Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          Vc8LuiwL965eC1oM0njsB0msyb3TtqKOCwAk5cWNyMo=
Subject key identifier:   63:90:3D:83:F3:15:37:0B:DA:B9:8B:C8:F4:3D:9F:86:AC:1D:6B:4A
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       018F874AFAB7BBFC41A6195C02F86D451212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          01DB
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: GiRIkQjdD6NSyQJHog-8JpsmpQA.roa (hash: XqZSWdYRsKDhCbvc4OygGFTZAayWKDohmbOvA0E6rtQ=)
                          2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: syn6OIQOAyHrPAhH4hFZmeL4klq/jnj/R5R5s77USjs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fa:b7:bb:fc:41:a6:19:5c:02:f8:6d:45:12:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=63903d83f315370bdab98bc8f43d9f86ac1d6b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:39:c7:fb:79:d6:45:de:b2:dd:bc:13:3c:
                    dd:a3:3d:a8:1e:24:0c:f9:f7:c4:a1:58:86:92:d8:
                    dc:5d:f5:bd:6d:a5:81:9f:35:d5:86:a6:cf:e6:a4:
                    b7:37:ac:0d:27:95:b2:dd:7b:f1:dc:92:6e:8c:80:
                    40:87:ac:a0:5c:fb:b0:60:de:16:ef:39:7b:23:bd:
                    54:e2:e7:75:f3:09:1c:0d:a7:29:2a:52:dd:fb:69:
                    f5:db:10:4b:e7:69:47:4d:e3:9b:35:be:dd:43:ec:
                    eb:6f:2b:7b:c2:34:67:a3:a9:d3:3d:90:29:88:77:
                    2d:b9:af:db:67:0a:8e:19:41:60:d9:0a:82:8c:69:
                    f6:3f:b7:16:1e:51:7b:8c:7e:25:37:b2:00:7d:10:
                    e6:89:06:95:99:27:c8:07:50:88:97:21:e6:06:f1:
                    22:e0:c7:3b:b3:79:fb:c0:43:b4:9e:45:71:7e:bd:
                    35:ae:f9:30:b5:c4:c6:f0:d7:eb:16:c9:40:a0:88:
                    75:fe:fe:08:da:c8:f0:f7:d5:4c:47:71:ca:c7:e2:
                    af:21:de:df:cc:fc:71:ff:55:b3:01:c8:f8:a6:b0:
                    72:1d:d4:b5:c2:2f:95:2d:47:51:f6:52:ab:86:40:
                    55:74:11:90:97:35:60:82:61:e3:bc:45:ee:1c:1f:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:90:3D:83:F3:15:37:0B:DA:B9:8B:C8:F4:3D:9F:86:AC:1D:6B:4A
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:43:34:df:9d:a4:ab:8e:04:4e:c7:41:74:e8:d7:af:e2:cd:
         79:c8:01:42:2c:74:ee:3d:6c:9a:d3:a0:06:7b:67:4b:ba:69:
         99:01:d8:06:fb:f6:02:a0:06:73:98:0e:47:2b:b8:43:21:67:
         99:c1:29:80:5c:26:29:c8:dc:eb:bc:b3:47:a6:30:03:e7:10:
         4d:f8:f7:38:ae:f5:fb:8f:7a:ea:f6:95:d4:3e:e0:a8:d0:70:
         f3:5f:83:af:a8:53:76:01:e8:ed:a0:d7:85:e7:c4:e0:4e:54:
         b4:a3:9e:a7:03:b1:5f:95:bb:e2:4b:a5:c9:9a:30:27:58:55:
         0a:37:8e:1e:6b:07:63:31:6d:f2:ca:b9:02:c1:15:aa:da:c0:
         07:5a:f2:4d:74:ae:8c:c5:fe:25:3e:fb:00:8c:9a:7e:b4:f7:
         c7:9f:47:3f:77:9e:ff:f5:8f:1c:e3:14:42:f9:e6:1c:fb:61:
         24:88:ca:24:dd:73:64:7f:ef:07:92:97:d3:f3:64:c3:5f:29:
         76:e2:22:66:90:d1:53:3c:59:5a:58:1c:9a:f5:da:e2:b0:50:
         93:50:40:29:37:61:f1:f8:b2:49:44:b3:06:51:f4:27:8b:25:
         21:07:d1:5d:08:34:24:34:35:33:1f:8a:9c:69:c8:07:c3:b5:
         79:1b:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:29 2024 by rpki-client on console-ams.rpki-client.org