Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File:                     TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier:          VC0QtsmJZPiQja+SKwDLnn8hX729Z2T3fJT5OEzPwbE=
Subject key identifier:   3E:55:2D:F2:D9:BF:41:2B:00:05:5C:5A:48:FA:8E:72:E6:DA:37:69
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer:       /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial:       018F972927A30DF0334CB49BE432663D63C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number:          0ADA
Signing time:             Mon 20 May 2024 18:00:07 +0000
Manifest this update:     Mon 20 May 2024 18:00:07 +0000
Manifest next update:     Tue 21 May 2024 18:00:07 +0000
Files and hashes:         1: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: NCLXE97QbcHJN09RBbJAvnwEalzNpEKTzz4q7oG1QXg=)
                          2: pKu87mpUDF5CGv97gL3-9c44yS4.roa (hash: 9UhM4gGXCaC/4sSgryKXcW/EYySJOkz1lmpSHXoWAY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:27:a3:0d:f0:33:4c:b4:9b:e4:32:66:3d:63:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
        Validity
            Not Before: May 20 18:00:07 2024 GMT
            Not After : May 21 18:00:07 2024 GMT
        Subject: CN=3e552df2d9bf412b00055c5a48fa8e72e6da3769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:ee:7b:fb:04:3a:e8:d1:28:e0:63:c2:2e:
                    70:27:c3:52:61:76:dd:35:b9:22:1c:77:ba:0a:6b:
                    2f:40:ea:be:f0:f9:e8:19:3a:ea:70:4b:37:55:d8:
                    c1:f5:39:da:da:a3:a0:bd:cb:4b:6f:21:ca:f0:60:
                    2e:d0:39:5a:fc:70:47:2f:74:b6:eb:40:3a:db:b3:
                    8a:e0:52:0c:7c:7b:3a:f7:ac:cc:b0:b5:5d:88:d3:
                    0b:2d:1e:13:df:b6:02:d2:a7:77:21:cd:3f:65:f6:
                    e2:bb:96:89:64:de:36:2e:ed:14:16:6a:5b:b9:c2:
                    17:65:bd:ed:e0:79:30:41:6e:ce:5d:95:0a:0c:f3:
                    df:ab:32:bb:43:40:00:0f:59:c2:6a:f6:45:84:7f:
                    81:93:87:36:06:8c:ae:a4:fd:bd:b4:67:97:7b:06:
                    16:98:e7:f3:34:5f:70:46:80:a2:04:f8:56:84:f5:
                    90:27:15:ff:e1:07:70:8d:25:e0:17:fa:f4:5d:c2:
                    7c:a3:a6:54:3b:0d:6b:c7:4a:b2:75:26:44:a2:bb:
                    21:dc:d8:d9:c2:03:79:6e:44:88:1a:27:0b:58:13:
                    ef:c1:44:2a:4b:5d:c6:7f:27:ec:aa:3e:6c:5a:e4:
                    68:2d:3d:60:ef:ca:d1:81:7d:47:ce:1c:31:45:20:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:2D:F2:D9:BF:41:2B:00:05:5C:5A:48:FA:8E:72:E6:DA:37:69
            X509v3 Authority Key Identifier:
                keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:e3:69:13:b4:0c:c1:15:69:6b:94:36:c3:16:47:23:49:
         21:71:60:b9:5d:d5:a2:a4:60:e6:11:ae:13:c7:40:a1:de:34:
         e6:5d:60:b2:22:89:ce:ec:34:08:78:cb:d7:80:e2:19:95:c7:
         5b:2a:2a:0f:f4:d4:fb:8a:d5:eb:69:2c:2d:9f:ff:ea:96:10:
         35:29:36:22:dd:4d:e5:21:00:8d:dd:99:58:9e:a0:92:9b:9b:
         0b:5f:05:af:48:81:cd:64:64:11:3f:8c:44:9f:bc:7c:3f:e4:
         8e:a7:25:c9:d9:5e:54:f9:cc:4e:63:71:a7:1e:13:86:cf:34:
         b1:47:8e:78:5b:9a:a2:a3:e4:66:d3:0c:31:a7:f3:6e:31:ba:
         89:62:bb:e1:5a:bb:0d:6c:ec:61:b5:e0:3c:a6:6a:38:58:fe:
         57:5c:c1:eb:a1:96:60:91:67:42:a5:63:de:60:7e:a2:b4:4e:
         ab:d4:ce:5d:7c:27:e0:38:4f:63:be:74:94:a5:de:fc:4f:a7:
         85:2d:f5:d4:65:f5:92:45:47:25:ce:0b:87:f3:21:8f:c2:6e:
         c7:21:05:03:fe:d0:28:09:af:7c:29:c2:8e:5c:8d:11:f0:60:
         54:66:67:a4:63:59:9b:8b:cf:86:98:7b:04:ea:e5:be:e0:ec:
         ce:f1:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:56:48 2024 by rpki-client on console-fra.rpki-client.org