Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File:                     txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier:          LPE3wroV5f097se81KCMf7ycA3LcoGc+JoPh33GqVyo=
Subject key identifier:   CD:91:8B:18:AF:23:35:31:16:14:41:ED:5C:51:55:89:38:5E:C6:A9
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer:       /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial:       018F88243C8FFA1314B9A40020559E07D38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number:          0BD9
Signing time:             Fri 17 May 2024 20:00:27 +0000
Manifest this update:     Fri 17 May 2024 20:00:27 +0000
Manifest next update:     Sat 18 May 2024 20:00:27 +0000
Files and hashes:         1: WTTmJX383XcbjK0G6q-4_1L17ZI.roa (hash: mB24IiZx8StAkZrf/IiTz6By8vkkglkf3zCCCWNEP/Y=)
                          2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: P7RmGIFbDN2FVrQyH88/NxwODnI7ZEkbfpznsozDTRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3c:8f:fa:13:14:b9:a4:00:20:55:9e:07:d3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
        Validity
            Not Before: May 17 20:00:27 2024 GMT
            Not After : May 18 20:00:27 2024 GMT
        Subject: CN=cd918b18af233531161441ed5c515589385ec6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:42:0b:8a:84:4a:05:83:f3:9a:d7:90:51:
                    8c:cb:ca:e9:ce:f1:1c:4f:ad:39:c9:57:c2:94:31:
                    ae:4a:8f:b6:75:9b:4f:38:21:ad:82:1b:cc:d0:33:
                    65:f5:7e:02:b0:9d:00:dd:0f:c4:44:aa:fa:fd:d7:
                    7b:67:5d:0d:51:87:0c:6d:61:11:c6:3d:36:05:95:
                    48:df:a1:d1:a5:60:aa:00:f7:cf:ee:7d:e5:a8:39:
                    a9:a0:87:6a:42:7f:64:5f:3a:34:77:7a:cb:ee:23:
                    da:cb:34:6d:3c:77:93:19:e0:cf:52:1a:e5:c9:26:
                    b6:b6:b4:dd:02:29:89:bb:8c:1c:7c:49:f2:d5:a8:
                    83:45:4b:8f:c1:25:50:e1:b5:29:11:24:7e:fa:ed:
                    2a:bc:e3:3b:d2:0d:ad:a0:dd:e2:e6:24:2f:61:a5:
                    f7:0e:d2:9c:9e:d5:7a:5e:46:42:3b:a2:d1:b0:7b:
                    6a:91:54:e7:ce:4d:5b:20:35:ed:56:45:e1:07:23:
                    f8:20:7e:85:42:2d:c9:42:fe:bd:fa:8c:d7:14:7e:
                    f2:e7:53:08:12:e2:64:5f:8d:b0:86:9d:8c:13:cc:
                    61:2c:54:47:de:db:86:f3:d0:12:3b:eb:07:9d:08:
                    1b:51:1f:fa:10:bd:d1:a8:75:4c:54:e4:e6:23:99:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:8B:18:AF:23:35:31:16:14:41:ED:5C:51:55:89:38:5E:C6:A9
            X509v3 Authority Key Identifier:
                keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:39:d9:59:9f:0c:5b:ab:bc:43:48:8e:85:07:fe:86:d5:ef:
         5c:c6:7b:23:64:94:ca:af:cf:dc:53:7d:66:b0:6f:15:9c:b6:
         e7:c1:4a:4e:9e:4a:32:ff:af:af:24:29:23:e9:d0:be:a8:2a:
         c8:35:7d:7c:6f:d0:53:01:53:e7:c4:01:b5:9c:dd:b9:28:f7:
         77:09:e4:cf:3c:00:22:9e:bb:72:c9:d0:39:a1:9a:08:96:47:
         7b:d5:f3:25:01:9a:eb:9f:20:26:c7:0e:af:9f:eb:47:2c:81:
         68:5d:61:88:b3:e3:f6:40:f9:e1:ab:d7:64:95:72:bf:70:83:
         59:3b:54:73:25:cb:5e:6a:bb:ce:17:96:53:1e:23:ca:30:5d:
         1e:b6:fa:e2:af:1c:b2:b0:95:55:ce:cf:45:79:04:25:89:be:
         a4:6c:78:48:db:29:55:88:d5:17:fe:56:64:1f:c6:9f:df:96:
         31:b2:7f:be:8d:0a:28:7b:c7:98:5c:96:36:b7:64:d2:9a:a0:
         7e:5a:d4:9c:23:07:92:90:cf:97:95:8e:68:51:de:0a:18:a1:
         c8:24:3c:35:8a:7c:63:88:fa:9a:8a:e6:11:a7:1c:a4:c7:1c:
         46:15:e4:71:25:e7:71:91:38:eb:26:71:21:40:d0:6f:4e:b1:
         02:a8:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:30 2024 by rpki-client on console-ams.rpki-client.org