Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File:                     tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier:          jTaSEqsDJouuAMguJO8+Vc0eWNaVij10IWM/LwtvoTU=
Subject key identifier:   A6:B3:93:0D:44:7E:91:01:C9:7A:39:58:41:F4:64:D4:83:DC:83:B6
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer:       /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial:       019051A1489439EB8A9A9462FC303BB2498D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number:          053A
Signing time:             Tue 25 Jun 2024 23:00:42 +0000
Manifest this update:     Tue 25 Jun 2024 23:00:42 +0000
Manifest next update:     Wed 26 Jun 2024 23:00:42 +0000
Files and hashes:         1: Abghviajyi1YywWTN3g6p8cSwm4.roa (hash: fvzMjkgA/Ekbi7aJfnxsRCNXHp+ky9wQs5wyczeG+gg=)
                          2: YI0Zob-2lWY9ulUqxy-D1HjBST4.roa (hash: IcoBeMr/TtXwAimt9iRtVkJBOjdvdhaObkeUvM6HcJE=)
                          3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: 3Z+2eo8NuoSz0na33f5KDFRw+QfJGdfDWJ1dKqqrPoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:a1:48:94:39:eb:8a:9a:94:62:fc:30:3b:b2:49:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
        Validity
            Not Before: Jun 25 23:00:42 2024 GMT
            Not After : Jun 26 23:00:42 2024 GMT
        Subject: CN=a6b3930d447e9101c97a395841f464d483dc83b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:a6:d9:27:15:d3:e9:0b:4b:db:51:aa:f5:
                    ea:3a:14:43:fd:d4:2f:33:7d:e8:9b:d4:4b:bf:67:
                    81:14:6c:33:ac:ab:bc:2d:ca:fb:09:0b:32:f2:14:
                    15:05:9b:7b:38:d4:c0:08:50:96:5a:e2:b3:7f:13:
                    a6:18:09:4c:bd:0d:19:3c:3b:06:2e:b2:92:04:51:
                    37:9c:00:20:7d:75:0f:c6:44:1d:76:30:2b:29:a1:
                    cf:8d:49:b8:28:52:2c:6f:ca:ad:38:10:fd:09:27:
                    3c:22:51:24:bf:ee:63:06:e3:36:11:b4:5b:bb:4b:
                    a5:5a:cc:50:e1:59:d8:a5:72:16:c4:de:ed:10:38:
                    b1:c3:46:24:db:43:36:02:c4:f4:ec:d2:d5:b3:62:
                    33:ed:d6:ee:3e:f3:76:6f:ed:75:3d:bc:28:1b:da:
                    c4:6a:91:8a:9a:80:d6:e6:08:b6:f3:61:81:26:15:
                    3a:01:87:91:6b:3e:52:dc:a5:bd:0f:08:1d:f5:a6:
                    4c:ef:57:3a:87:a2:dd:a8:ff:e4:8a:19:8e:90:63:
                    7b:bd:01:06:48:2b:f9:18:12:c4:34:4f:a9:94:25:
                    89:f9:e5:8c:18:a6:b6:2d:db:83:6c:d2:19:58:c3:
                    88:63:e4:6c:cf:33:65:2a:1d:65:ff:8e:63:a0:2b:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B3:93:0D:44:7E:91:01:C9:7A:39:58:41:F4:64:D4:83:DC:83:B6
            X509v3 Authority Key Identifier:
                keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:9c:7c:5d:00:51:85:26:44:56:9f:27:50:8b:2f:df:d0:
         67:06:4f:31:7f:0d:b8:b7:9b:01:54:15:ba:d9:51:62:8c:41:
         5f:a0:a4:95:43:c4:0d:0a:4f:07:82:c9:36:d1:6e:ce:31:b5:
         e4:35:0f:61:84:ec:f9:fb:10:cd:c5:ec:11:fc:9b:15:ad:f6:
         d2:ee:ca:06:89:04:b2:f0:1c:e8:de:ca:8a:93:66:e2:cc:b2:
         a3:90:1b:d6:0b:65:52:9b:80:f3:cd:00:ce:92:22:e8:75:3b:
         51:98:5b:61:b0:70:18:46:b9:fc:dc:0c:cd:5f:ed:46:f4:a1:
         23:dd:42:b9:f0:31:fb:9e:50:e3:a4:4f:26:b9:0a:5e:cd:83:
         1f:ef:bf:8f:33:0c:f1:95:87:76:7a:87:d5:2b:18:0b:97:74:
         fb:43:d2:7c:7d:7f:70:5a:4a:d8:83:5b:d7:89:f5:cc:61:bb:
         5f:e3:02:99:c1:b2:55:57:9a:b7:db:a8:76:5e:1d:b3:ec:13:
         69:ad:ea:c2:3b:48:13:7d:cb:3f:72:0e:79:4a:8e:63:9d:fc:
         de:e6:b7:fa:ab:8e:c9:99:1f:2e:fa:3a:93:e7:69:ba:9a:90:
         ce:ed:47:ba:83:dd:0a:96:90:92:30:c9:4c:0b:b2:82:0e:7a:
         b5:56:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:44:10 2024 by rpki-client on console-ams.rpki-client.org