Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File:                     TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier:          vkDJz5lsKUb78hoXbXEetk/3SsTbBQTFG+azEiXsTAI=
Subject key identifier:   83:EC:FB:9D:B7:40:6B:9F:A1:35:DC:A3:9C:E5:B8:E2:C9:94:15:63
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer:       /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial:       018F874A209177AB6AE70EC5A817D9C4EF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number:          03D7
Signing time:             Fri 17 May 2024 16:02:13 +0000
Manifest this update:     Fri 17 May 2024 16:02:13 +0000
Manifest next update:     Sat 18 May 2024 16:02:13 +0000
Files and hashes:         1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: pl6Sbfdi3UpsuPS/pGYwsM45BQVUgFIgg2Pv/V86dfo=)
                          2: xiZmI2GPHyiGE1-McdGAd0GdjWs.roa (hash: 3D7JHVDoiinq9SU0DLeMKDub7/buTFEKe4qwLLDgTFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:20:91:77:ab:6a:e7:0e:c5:a8:17:d9:c4:ef:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
        Validity
            Not Before: May 17 16:02:13 2024 GMT
            Not After : May 18 16:02:13 2024 GMT
        Subject: CN=83ecfb9db7406b9fa135dca39ce5b8e2c9941563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:c6:d2:fd:e8:9e:ac:60:07:fc:f8:85:7d:
                    00:68:1b:17:26:3e:c1:67:f4:c6:18:c5:91:6f:b7:
                    cd:d2:6e:05:d8:dc:b3:c7:bb:7a:c7:f8:89:8a:02:
                    27:fb:87:5e:13:5d:63:4d:38:55:e8:67:4f:2b:69:
                    1c:30:1b:9d:b8:af:48:a7:9a:b9:44:5e:6e:0c:ca:
                    6f:2a:e3:96:1c:36:f8:63:fa:51:c0:87:f6:bd:ad:
                    6d:11:f9:bb:a1:df:6d:a2:e1:a0:18:2c:06:41:e0:
                    2c:86:95:a5:ae:45:c0:5a:3e:71:4a:ec:87:62:0e:
                    0f:e6:de:f8:e3:b4:97:55:87:5e:02:75:91:5c:a6:
                    01:21:41:68:02:88:aa:cb:49:30:13:ed:91:7e:8a:
                    33:78:ae:cc:8e:f6:af:8d:21:7c:3c:31:53:63:6e:
                    49:1c:c0:d6:6a:dd:c0:85:d8:7c:63:81:cd:97:88:
                    f6:f0:61:5c:ae:65:43:d1:b8:f5:f7:3a:4e:07:87:
                    68:4e:b8:58:29:68:04:bb:a8:06:64:4d:19:6e:5f:
                    6f:42:46:0f:56:16:44:eb:3a:ba:17:c1:a6:53:65:
                    15:ca:94:bb:20:22:05:74:9b:20:94:13:a7:a1:49:
                    c9:8b:19:fc:58:42:ae:3f:fb:37:b6:e2:82:1d:0c:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:FB:9D:B7:40:6B:9F:A1:35:DC:A3:9C:E5:B8:E2:C9:94:15:63
            X509v3 Authority Key Identifier:
                keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:52:1f:c4:10:57:32:ab:ed:b7:43:77:97:39:8f:d4:d9:28:
         e7:6a:83:04:8a:88:43:44:08:8a:36:bc:ed:db:2e:08:9c:71:
         ba:62:27:65:e2:fc:44:33:75:c9:f9:7a:b2:27:0c:52:d9:c4:
         63:58:ee:59:08:e6:c7:5e:bc:75:03:04:e4:97:e9:0a:4f:8c:
         d0:4b:d3:22:72:2e:f4:6a:26:73:3f:3b:85:98:a3:13:da:e5:
         47:45:47:df:29:01:1e:7f:ae:7a:76:3e:96:27:83:dd:15:09:
         32:a9:24:dc:f8:91:2d:88:41:d0:b2:45:8d:f0:ac:6e:cf:f5:
         04:10:d7:d2:99:5b:78:a6:06:c8:3a:f6:0e:4c:1f:c5:ae:58:
         d9:21:cb:62:96:a0:8c:20:d5:c6:f3:ab:a0:27:8f:48:16:c8:
         b1:d4:f9:33:26:16:7d:0b:e7:69:62:40:db:40:d9:ba:8b:13:
         ea:5d:a2:91:f8:af:c9:ea:fb:c7:6d:d7:55:d5:2c:df:e2:46:
         0c:6c:e5:92:a9:c2:89:d4:e1:7d:5e:a9:a3:56:e8:05:28:77:
         52:2f:54:72:01:64:a6:41:b3:11:e7:a7:ed:f0:8a:6e:ed:f9:
         ff:6c:1d:cf:64:66:5b:2c:91:0d:03:db:6f:01:b4:c3:c4:2c:
         08:32:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:56:46 2024 by rpki-client on console-ams.rpki-client.org