Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File:                     Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier:          sQ6NTPOn2+7epmQ9vRZM/0/tpj5Cv8OiaLUm9GpNSmI=
Subject key identifier:   4A:B1:51:92:18:3D:2C:7B:CA:9F:93:81:DA:A3:F5:D5:79:37:71:65
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer:       /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial:       018F885B461F640870D4045CA516494D0177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number:          03B8
Signing time:             Fri 17 May 2024 21:00:34 +0000
Manifest this update:     Fri 17 May 2024 21:00:34 +0000
Manifest next update:     Sat 18 May 2024 21:00:34 +0000
Files and hashes:         1: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: Wq+LnhrZMbyIgC+NwNIlxaMhAWUlsc8gwWjkLr+DDMI=)
                          2: UBonDclkFB9X4Q5DFKAB1Y6ea_A.roa (hash: c3ZHfpLxEj6udnFTafrHpe4SL0UuNMpUbckgnqnVdDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:46:1f:64:08:70:d4:04:5c:a5:16:49:4d:01:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
        Validity
            Not Before: May 17 21:00:34 2024 GMT
            Not After : May 18 21:00:34 2024 GMT
        Subject: CN=4ab15192183d2c7bca9f9381daa3f5d579377165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:67:2d:fc:ea:04:b7:1b:35:7b:ac:e9:9e:
                    fa:19:a4:71:21:a5:41:de:94:f8:dc:b7:e7:67:61:
                    f8:d6:6d:d5:17:c5:69:5e:54:29:c9:9b:ae:c5:ff:
                    f5:cb:d2:e3:d1:87:ac:a6:df:c5:e3:f1:87:8e:93:
                    2f:a8:c3:f3:d2:70:18:79:45:aa:5d:d7:b4:5e:10:
                    be:2d:ea:25:66:17:17:a1:39:e5:0c:91:82:d5:e0:
                    5c:1a:1f:7c:db:ea:03:9f:56:9c:25:ea:31:11:03:
                    24:71:e8:02:73:d3:d9:b0:93:2a:7e:22:76:f3:ca:
                    8f:31:68:eb:d2:bc:5e:55:0b:43:df:5a:d5:a8:34:
                    98:91:1e:71:82:52:97:01:6b:39:0f:d8:2d:45:ba:
                    a6:2e:e0:06:df:eb:3b:9b:a7:f8:aa:8d:11:15:16:
                    74:ac:1d:97:39:d1:43:67:ed:45:cb:83:9d:76:8e:
                    72:cc:d7:1b:7c:c5:48:10:3f:7a:46:c5:d7:5b:e4:
                    11:2e:51:4e:9e:9a:91:d6:ef:e3:f5:c8:79:25:e9:
                    de:86:1a:6d:dc:8e:67:7d:53:56:54:f5:33:3b:7b:
                    57:a1:b6:96:ba:fb:f2:74:55:d9:12:76:26:4b:30:
                    ae:fa:ed:1a:c0:06:d5:e3:2e:a4:65:4e:cb:f1:dd:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B1:51:92:18:3D:2C:7B:CA:9F:93:81:DA:A3:F5:D5:79:37:71:65
            X509v3 Authority Key Identifier:
                keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:19:10:9d:f1:a8:3d:89:4d:a1:09:d5:e6:d0:09:a1:66:
         0b:c2:f2:98:29:50:e4:05:8a:29:4b:ac:de:5a:49:88:14:66:
         75:4f:9c:54:04:df:75:1a:28:4f:c7:b0:ed:46:cd:2c:b8:64:
         1d:2a:59:59:e8:b7:f4:69:e2:cd:f1:6f:e5:f4:14:3b:ea:15:
         b3:99:0d:f4:3f:b6:c7:a9:1b:29:c3:81:cf:6f:28:a0:73:37:
         dd:4e:dd:44:63:b9:3c:9d:69:dd:32:9f:30:c0:67:93:05:3e:
         9f:a3:d3:ff:d5:c5:ec:c7:23:b9:54:11:18:63:ae:5d:41:88:
         e9:c4:46:4c:b8:3c:fa:7a:e1:55:45:34:51:4a:5b:69:29:cf:
         d5:e6:59:89:82:48:95:19:55:6b:69:c6:27:47:85:75:ec:53:
         e4:b6:5e:ee:d0:76:e5:30:11:fc:e3:8a:b0:ff:8b:23:de:b2:
         90:8b:b0:2c:e1:cd:08:b5:ee:a6:17:34:98:37:18:d5:90:2d:
         48:a2:10:80:b3:a5:6e:f0:fc:36:ee:ac:fe:c6:78:39:30:6c:
         5d:ad:50:ab:13:11:5e:dc:c9:c5:98:f5:d6:bd:76:c9:49:db:
         f9:27:a3:81:d4:76:72:79:bd:ba:fb:a3:63:84:82:c3:62:40:
         1b:b4:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:05:13 2024 by rpki-client on console-ams.rpki-client.org