39:ef:2a:58:ab:7e:8b:7d:03:dc:e7:ba:96:e7:
                    3d:f3:0f:29:19:ef:3c:dc:49:43:71:aa:2a:87:e4:
                    1c:e9:3d:98:06:9d:55:68:26:33:2d:65:b3:82:d5:
                    79:46:e6:d9:0b:fc:ca:a5:f2:ed:88:b1:9c:b7:cc:
                    6d:06:2d:3c:c2:fd:e2:92:d1:33:db:f8:14:11:eb:
                    57:24:fa:69:18:12:28:0c:ea:1b:e6:18:48:fa:84:
                    3a:8e:43:b3:6f:9f:6b:94:3f:e5:f1:8e:45:0c:c5:
                    fa:73:a1:f8:21:10:e4:67:64:95:73:a4:46:fa:6d:
                    e6:c7:31:ec:61:8c:6d:ba:49:9c:60:87:34:24:40:
                    e2:25:63:34:01:e7:f4:6b:50:65:f0:72:0a:c1:0d:
                    a7:c7:c5:17:88:cc:82:7e:8e:ff:0e:ba:18:6d:3c:
                    33:fa:a0:a8:b8:91:c3:fe:f9:29:b6:e6:ee:02:ac:
                    be:45:be:0b:6c:1d:df:df:4f:68:00:bc:22:fb:df:
                    48:05:df:11:86:80:6e:17:69:70:10:97:a4:3d:91:
                    ef:d0:3e:37:f5:34:51:f7:3d:21:d4:f4:72:90:60:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:78:9D:B6:65:EA:6B:6D:42:17:6C:75:C3:F3:D8:ED:98:BE:ED
            X509v3 Authority Key Identifier:
                keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:31:f7:f3:4d:02:d0:81:df:01:ac:a4:96:da:5e:45:52:f7:
         93:94:3c:b3:23:83:84:70:19:fe:a4:c6:ef:9f:da:23:a2:15:
         e7:32:24:54:43:e4:b7:8d:52:68:ed:bd:f6:90:a1:29:c1:e4:
         d0:c1:84:0e:97:f7:4a:ca:59:85:ac:f0:15:38:34:ad:28:ad:
         fe:b1:4b:f7:8a:d7:29:43:f7:17:23:78:9b:62:70:1d:ab:49:
         55:7d:5f:89:be:48:f8:b9:56:f2:b0:20:58:df:4e:05:14:2b:
         32:68:65:52:51:19:ef:d9:4a:10:84:69:85:c8:78:cf:57:fa:
         85:d3:b7:db:a6:32:2a:f8:2b:ee:7e:11:ea:45:fb:af:63:cb:
         bd:f7:13:a2:9b:48:24:e8:61:4b:56:e5:68:6d:42:21:a4:7b:
         66:73:d9:a3:ba:e2:1b:92:ae:c2:02:38:04:b1:3e:e4:e5:18:
         ff:74:5a:04:0d:97:ed:26:44:57:57:91:0e:fb:c4:88:8f:f7:
         2b:c9:17:03:a0:41:bc:92:f9:3d:60:86:a5:d0:e0:c9:0a:e1:
         9f:2d:00:a5:ba:b2:e1:9e:86:4d:d7:78:d5:8b:08:34:2b:cb:
         26:3e:25:e3:38:b1:77:87:c5:bc:e0:c1:0f:d9:16:e5:a5:d0:
         33:d7:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:15:46 2024 by rpki-client on console-ams.rpki-client.org