Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File:                     tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier:          UMivcWN154scJ1w6g193RDjWBa0oJ3fEz3P5ldrVwV4=
Subject key identifier:   4A:CB:FE:77:B0:3E:9C:1D:7E:73:F9:35:97:65:B2:AE:74:01:98:56
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer:       /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial:       018F8DEF91A450C7EF02A6B0500C039372D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number:          117B
Signing time:             Sat 18 May 2024 23:00:38 +0000
Manifest this update:     Sat 18 May 2024 23:00:38 +0000
Manifest next update:     Sun 19 May 2024 23:00:38 +0000
Files and hashes:         1: PiWCCwpJm843CVMMY_7sg4sOY0E.roa (hash: 1Z25AJ0Qx/d2NNdiWVKGk7s9gYQPGsSV8ZCpprABtsk=)
                          2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: B4bvhVw3BLE2Lshls2sBVo7uTSlvOyis5msHP1hT98c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:91:a4:50:c7:ef:02:a6:b0:50:0c:03:93:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
        Validity
            Not Before: May 18 23:00:38 2024 GMT
            Not After : May 19 23:00:38 2024 GMT
        Subject: CN=4acbfe77b03e9c1d7e73f9359765b2ae74019856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:db:72:f9:05:ee:5d:4e:3f:08:7e:c9:a7:
                    6e:e4:61:f7:18:c8:0f:fb:cc:5f:fd:57:95:f3:5b:
                    00:a9:00:58:7a:5d:1b:6d:df:a0:ab:88:d4:cf:af:
                    85:f7:de:4d:78:5e:3d:43:56:9e:60:5e:19:55:58:
                    16:c6:f1:c2:ff:9b:e7:56:19:39:69:44:07:7e:b2:
                    35:c2:11:e8:ca:27:c8:e7:5a:32:83:74:6a:d2:40:
                    f5:1c:5e:a2:30:fc:aa:1c:21:5a:cc:ae:a9:87:32:
                    66:4d:b7:ff:d1:0e:cc:af:e4:a5:33:49:a2:78:9d:
                    88:9f:5d:9b:63:8a:c2:f8:94:76:7c:7d:b7:30:01:
                    a3:50:84:1e:66:50:74:40:23:66:89:e0:ab:42:66:
                    50:17:1f:c8:b2:4f:08:f1:81:5b:99:5e:32:be:94:
                    cc:93:45:91:ad:40:af:2b:8c:74:e8:cc:af:44:a9:
                    ec:4a:65:5f:23:f7:31:e0:f0:16:98:9b:08:9f:ad:
                    fe:c6:12:bf:35:8e:6c:75:b5:3d:03:20:6b:0c:0c:
                    c7:6f:f7:99:0f:ad:b4:6d:53:d2:07:a3:1d:89:1a:
                    42:4a:29:15:99:c6:ed:c0:0e:65:9e:78:23:1b:d3:
                    62:49:be:b7:3f:67:79:13:df:42:66:f4:f6:f9:97:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:FE:77:B0:3E:9C:1D:7E:73:F9:35:97:65:B2:AE:74:01:98:56
            X509v3 Authority Key Identifier:
                keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:37:03:19:67:90:54:90:fe:4e:ec:a4:33:be:bc:da:e8:ba:
         e0:fc:2b:46:02:3d:24:ee:1c:68:e7:eb:45:07:42:07:ec:d2:
         52:0c:a8:f6:ea:44:38:ae:24:cf:47:af:6a:b9:39:24:dc:81:
         b2:84:4a:c1:e8:c5:ed:07:a7:be:ec:bf:92:f7:5c:7d:f1:bd:
         f7:09:8e:13:ca:5c:f0:5e:71:5e:31:ac:1e:fa:85:0a:f1:c4:
         66:1a:d5:94:ce:df:9a:59:67:0f:b1:05:2d:13:a3:98:77:e6:
         93:12:b5:9f:6e:28:27:bc:ac:0a:7d:99:3c:0e:e7:25:3d:7c:
         8e:7f:f8:97:eb:45:f2:1b:1e:d0:54:e9:a3:2e:11:45:cc:59:
         1c:ef:4e:31:df:d8:9a:06:a1:40:c3:fc:a4:a8:58:60:aa:28:
         9b:0c:ca:09:57:e6:89:49:da:85:61:df:d2:76:77:99:fc:5b:
         fa:19:9e:41:21:3f:18:b2:6e:ee:fd:b6:a8:82:fc:63:c6:d6:
         b2:15:9c:df:22:0c:c6:47:0f:af:19:3d:c7:9d:31:88:46:48:
         33:e3:67:65:0d:84:0c:b2:47:1e:62:08:ca:0d:73:d2:b3:89:
         b4:3b:2f:59:03:0d:57:96:b3:ab:db:25:b0:9d:65:6c:48:6c:
         0d:3f:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:19:51 2024 by rpki-client on console-fra.rpki-client.org