Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File:                     TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier:          ZP14O73+mALT+ygkw3G+czJRvYG9bKEDi86iJ3xCOzc=
Subject key identifier:   73:9F:CF:AC:CB:28:2D:36:64:71:ED:82:B2:92:17:CB:19:57:05:2D
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer:       /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial:       018F882483664BB8C56205A96DA75EF8F8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number:          0AF6
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: Go/7+09NbA2oJA0ncWS8VxEGsFgGhh6cuKy9OxeMShQ=)
                          2: qKEUMube2W-a8-E6pqowKmnZkCk.roa (hash: zfMD3lZDc0BYBR5R5zpdNRcwVRCEZEftmSakeqjfh5w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:83:66:4b:b8:c5:62:05:a9:6d:a7:5e:f8:f8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=739fcfaccb282d366471ed82b29217cb1957052d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:1c:88:39:09:32:37:8d:aa:7d:89:51:9e:
                    c7:2b:40:c4:d2:d6:ad:02:a3:24:21:25:7f:17:c0:
                    18:a3:f7:16:13:67:f7:62:c2:fe:1f:b8:1d:22:24:
                    33:4a:e1:6d:cc:db:dc:86:37:1f:bd:f4:1b:40:22:
                    2b:e1:d2:3a:6c:88:57:a5:3f:1c:2c:b9:78:e0:6a:
                    af:87:71:0d:c3:fd:a2:3f:b2:3b:08:eb:24:77:72:
                    8b:1c:a7:74:b9:99:d9:d6:f0:26:c0:a4:8b:9d:69:
                    82:3f:78:58:d6:9e:3a:5a:ed:8e:df:ff:da:10:95:
                    fb:39:6b:66:1f:df:8d:99:e9:45:70:1a:77:b9:c8:
                    06:dd:36:8c:97:80:44:b6:28:8d:50:eb:4c:08:f5:
                    32:f2:49:85:5d:3d:7c:81:fe:b0:cb:bb:c2:83:f3:
                    e7:e9:65:5b:58:81:39:7a:c8:4c:2c:26:39:6c:43:
                    21:60:ee:9a:e0:36:d5:cb:a8:74:14:3c:20:bb:0c:
                    e9:45:58:dd:22:ac:ff:d8:e7:4d:b0:50:80:c0:25:
                    3f:a7:fd:f5:88:1a:52:08:54:b9:99:b2:00:3e:70:
                    01:9c:af:ce:29:38:d5:2e:4d:b4:5f:6c:4b:3a:c5:
                    31:25:9a:ca:69:cb:61:cd:70:30:9a:85:fe:11:e5:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9F:CF:AC:CB:28:2D:36:64:71:ED:82:B2:92:17:CB:19:57:05:2D
            X509v3 Authority Key Identifier:
                keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:34:1c:ad:e6:1e:10:bd:8e:78:e1:0b:1a:a6:c1:19:58:
         18:3c:ee:b9:e1:81:c8:4e:00:81:d6:2f:bd:78:26:8a:6d:fa:
         7d:b3:46:4c:16:31:c4:52:49:43:43:a9:44:1d:b8:74:5c:0d:
         94:71:46:2d:39:2a:dc:34:f2:25:fa:54:08:83:0d:45:7a:14:
         e5:4b:d3:34:75:ab:de:5d:70:6e:c0:f9:0c:7c:c9:d7:07:cd:
         52:e7:2b:aa:4c:52:29:05:b1:6d:3f:d9:e7:e1:ed:08:8f:20:
         54:82:88:c6:f1:9b:48:33:e5:cb:38:e8:56:79:2e:f7:0b:93:
         a0:c5:21:3f:22:21:9c:c3:8d:37:d5:5d:07:e6:40:70:9a:1a:
         98:52:1d:56:78:ab:4f:80:a0:8c:b2:f1:c2:ab:b1:a2:1b:97:
         bb:28:d8:9f:f8:5e:7c:db:15:f1:75:ec:ee:9c:57:69:07:84:
         11:2b:11:2b:d2:9f:d6:c3:1e:39:25:e1:37:23:b6:66:ac:8e:
         01:c8:cd:08:28:19:bc:d4:11:bd:75:e3:31:61:66:80:d8:f8:
         8a:3d:d8:9c:54:6f:36:5b:99:8c:7a:59:38:fa:b3:00:8e:2e:
         e0:44:c2:04:dd:11:19:6c:2e:e4:53:ba:58:77:9a:56:6f:59:
         51:49:88:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJINmS7jFYgWpbade+PjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTc0MGNlZjk3NDlkYzJiMGY1Zjg4Y2RmMTAzNGRhODFk
NjA2ZGMwHhcNMjQwNTE3MjAwMDQ1WhcNMjQwNTE4MjAwMDQ1WjAzMTEwLwYDVQQD
Eyg3MzlmY2ZhY2NiMjgyZDM2NjQ3MWVkODJiMjkyMTdjYjE5NTcwNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxEciDkJMjeNqn2JUZ7HK0DE0tat
AqMkISV/F8AYo/cWE2f3YsL+H7gdIiQzSuFtzNvchjcfvfQbQCIr4dI6bIhXpT8c
LLl44Gqvh3ENw/2iP7I7COskd3KLHKd0uZnZ1vAmwKSLnWmCP3hY1p46Wu2O3//a
EJX7OWtmH9+NmelFcBp3ucgG3TaMl4BEtiiNUOtMCPUy8kmFXT18gf6wy7vCg/Pn
6WVbWIE5eshMLCY5bEMhYO6a4DbVy6h0FDwguwzpRVjdIqz/2OdNsFCAwCU/p/31
iBpSCFS5mbIAPnABnK/OKTjVLk20X2xLOsUxJZrKacthzXAwmoX+EeUWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOfz6zLKC02ZHHtgrKSF8sZVwUtMB8GA1UdIwQY
MBaAFEwXQM75dJ3CsPX4jN8QNNqB1gbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xYTE1ZmEtYWNlNi00NjRkLTg5Njkt
ZTQ5MjgxODAwMzNjLzEvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xYTE1ZmEtYWNlNi00NjRkLTg5NjktZTQ5MjgxODAwMzNj
LzEvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrU0HK3m
HhC9jnjhCxqmwRlYGDzuueGByE4AgdYvvXgmim36fbNGTBYxxFJJQ0OpRB24dFwN
lHFGLTkq3DTyJfpUCIMNRXoU5UvTNHWr3l1wbsD5DHzJ1wfNUucrqkxSKQWxbT/Z
5+HtCI8gVIKIxvGbSDPlyzjoVnku9wuToMUhPyIhnMONN9VdB+ZAcJoamFIdVnir
T4CgjLLxwquxohuXuyjYn/hefNsV8XXs7pxXaQeEESsRK9Kf1sMeOSXhNyO2ZqyO
AcjNCCgZvNQRvXXjMWFmgNj4ij3YnFRvNluZjHpZOPqzAI4u4ETCBN0RGWwu5FO6
WHeaVm9ZUUmICQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:59:36 2024 by rpki-client on console-fra.rpki-client.org