Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          UErlBt4b9XcI/ikABqln+ubjb7wvtGctbCnWcj1rD+o=
Subject key identifier:   9F:61:FF:40:A7:EA:40:72:47:D5:BF:8D:DF:AB:89:03:35:99:CA:0A
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       018F874B1CC7D8F9B593F762AE8D439CEBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          10BA
Signing time:             Fri 17 May 2024 16:03:17 +0000
Manifest this update:     Fri 17 May 2024 16:03:17 +0000
Manifest next update:     Sat 18 May 2024 16:03:17 +0000
Files and hashes:         1: RyNytlOTGqEMGDNq2XaREyHPm6M.roa (hash: 0DlLaS/LwTUQ3YBvbMHHWrao1EUfhYjKlq1tWuPWywE=)
                          2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: aPUj7sxdZHAzpiP65+mEMgm44uchH7Bf2gkmw9+foQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1c:c7:d8:f9:b5:93:f7:62:ae:8d:43:9c:eb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: May 17 16:03:17 2024 GMT
            Not After : May 18 16:03:17 2024 GMT
        Subject: CN=9f61ff40a7ea407247d5bf8ddfab89033599ca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:d3:6a:89:d0:35:47:9f:f9:d9:bf:3c:c4:
                    1d:4f:d6:a6:11:84:5b:c3:7e:c2:48:bc:c1:60:0b:
                    28:c7:0a:bd:31:6f:c3:2f:12:02:aa:41:e7:15:6c:
                    21:5c:52:83:06:56:cb:18:62:ca:4d:19:d8:b7:20:
                    3c:44:c7:65:0b:47:1f:b1:7e:6f:3d:e6:89:ed:4e:
                    fd:c9:72:26:52:5b:1e:1b:c5:a4:45:67:5a:e9:35:
                    70:da:9e:6d:de:c2:ff:5e:2f:9a:28:39:d9:26:10:
                    c7:a9:56:d8:39:ff:48:25:ed:83:fd:f5:05:97:38:
                    29:b5:d1:12:ef:05:e2:7d:f9:23:74:cb:92:c0:d4:
                    c4:d5:06:4c:99:9b:84:11:17:79:0b:30:21:05:22:
                    c5:44:09:3e:c2:85:12:2c:b7:b0:64:d5:01:f3:2b:
                    31:83:05:57:56:cb:b7:34:8d:5c:ef:d6:98:aa:f2:
                    62:ce:f6:fd:20:70:13:df:1c:90:a9:e2:1f:32:a1:
                    c2:44:14:4d:5b:b9:0d:c5:e2:13:e2:54:37:b1:7a:
                    a3:4b:cf:ad:db:f3:90:27:ac:93:08:c5:4e:7b:2a:
                    e9:bd:bc:f0:b7:f7:3f:48:c7:df:62:cb:2b:80:ec:
                    90:54:fb:fc:5b:a0:70:b3:a3:b1:fd:4b:82:f5:e9:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:FF:40:A7:EA:40:72:47:D5:BF:8D:DF:AB:89:03:35:99:CA:0A
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:40:39:8d:95:89:9f:21:9a:34:89:75:7c:7e:ab:5c:90:e1:
         4b:14:1d:36:ca:1f:d8:8b:10:49:fb:e0:0d:24:df:b5:dd:23:
         fe:06:d2:cc:cc:f2:86:d0:54:6b:27:98:99:bf:85:3a:d8:59:
         11:7c:11:bf:a0:88:8c:f0:5b:b4:3b:0f:95:97:b2:45:dd:f6:
         2f:d0:93:80:6f:d9:0f:54:94:0d:67:5c:1f:51:b5:c1:12:54:
         35:ab:3a:2a:20:32:7f:5b:59:47:a0:63:d9:8f:b6:13:b8:b0:
         dd:c0:31:5e:fe:c4:62:25:d1:75:76:bd:bb:9d:74:85:6b:75:
         d7:bf:04:54:74:a5:1f:cc:ae:00:96:8a:9d:1d:c8:33:14:8d:
         75:49:10:63:b2:1f:cd:af:43:10:0c:95:aa:ed:28:7a:cb:b1:
         4d:3d:2f:a6:25:a5:c9:31:0b:08:62:a3:e5:0c:c8:f9:0b:f3:
         e1:ce:57:2b:2f:d4:1c:e2:d6:d4:bb:b1:70:89:51:b1:24:9e:
         0e:a7:70:ae:25:67:1e:6e:4c:54:1f:37:0f:ea:8c:30:08:87:
         ee:78:b0:67:e0:fe:9a:41:49:b2:1e:d7:2b:2f:5a:cb:42:46:
         46:27:99:5f:7f:48:e7:6a:56:3a:b4:32:00:19:10:ca:53:b0:
         18:0c:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:27:18 2024 by rpki-client on console-fra.rpki-client.org