Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File:                     rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier:          NjsJnvDZWuFt5kzZtbdOLraNqKu3GuQq4N/1s3BTKu4=
Subject key identifier:   90:A9:08:C5:85:73:9D:B8:F0:B8:87:0E:0A:8D:46:08:73:27:32:8E
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer:       /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial:       018F86A3B4914AD3CC02F94B60AC36CB747F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 13:00:26 +0000
Manifest this update:     Fri 17 May 2024 13:00:26 +0000
Manifest next update:     Sat 18 May 2024 13:00:26 +0000
Files and hashes:         1: 7eVWLI0hP-_4atu02u2qiEpApuA.roa (hash: 5B7SoV1YODYJqUQYYhII4g5xFIT0RMR71kDKBASdU3Y=)
                          2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: XqbS5828p5AsgbY9MRsBUXZAducXv0wKHYcPvQc7AW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:b4:91:4a:d3:cc:02:f9:4b:60:ac:36:cb:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
        Validity
            Not Before: May 17 13:00:26 2024 GMT
            Not After : May 18 13:00:26 2024 GMT
        Subject: CN=90a908c585739db8f0b8870e0a8d46087327328e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:87:1e:d0:db:fb:6d:9d:af:80:43:7c:ac:
                    05:c2:32:1f:3c:aa:65:05:28:c4:83:d3:c2:d9:4e:
                    0f:75:e0:88:e9:38:e0:c3:06:3f:6f:0e:f7:37:2d:
                    30:b7:63:8c:bc:f8:16:48:18:13:88:1c:7e:8f:0b:
                    74:bb:84:2c:1a:c7:48:e0:f1:e9:aa:cb:cc:5f:38:
                    7d:be:f0:9b:43:b2:e4:29:19:fb:21:4d:36:77:e4:
                    27:d3:86:2b:c8:31:21:cc:c0:79:25:78:4a:44:a2:
                    68:e5:cb:87:3d:8d:a6:ed:2a:cf:53:89:d2:3d:6b:
                    6d:02:85:c0:4c:3f:a5:a9:ba:d6:fe:72:dd:81:24:
                    76:c9:52:3b:3c:b8:26:0e:90:8b:0b:8f:7a:00:64:
                    c6:6a:d4:59:45:d7:7a:76:df:4f:6f:d1:e2:8f:63:
                    fd:b0:7c:9e:75:ca:99:e9:d2:37:47:39:be:4c:f1:
                    06:4c:6f:ec:d0:6b:9c:3b:03:b0:7d:ed:cf:ef:d4:
                    cd:d8:62:af:3f:b1:11:a4:67:24:91:e4:44:66:42:
                    d8:73:d8:8c:6b:4c:22:ee:d3:9e:56:29:ca:af:f5:
                    c0:3b:ed:63:ff:f4:dd:d6:75:76:45:2f:b8:e9:ba:
                    be:1d:01:ff:a4:cb:6e:29:d5:da:f7:63:23:31:c4:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A9:08:C5:85:73:9D:B8:F0:B8:87:0E:0A:8D:46:08:73:27:32:8E
            X509v3 Authority Key Identifier:
                keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:0a:5d:cd:21:a2:39:16:32:a2:81:98:87:6a:99:c4:a2:
         03:cf:50:fa:5a:67:d5:ad:f6:cb:a3:41:0a:1e:5e:8b:74:e9:
         fc:f9:bc:d1:99:3c:2e:b6:bb:c4:29:de:81:53:de:6d:67:a1:
         bb:f4:18:78:26:b5:bb:ac:ee:66:99:cb:4d:87:c1:a4:db:eb:
         23:84:5d:cf:62:c6:60:40:07:0d:78:6c:1d:6b:88:b4:ad:d8:
         c9:84:cf:40:5c:b7:da:75:58:f9:f8:59:18:55:34:49:cf:0d:
         e0:c9:7e:5f:f6:cd:73:4f:7d:98:b9:74:19:02:e9:9e:1b:28:
         55:f5:15:b7:e4:04:20:30:93:6e:ba:0e:47:25:74:d6:33:61:
         d3:63:b3:3a:19:61:de:98:13:7b:b0:c5:9e:e3:7b:4e:9d:41:
         ce:bb:41:4e:62:fe:1a:a3:a1:c3:7d:56:2f:15:72:e7:58:a7:
         2b:58:e9:27:2d:ce:67:b7:15:0f:9f:ab:f7:a5:79:a5:5e:ce:
         3f:9c:90:4b:91:90:cc:08:c1:48:69:35:5c:98:7f:fe:ea:05:
         cb:13:ed:3d:7e:51:6a:b5:90:a3:12:34:20:21:7b:a4:32:32:
         80:a3:1a:d6:21:e4:11:cd:39:3d:63:1f:95:36:14:f4:bd:39:
         7a:15:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:17 2024 by rpki-client on console-ams.rpki-client.org