Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File:                     tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier:          2gdjvjtPmLWB11uM/BKKIG008Qkvn/njet67RRvoKZA=
Subject key identifier:   64:4F:9D:A5:09:E0:EF:FA:A9:F4:8F:9D:23:F8:7E:73:7A:43:C4:A4
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer:       /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial:       018F8D15B78D854ECBF67A2BEA9E884303BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number:          0FBD
Signing time:             Sat 18 May 2024 19:02:41 +0000
Manifest this update:     Sat 18 May 2024 19:02:41 +0000
Manifest next update:     Sun 19 May 2024 19:02:41 +0000
Files and hashes:         1: 2g1oUeqG1FDY75uhhrJdSslDTUY.roa (hash: ElDhO6Kn3Zi54oNpNBTjfTd2yOZHKbEWZ2YOZq1tXB0=)
                          2: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: oVjYuMVrFev2WDMkqFyJ8DjFey5SozuFMT7JrcCVbTY=)
                          3: yPcEN9P-_ycbqRZxVwtzu1hhzvw.roa (hash: puLGr2BJe+JBm0jA0O3HeXJ/Fm9RSnmhVeCRwTllgSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:b7:8d:85:4e:cb:f6:7a:2b:ea:9e:88:43:03:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
        Validity
            Not Before: May 18 19:02:41 2024 GMT
            Not After : May 19 19:02:41 2024 GMT
        Subject: CN=644f9da509e0effaa9f48f9d23f87e737a43c4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:e4:c3:a5:23:3d:12:46:9a:6d:0c:32:25:
                    8c:ec:dd:02:ed:c1:fb:0c:5c:fb:21:54:ca:de:f8:
                    d0:80:22:d2:06:5a:b7:51:fd:16:82:92:9a:8d:2b:
                    e6:ed:ff:02:f0:08:04:f0:f8:fa:b1:76:e2:78:39:
                    f1:4d:36:cb:9b:7d:9c:af:25:0e:e6:96:4a:85:ad:
                    0e:29:83:51:20:33:a5:93:67:9b:7c:85:a0:b0:3f:
                    88:a9:44:88:a1:9b:ab:a0:c3:f5:1e:e6:5f:cb:cd:
                    52:65:18:20:b4:5c:1a:75:41:c6:a1:6c:3d:a1:3f:
                    51:23:80:ff:6b:7a:b5:8a:0c:c4:9f:9d:f5:a1:26:
                    c6:34:55:d7:12:bb:ff:5a:eb:d8:df:68:28:ab:3f:
                    7a:1e:64:cc:f7:5b:08:40:32:fa:88:38:6e:68:2a:
                    60:b7:b5:1a:48:c4:60:b5:10:7c:b0:db:f4:16:6f:
                    9b:8d:90:02:ba:94:52:4c:3b:1d:ab:75:6d:30:89:
                    4e:0d:3e:07:51:58:27:1e:80:0a:dd:c9:3a:5b:29:
                    84:53:5d:76:f9:33:65:6e:da:67:a2:ce:b9:a6:d9:
                    96:8f:e9:80:23:b5:f6:d6:dd:56:c3:73:58:03:27:
                    b8:09:60:ff:7b:e2:5b:e7:93:c6:c4:52:8b:90:f5:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4F:9D:A5:09:E0:EF:FA:A9:F4:8F:9D:23:F8:7E:73:7A:43:C4:A4
            X509v3 Authority Key Identifier:
                keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:76:68:20:8e:31:a7:5b:a1:a5:97:f1:b7:d0:1e:e9:b9:63:
         d2:40:01:56:90:5a:12:e2:5e:33:da:f8:22:5f:3a:1f:89:4c:
         61:b8:a3:e5:bd:86:48:09:cc:27:8f:5c:be:28:a5:d5:02:58:
         7a:b2:54:cc:a4:d2:f6:fe:ff:50:c3:23:eb:87:22:f7:d6:75:
         0d:73:b5:91:50:9d:07:dd:63:4c:eb:ce:1a:ea:5b:07:07:8d:
         fb:98:e0:e2:0b:35:06:6f:96:c5:d0:2b:1e:5c:35:7a:43:3a:
         21:cc:aa:82:63:22:54:48:54:26:dd:d8:6b:38:36:44:71:53:
         57:c1:c6:ba:1c:0b:e4:fb:dc:2a:01:4b:fb:69:b9:22:59:59:
         78:1e:99:ae:59:e3:d0:4f:76:d6:02:fa:c8:ac:21:0b:49:3f:
         a5:08:41:8a:d3:54:56:1a:ea:db:a3:0e:9c:69:92:60:12:27:
         05:29:78:e2:f0:01:d3:45:91:a6:db:1a:df:1e:05:3a:f9:5b:
         05:55:e9:c8:4a:47:7e:65:47:39:fb:6f:de:7a:c7:b5:fe:95:
         89:e4:c6:e9:6b:7e:0f:7e:c3:bc:5b:75:cd:9c:38:28:7b:06:
         69:e0:9f:41:2c:6f:af:9e:cb:e7:f1:d5:8c:8a:47:95:2b:5c:
         e5:33:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:09:59 2024 by rpki-client on console-fra.rpki-client.org