Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File:                     Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier:          hUbYiWkVhyGxcyPDpG7QCSl4z1/IWE645RYSrL1ZTEk=
Subject key identifier:   B0:E4:63:3F:12:20:3D:9C:A4:AE:7A:5A:AC:C6:D3:77:DD:36:45:CB
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer:       /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial:       018F86A3B262BB71CAE13E31FFB6053EAD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number:          05A2
Signing time:             Fri 17 May 2024 13:00:25 +0000
Manifest this update:     Fri 17 May 2024 13:00:25 +0000
Manifest next update:     Sat 18 May 2024 13:00:25 +0000
Files and hashes:         1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: GgXzunW+qIEN5Hguyu/3MfbQwPVe7qCNDwR7c/agPB0=)
                          2: eg_F7AYXbZRzzw2AoPGlLRMH7Rk.roa (hash: WJjEoYjGIZUXHQxGS/As9r/R5OoEweIby6UZs/gGD0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:b2:62:bb:71:ca:e1:3e:31:ff:b6:05:3e:ad:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
        Validity
            Not Before: May 17 13:00:25 2024 GMT
            Not After : May 18 13:00:25 2024 GMT
        Subject: CN=b0e4633f12203d9ca4ae7a5aacc6d377dd3645cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:61:7d:d5:8d:bf:0b:6a:41:59:b6:9d:ae:
                    bb:87:1e:1e:7b:07:0d:bb:a9:67:e5:32:9f:5d:32:
                    90:8d:1f:94:63:8a:a3:f9:28:b4:1a:66:e1:a4:a2:
                    e7:bf:4e:28:df:02:21:d1:45:62:99:37:65:a9:a2:
                    cc:63:df:1a:4b:15:bf:46:e8:24:ff:2f:bb:7d:94:
                    3d:b3:a5:79:09:30:36:52:a6:25:09:7b:90:d0:c6:
                    1b:06:b1:d0:e1:dd:00:ee:87:5f:c2:69:d2:e3:d5:
                    d6:36:1e:82:88:d8:d7:17:2c:16:a2:93:be:b8:62:
                    38:13:68:03:a2:72:a6:08:0c:13:2b:40:d8:cc:c4:
                    2e:1f:a9:f6:d8:11:52:7e:ac:59:62:77:27:84:db:
                    2f:99:1f:dd:89:dd:ae:7d:41:fb:37:3a:d3:27:64:
                    ff:5c:90:61:00:c2:f1:fc:5c:01:d7:21:a6:d4:5d:
                    63:73:4a:05:8f:c7:f1:5c:60:a7:c1:94:5d:1b:9c:
                    08:db:47:8a:10:20:8d:da:6a:88:87:b6:0b:c2:41:
                    21:65:8b:69:a4:ec:b0:9d:24:62:39:c1:c6:eb:53:
                    77:f3:73:6c:d9:6d:95:35:16:44:91:64:77:56:8d:
                    a9:b7:41:66:21:a7:b2:7f:b0:4b:fe:e4:1c:60:b5:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E4:63:3F:12:20:3D:9C:A4:AE:7A:5A:AC:C6:D3:77:DD:36:45:CB
            X509v3 Authority Key Identifier:
                keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d6:38:e3:5d:13:5d:b0:33:5d:59:e3:1e:4c:b6:4a:15:e0:
         de:16:54:72:ed:b7:3d:8e:df:96:a2:06:70:1b:6c:c6:d7:20:
         5a:99:d1:c3:cb:87:92:2a:14:85:96:f7:2f:a1:a6:3f:06:7b:
         61:45:5f:3d:be:c3:08:5b:5c:9f:50:a2:ea:3c:c5:22:f4:77:
         36:30:0b:a5:6e:ef:ec:35:ec:b8:ce:81:21:87:ed:77:81:62:
         1d:da:d3:4a:b1:1f:ec:07:51:05:45:57:ac:4b:03:99:ab:6b:
         ee:cf:e3:6f:0b:97:3d:82:f0:4e:9e:b9:d3:b4:ac:5d:da:12:
         86:c4:7b:61:72:63:2a:84:38:24:1d:6c:fa:03:a1:56:c6:fc:
         eb:6b:4e:8e:99:e3:8c:bb:cb:9c:87:3e:37:02:44:38:10:84:
         db:c9:1f:a3:d3:9c:e8:58:4a:07:2d:9e:e2:45:91:8c:a2:42:
         dd:77:46:12:05:6b:ed:d1:f6:97:a4:1e:8f:da:32:b5:c8:50:
         bc:bf:fb:c4:db:bd:07:be:b2:86:28:1f:57:cb:44:88:bf:af:
         8f:2f:88:97:fd:d0:08:dd:0d:3b:51:a1:6e:20:65:5a:e9:7f:
         73:84:50:94:0a:bb:a9:9b:8b:86:7c:86:f5:98:7f:5f:f3:77:
         b3:89:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:33 2024 by rpki-client on console-ams.rpki-client.org