Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File:                     TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier:          tbpTvrt2qebHaiqQqiOLV7lVvBG6vujG8Zb3khCsEYg=
Subject key identifier:   9C:32:42:58:75:62:B9:21:48:21:73:95:F4:86:B4:27:7B:F7:FA:66
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer:       /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial:       018F87487EAB47D037CF5EEC636E492FBC6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:26 +0000
Manifest this update:     Fri 17 May 2024 16:00:26 +0000
Manifest next update:     Sat 18 May 2024 16:00:26 +0000
Files and hashes:         1: Ow7LD0mqSaMOozglK9hHlgzJKBw.roa (hash: B47PSBOtFMxjiVySIxJH9xzUw34h1ILiVxY8W4lBPl8=)
                          2: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: QLJFXqqZvLa5jtqKEJi2PbV2Tde9PjmBJCHAm0QDfnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7e:ab:47:d0:37:cf:5e:ec:63:6e:49:2f:bc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
        Validity
            Not Before: May 17 16:00:26 2024 GMT
            Not After : May 18 16:00:26 2024 GMT
        Subject: CN=9c3242587562b92148217395f486b4277bf7fa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:14:b0:aa:2d:d0:28:0a:e9:4f:f7:56:88:
                    81:a7:c9:5c:78:0a:d4:03:3a:ca:b9:f1:5b:ca:ba:
                    f1:d5:f8:c4:0d:d9:0b:bd:a4:1c:d2:37:03:74:83:
                    98:aa:b7:64:12:63:c4:b7:dc:22:4e:b1:5e:0b:48:
                    89:f0:68:3c:f1:08:50:67:3c:33:64:73:ff:17:8d:
                    13:f8:fe:c8:8b:ad:fc:fd:c4:48:fd:70:4f:4c:3e:
                    f5:d0:18:78:cf:ab:4e:fc:e2:17:59:76:da:d0:28:
                    3a:46:2f:d4:b6:72:d2:b1:13:5c:fb:40:d5:b1:04:
                    45:a4:ab:1a:a4:8b:39:14:de:56:c6:84:7c:7c:15:
                    f8:b8:83:2a:03:db:ed:7c:e4:d6:c7:fb:91:a2:56:
                    46:87:a4:66:83:d5:b0:29:7e:0c:ea:81:7b:bb:d6:
                    cc:b1:65:0a:ed:cb:1d:26:d6:fb:75:d1:14:7e:3c:
                    30:3e:09:2e:6d:12:90:ba:f1:8d:c7:6e:1b:25:f1:
                    6b:d1:71:f6:07:3d:50:71:38:5a:51:af:c3:b8:bc:
                    4f:51:c3:d3:f2:e3:56:63:66:9b:0d:65:9e:b4:e8:
                    4e:68:63:fe:51:9a:e6:1e:cd:02:46:81:94:89:be:
                    28:eb:40:ec:ce:e7:2b:cb:8c:56:91:c0:46:4f:a0:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:32:42:58:75:62:B9:21:48:21:73:95:F4:86:B4:27:7B:F7:FA:66
            X509v3 Authority Key Identifier:
                keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:db:1a:55:72:16:b3:a6:0d:6e:f2:2c:4a:32:ad:c1:02:
         1c:4d:47:1d:4d:46:4e:1d:fb:86:61:8d:d0:9f:1c:5a:50:f5:
         64:f4:d7:d1:f8:20:a4:42:24:43:34:e6:1f:01:f2:73:38:a1:
         bf:5a:81:52:4d:d2:b8:88:69:72:a2:99:ae:14:07:32:f0:8b:
         d6:5c:3a:87:b8:3f:17:68:44:78:40:84:38:5d:57:cb:fc:ac:
         ac:1c:5b:58:c5:fe:35:da:52:d9:c0:3d:73:d1:dc:0d:19:83:
         5e:9e:37:4d:73:35:57:86:b2:46:3c:b8:6f:20:cd:cf:22:7c:
         96:12:80:b4:b1:14:c0:92:66:a9:07:63:2b:5f:d1:53:16:54:
         5a:f2:a7:b1:e1:aa:1e:d8:80:9b:9d:73:a8:dc:69:3f:81:4e:
         bd:36:10:0f:be:25:33:6b:c6:55:f3:81:d4:09:a4:49:2f:6a:
         34:ac:23:e9:ca:39:06:e9:fb:6a:bc:ed:cb:e7:60:84:d9:83:
         d5:34:f4:9f:69:3a:9c:21:16:c3:9c:ac:a3:fc:6e:30:e6:b8:
         62:02:b5:6f:2d:90:75:17:3b:7a:5a:3a:bc:ba:c4:5a:50:54:
         a4:1e:72:46:59:85:ef:f5:26:06:d0:e1:48:ed:dc:8f:f0:dc:
         ac:ac:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:00 2024 by rpki-client on console-fra.rpki-client.org