Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          hW0HSrf4ho1FA/XnNrdleVuuQss88e71ojdYr3zeVdU=
Subject key identifier:   82:FC:F8:90:20:FF:E7:E4:57:AA:5D:68:25:A1:AE:D8:B6:D1:66:F7
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       018F93157FDFB19A24D4FE9EB7BDED88A847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          0CDA
Signing time:             Sun 19 May 2024 23:00:10 +0000
Manifest this update:     Sun 19 May 2024 23:00:10 +0000
Manifest next update:     Mon 20 May 2024 23:00:10 +0000
Files and hashes:         1: Dv43RHDeUtJDQmxti43L1AO5Ng8.roa (hash: UlP96+n+rbW0WZnoFSkE3oER1BGEZK4WrwTTpGPwu8A=)
                          2: Z44hBR7cNYE89rODFF82_t7F7h4.roa (hash: BAdUsMoPqid2SxiiywD5BSRTKeyLBd5R2aHEo/Vk1DA=)
                          3: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: KtW5WYsqYdwFnWzSfgMVRir74d0S72b+qNuDozED1eI=)
                          4: tYtcpmozmP7U84B8zGZMemz12AI.roa (hash: AJH7g2lWU7YYtZojk8RZ2aAU+ZYBjNmoUAGNHFkODAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:15:7f:df:b1:9a:24:d4:fe:9e:b7:bd:ed:88:a8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: May 19 23:00:10 2024 GMT
            Not After : May 20 23:00:10 2024 GMT
        Subject: CN=82fcf89020ffe7e457aa5d6825a1aed8b6d166f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:ad:fd:05:32:a7:ec:c8:0d:4e:0c:d3:03:
                    70:1e:11:cd:49:89:60:09:32:0b:e9:90:9a:43:bd:
                    9e:a8:6a:52:86:b4:a5:e9:06:1d:03:5e:f8:ba:bd:
                    f1:dc:2c:1c:88:a4:b5:ee:fe:a9:d6:e1:d4:1a:c2:
                    6c:38:c6:2a:39:c6:04:3f:1f:0a:56:04:fd:e7:85:
                    3c:43:e0:63:8d:27:f3:df:0d:86:73:10:3f:8d:ef:
                    1c:b0:db:3b:28:bd:b5:c7:27:c6:30:58:cd:4b:7b:
                    44:36:f4:9b:ff:db:3d:8f:66:32:c7:16:c3:b4:2c:
                    49:2a:d2:45:9c:f5:ad:81:f2:93:ff:81:f3:9d:ac:
                    ea:72:01:39:43:f1:25:6b:f8:6c:14:ea:17:30:22:
                    21:df:96:a9:17:2c:1e:ec:f7:37:d8:7c:14:83:0d:
                    ae:1f:cb:94:66:7b:0b:ec:88:92:eb:d1:f3:01:81:
                    1a:c4:92:01:21:b3:15:ce:ee:05:75:b4:b4:fd:88:
                    be:86:ec:b8:a4:cd:fa:34:a7:e8:7f:22:c1:09:78:
                    4c:18:c4:17:d2:4f:94:55:d8:33:2f:4f:ec:e7:41:
                    65:a7:6a:17:58:10:f5:ef:7c:6f:11:46:cc:1c:fe:
                    6e:2b:f3:2b:71:8f:71:2b:ef:98:43:16:90:ab:a3:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:F8:90:20:FF:E7:E4:57:AA:5D:68:25:A1:AE:D8:B6:D1:66:F7
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:85:9f:34:c8:23:50:07:4c:f3:19:7f:2b:b1:68:f8:e6:ec:
         00:69:b9:a8:5a:a7:82:88:88:0a:74:d9:fc:fd:df:29:fe:dc:
         b2:ae:4d:a6:fe:4c:e1:f5:14:6a:e7:1e:64:60:f2:c5:6e:7b:
         36:1f:94:63:a0:96:95:05:65:40:92:e8:0b:f3:bc:e6:6a:4d:
         da:f7:1f:3c:c3:b3:b7:c9:42:82:fd:b7:e6:fe:e0:dd:54:54:
         e3:43:54:1a:3a:c9:bd:a8:3e:7c:a0:e3:a5:6a:5f:e5:bd:7f:
         c8:df:8b:0e:c8:34:8a:ef:41:ca:89:a5:25:af:cd:a5:aa:4b:
         33:fc:27:be:c3:95:85:d7:eb:93:ad:a6:e6:d1:a3:58:d2:b4:
         66:0f:77:c1:39:a8:84:dd:44:6e:5a:d9:ba:f2:ba:5c:ed:05:
         2d:c5:ca:b4:08:24:99:62:d5:41:58:c0:71:39:c5:94:0e:80:
         aa:f8:8a:68:16:68:10:79:1f:71:41:2d:ea:61:ea:25:3d:f9:
         23:76:a5:d4:41:ae:ca:f0:f8:0e:de:2a:23:d6:90:73:43:74:
         29:f7:41:e9:7f:72:29:37:c0:38:85:36:df:d7:a5:d9:70:08:
         3e:03:4a:a4:9d:13:e9:6e:e7:5a:8b:1f:61:c4:6e:34:ae:e3:
         9b:fd:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:42:37 2024 by rpki-client on console-fra.rpki-client.org