Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File:                     TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier:          G9rEm+qdL9RVi1FzdA/cVoSfWzHyGzgZtDnB1Fq1+OQ=
Subject key identifier:   05:AF:F8:15:CB:75:C0:46:1B:64:59:48:20:87:2C:29:84:DC:9B:30
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer:       /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial:       018F83D9C779F20D2EA12E37674F6D8A1332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number:          11D3
Signing time:             Fri 17 May 2024 00:00:38 +0000
Manifest this update:     Fri 17 May 2024 00:00:38 +0000
Manifest next update:     Sat 18 May 2024 00:00:38 +0000
Files and hashes:         1: 6zpmtJuJrYBDQpdmaXfAVO_HuUI.roa (hash: KvjkVvecYxvcegTmUoOXrMhne1yw2EkDNhk3nZFglKQ=)
                          2: 7OhUci0vQ1sjWT1-hzGZfa4FLZc.roa (hash: mHb5719HxzMAfthh7ftxqiifn0mtdakQx2d75gMP7PM=)
                          3: F6mz2Pph_Mzt4tGKV1Y9fX7FOqE.roa (hash: ziaKOu+/ufX+33kUVAqejvgQRVJvjFLxEOnR0IvMMEg=)
                          4: JOYNSYXKFtdaKQo8CgV-vTBkTpU.roa (hash: bBBFHAiApmDG6LbKlw1Kx7gJZdTKSfEfRMRpdgS/WY0=)
                          5: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: /rwAid/jhL/XnYgjcRMjdYI7WJ3PFPZ5OZ5kD3NIWfA=)
                          6: Zg176TuCln-UPNFBwvW11Nq1bDE.roa (hash: qLffc+KE1aJzb5E5iQeXS7PQvo/Rm5UKFPeJX7ELTek=)
                          7: rzccHbOqxto9iOt93MvKjJnBb_o.roa (hash: /yaX9Av1La24175KrJL4cS7wNvFER3eq6ceNSzfVh9E=)
                          8: s2DgewY5WOk_wtj4K_BeJM-Laec.roa (hash: hUAPohOW+TNHEKBVoAktx2D0YcB28ezPFzRmbGsqOGo=)
                          9: sxPzTvbj5jZjOMhHkKK6m78zI1U.roa (hash: 5+5h8KxqsgbjuYX3coiecmehkY/ZvZog8iRBZVtSwlU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:c7:79:f2:0d:2e:a1:2e:37:67:4f:6d:8a:13:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
        Validity
            Not Before: May 17 00:00:38 2024 GMT
            Not After : May 18 00:00:38 2024 GMT
        Subject: CN=05aff815cb75c0461b64594820872c2984dc9b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:db:b9:ee:a2:5f:6c:b8:60:03:0a:af:d5:
                    79:97:e7:dd:78:d3:05:86:97:a3:08:3e:f2:ff:32:
                    a1:7d:62:66:ec:ec:0e:c9:f8:2a:e2:5f:2a:64:0b:
                    17:8d:55:b8:c8:e2:ea:a1:08:4b:64:ac:03:16:8d:
                    ef:0c:15:d8:5a:0c:c7:00:d4:01:55:76:d7:fb:da:
                    95:56:61:63:08:8c:82:0c:67:5c:67:5d:2e:13:5a:
                    55:d0:ff:55:70:0c:80:cf:92:46:84:72:75:b5:19:
                    b6:05:d8:c5:cf:3b:98:be:68:ab:8c:44:7f:ba:20:
                    34:35:28:24:16:77:b3:87:c1:29:26:6e:75:23:60:
                    51:88:34:43:ae:78:a6:24:96:5f:7d:d6:97:18:68:
                    18:32:b1:25:03:4b:3d:23:28:b4:e3:ff:06:97:6b:
                    9a:20:95:c3:50:cb:e6:40:54:d7:2e:45:76:d3:6d:
                    39:29:5d:9c:53:9b:06:5c:7a:13:8c:06:63:d0:b3:
                    f8:24:cd:fb:54:b0:ff:d8:91:89:d3:73:5b:24:98:
                    e7:9d:8a:91:3f:49:b7:ab:80:27:01:48:45:bc:98:
                    33:ff:ea:af:ca:d7:ea:d3:86:2c:57:34:93:e5:8d:
                    05:8c:bf:6e:51:68:3e:36:de:cf:81:bb:d3:a8:59:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:F8:15:CB:75:C0:46:1B:64:59:48:20:87:2C:29:84:DC:9B:30
            X509v3 Authority Key Identifier:
                keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ec:92:db:be:6c:55:0e:88:90:7b:8f:8c:59:8f:38:78:b0:
         8f:76:0e:fc:9d:9f:2b:e2:7d:be:77:59:01:2e:1b:c3:10:09:
         9e:ca:de:83:81:c8:fb:f1:e1:64:a1:9e:7d:51:f8:39:b7:7e:
         bf:74:c8:c2:69:e0:97:1d:03:a5:07:2b:dc:51:ff:cb:14:2b:
         aa:c4:b3:64:56:36:87:e6:e1:1a:80:ce:69:04:b0:02:40:6d:
         3a:9c:f3:9a:f5:07:63:26:ec:54:50:94:fb:74:e0:4f:ce:3b:
         7f:83:89:e2:de:42:05:0f:f4:55:18:34:ba:9c:d2:32:97:1b:
         10:4b:04:b2:88:61:9b:af:05:83:1e:01:d5:bb:21:9e:3b:a7:
         63:a2:8e:46:9e:bb:cc:c9:33:22:a1:81:98:05:1f:3c:b0:8d:
         8f:d6:6e:1f:01:85:fb:dc:b3:79:1b:60:6d:2c:3b:92:31:96:
         ac:b7:aa:38:e5:c1:7d:a5:67:a9:23:72:bc:54:35:3b:29:fe:
         c6:1b:c4:74:e7:d3:34:75:8e:da:55:b7:ed:8a:a4:62:91:ce:
         6b:57:7e:14:cc:ef:20:23:f0:bb:59:83:df:c3:b9:b8:ed:7d:
         fa:b3:66:24:28:73:43:95:7c:26:22:e5:8e:1c:7e:65:33:4f:
         7c:8c:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:08:55 2024 by rpki-client on console-ams.rpki-client.org