Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File:                     tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier:          GjNQzwQs7qNmV39EkeEQF/EfoHdb88talCLGXX2bbH0=
Subject key identifier:   05:70:36:F7:50:2D:68:5D:FA:B5:5F:86:47:C0:B1:C1:C4:8C:4E:4D
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer:       /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial:       018F87B6CF3B23E9CFB073001FF36F9FD642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number:          072A
Signing time:             Fri 17 May 2024 18:00:55 +0000
Manifest this update:     Fri 17 May 2024 18:00:55 +0000
Manifest next update:     Sat 18 May 2024 18:00:55 +0000
Files and hashes:         1: MtyGavINQVvTOyUDZFzSLtiNPYU.roa (hash: OCJlwGcWM4D2i1hvrwXOFRE4ytBbGIPbeH0JlJm3tYA=)
                          2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: 3eAs8yNjjT5lG/LbD8XCjR5NgNtSLeaiv7kLmiYud6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cf:3b:23:e9:cf:b0:73:00:1f:f3:6f:9f:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
        Validity
            Not Before: May 17 18:00:55 2024 GMT
            Not After : May 18 18:00:55 2024 GMT
        Subject: CN=057036f7502d685dfab55f8647c0b1c1c48c4e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fa:0f:d5:df:d9:60:88:78:a8:18:bd:a5:64:
                    08:5d:fb:57:9b:e4:4f:7b:63:7c:7b:fd:d5:05:37:
                    83:0b:19:68:fb:c8:51:03:0d:81:7e:df:24:3e:bf:
                    0e:5c:0f:c4:7b:78:02:e6:51:1f:8f:4c:55:cf:6a:
                    cd:ab:32:3e:6a:07:b3:75:55:b3:49:43:78:1f:b1:
                    8b:80:88:74:9c:ea:9d:06:91:71:13:90:69:d7:d1:
                    df:99:16:ff:a4:8f:5a:bb:94:8b:da:c0:51:a3:90:
                    6c:0e:ea:f4:9d:58:f7:4f:e7:d4:b9:52:1e:9a:c5:
                    7e:d2:5c:c2:56:9c:90:a1:77:b7:55:d4:ae:c2:63:
                    19:62:27:91:2a:12:b1:28:a4:d7:f4:74:57:0c:f1:
                    99:93:8d:94:66:97:54:c1:11:4a:77:9a:f6:91:64:
                    49:d4:27:19:cc:af:8c:58:6e:41:65:c8:64:cd:89:
                    70:27:ed:61:f4:d9:3e:a7:be:f9:0f:92:3e:e7:6c:
                    15:3b:7b:62:29:ff:69:3f:63:92:08:44:e9:6a:49:
                    9d:69:40:41:8f:7d:64:70:ef:03:72:de:e7:fa:ef:
                    b0:97:da:4f:c9:69:21:35:d1:e1:bc:2d:27:6f:97:
                    3e:9d:9a:74:57:45:42:18:4c:6d:ec:21:2b:84:2f:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:70:36:F7:50:2D:68:5D:FA:B5:5F:86:47:C0:B1:C1:C4:8C:4E:4D
            X509v3 Authority Key Identifier:
                keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:90:72:7a:55:f8:67:a8:e9:d0:1a:9f:c0:ec:62:c7:73:
         ba:ef:65:64:fa:0c:6c:51:50:9c:85:b4:a6:9b:9e:9f:28:4c:
         e8:4a:28:c0:4c:e7:63:32:4b:59:00:18:8b:aa:cb:f5:a5:88:
         96:25:d4:aa:87:50:44:e1:9d:4c:63:b5:17:d3:ea:c3:4f:4e:
         61:1a:a6:08:4b:bf:7f:e0:4e:f4:a4:c5:90:07:dd:74:a9:05:
         f7:a9:86:7a:d0:b9:31:e6:1f:5f:5e:a5:84:29:17:8a:e2:67:
         81:bf:b2:52:b2:d0:f9:2f:c6:18:e7:87:0c:48:3e:13:b5:b3:
         b2:bc:bf:9c:e1:dd:fe:e3:e0:35:c5:93:c9:35:5a:33:16:b1:
         d6:62:37:5d:f1:12:b6:22:1a:0e:a8:0e:49:7c:d0:8a:ff:17:
         b9:42:12:8e:1e:85:52:3d:2a:5a:57:2c:ae:c3:bf:21:40:b3:
         6c:d6:cc:25:de:b6:7b:1d:fc:1e:d2:cb:49:da:d0:bb:d5:8e:
         c6:cc:55:f9:93:87:b4:0d:34:15:d6:11:cd:9b:40:5a:37:83:
         a7:d2:25:ba:4c:14:ac:30:c6:22:a7:bb:9a:e0:a6:60:34:40:
         39:4f:06:dc:d6:21:1b:be:95:aa:3e:69:39:ef:af:70:81:ac:
         46:57:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:05 2024 by rpki-client on console-ams.rpki-client.org