Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File:                     tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier:          /mLqx8018QiXpHP0AdypqQpRADyvbMxmGlkDPWBm9Cc=
Subject key identifier:   21:E9:F4:25:E9:B0:6B:93:2A:40:17:4F:21:BA:89:E4:9C:C5:7C:54
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer:       /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial:       019045660DE660509FAF491D2A05BAF3F542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 14:00:34 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:34 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:34 +0000
Files and hashes:         1: 9H1LQjGw1C8PnJD4wbHs1naFP2U.roa (hash: eexSul/G6hqGg8kuA3vUiPydTGMguIAjfrVCSAS2Cdc=)
                          2: VEgbf5lwWAAQsXIq16EM00Uiu3o.roa (hash: Ps1U2sv2j3GBEJv7F8Cv1EdfmLDHEXjOpzECTfiMuZc=)
                          3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: CMj+KZAPgK9ZtbPNtZninIY9otWFsnwS1NAAURZi74U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:0d:e6:60:50:9f:af:49:1d:2a:05:ba:f3:f5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
        Validity
            Not Before: Jun 23 14:00:34 2024 GMT
            Not After : Jun 24 14:00:34 2024 GMT
        Subject: CN=21e9f425e9b06b932a40174f21ba89e49cc57c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:42:29:0a:38:ac:21:ed:b2:02:86:ea:42:
                    b1:81:f8:ff:00:02:23:1a:13:3c:56:af:5b:66:ea:
                    65:d1:61:fe:eb:38:0c:c0:90:f1:3b:b8:ee:d9:c0:
                    57:89:a2:a5:7b:d3:4d:69:d6:cc:9c:5f:89:b7:3b:
                    c1:aa:2b:31:0c:0b:76:6e:f1:37:8b:57:ae:b2:08:
                    86:07:22:23:88:02:a7:6f:ce:44:ec:95:d0:5a:1a:
                    66:1c:11:3d:0d:ac:d5:6f:e3:87:25:0c:e4:71:d6:
                    54:fe:82:f7:c3:4a:1a:04:35:6b:1c:2a:89:00:f8:
                    94:d6:d7:65:5f:75:29:d7:e8:bc:43:71:8f:09:18:
                    42:b5:d6:aa:38:95:49:e7:1f:3a:15:42:19:1d:d1:
                    bd:3e:d1:0d:14:db:28:65:4f:38:23:0e:b8:ce:85:
                    9a:7f:44:89:58:9e:ad:b2:44:b4:35:8f:49:4b:fc:
                    a1:ec:eb:1c:6a:e3:a4:1b:dc:6c:3c:15:6b:70:66:
                    6d:f3:31:9c:71:d1:96:2a:39:6f:2d:93:b1:b5:00:
                    eb:d9:56:5a:74:3b:8f:38:a1:04:ff:25:c4:21:7d:
                    6d:37:88:dc:1e:15:a2:db:a7:c7:fb:e3:34:48:c9:
                    8a:10:55:b2:19:39:5a:62:18:a1:56:a7:e5:cd:2c:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:F4:25:E9:B0:6B:93:2A:40:17:4F:21:BA:89:E4:9C:C5:7C:54
            X509v3 Authority Key Identifier:
                keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:ef:e6:ad:f3:84:c5:3c:29:67:2e:29:d0:5a:e6:8e:54:
         91:a4:dd:05:91:01:99:33:3f:a0:8d:e6:ff:41:a0:3d:d8:70:
         c6:69:27:14:82:89:4a:36:9c:cf:87:fc:76:46:2a:71:e1:f2:
         04:56:cf:03:2c:57:bd:34:1e:e2:47:be:8a:88:ea:f0:97:f8:
         c8:9f:b3:5f:df:bf:d6:bc:fd:c8:32:27:37:9f:14:69:ad:c5:
         90:b9:6c:96:3c:69:c7:91:8c:75:0f:38:62:01:ca:ae:d3:47:
         f9:29:6e:59:74:f9:0e:2e:4c:ff:0c:b2:5e:56:bf:b0:58:ed:
         21:18:28:42:5c:7a:34:dc:cc:0a:d3:66:de:e0:fb:78:ba:a1:
         50:06:62:c3:b5:a6:2d:14:ae:02:3e:9e:89:40:e6:3c:48:38:
         d5:4f:d0:95:8d:c9:6d:fe:3b:20:e8:f6:2b:55:d8:3b:8d:08:
         9c:52:27:20:e0:b4:72:e1:f7:a8:7f:e0:c9:53:fc:ae:3c:57:
         8f:b0:c1:43:d9:33:5c:95:42:8f:7e:64:89:4f:85:3a:04:d2:
         d9:77:dd:b1:92:98:b6:f8:fe:4e:18:ee:da:46:2a:09:ce:d4:
         bf:33:c2:5a:ab:a0:8f:59:60:8a:7f:35:32:53:de:2f:af:6b:
         29:86:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:02:38 2024 by rpki-client on console-fra.rpki-client.org