Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File:                     tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier:          hvcKdtmthtpWfXMMEMOGUsnpg38KNU3bPj7rinmc+uY=
Subject key identifier:   21:88:60:16:AB:D7:F6:69:19:F7:C9:EE:54:99:21:CE:53:41:32:31
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer:       /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial:       018F87489CF1AD240B27C425528FEE3FC695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number:          0BB2
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: W6foJsnC473hfwrjv_tdObmCoUk.roa (hash: Z05qrnVQurmoutVUnPFTS3RN/R/55ASrPPNjucQb+Gg=)
                          2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: wsOEzSxP9OBrqHKjNRHJB6luebjnR5P4xHlxn0CNPqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9c:f1:ad:24:0b:27:c4:25:52:8f:ee:3f:c6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=21886016abd7f66919f7c9ee549921ce53413231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:d1:f8:6e:36:af:7b:11:05:77:32:49:e7:
                    e1:17:b6:70:a5:51:fd:89:7b:ea:f1:77:d8:b0:af:
                    b0:37:3c:53:a6:3b:46:12:a8:9b:e7:62:d0:a4:1c:
                    16:0f:56:b8:0b:17:7d:25:f2:e9:75:41:28:a8:19:
                    de:e1:f6:9a:7d:f3:2d:d8:40:e6:e1:21:21:cd:56:
                    69:c5:ac:5b:da:65:b0:3d:9c:52:4d:3e:78:35:18:
                    eb:05:c7:6b:c5:2b:81:45:0f:92:f3:34:b7:06:5f:
                    73:78:14:3a:b6:05:58:24:bd:fa:bb:a4:0b:9a:32:
                    21:eb:7e:46:26:3c:ac:28:70:cd:be:4a:f0:19:ac:
                    bd:d8:2a:08:bd:76:3c:79:06:a1:fc:29:31:68:bd:
                    76:71:23:7c:14:88:19:f0:d6:04:ba:83:59:f1:3c:
                    28:30:c2:95:e2:5a:54:d4:4f:2e:bc:1a:30:7f:fc:
                    eb:49:f1:96:8d:b2:d3:cb:99:c9:f5:fa:68:38:39:
                    bf:19:2e:af:13:46:98:b7:a8:88:61:13:68:a0:3c:
                    93:a7:a8:05:7e:93:c2:68:53:86:07:0f:06:21:82:
                    de:14:d1:24:6e:b5:e5:d5:00:a7:86:17:a7:07:1e:
                    1a:c9:77:c4:7f:a0:02:33:92:af:9f:e9:b2:25:51:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:88:60:16:AB:D7:F6:69:19:F7:C9:EE:54:99:21:CE:53:41:32:31
            X509v3 Authority Key Identifier:
                keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:90:13:c7:0e:c9:2b:28:78:4a:3f:cd:be:f2:cd:2d:66:
         76:de:d3:30:f2:ca:6a:79:e2:c8:cf:f7:e6:07:ef:1a:b8:86:
         86:4c:46:e8:5c:6b:a4:8e:e8:33:5b:06:50:68:b3:7d:09:1a:
         92:2e:da:13:d8:93:87:cc:21:3c:bf:0b:d9:9e:3a:7c:bc:42:
         cb:e1:bc:06:16:78:9e:d4:21:a8:bc:60:2c:fe:05:44:a7:f1:
         90:60:48:30:1a:c7:98:5f:6a:ee:e3:02:dd:36:38:e9:0e:a5:
         51:63:6a:54:9a:5b:d7:9c:9a:e5:27:45:f4:e5:6f:c0:e8:92:
         5c:b2:8f:f6:54:d7:06:6c:3a:60:32:1c:d8:54:d4:4b:ce:f4:
         4a:bd:0b:37:29:60:63:a0:47:d9:bb:0f:a6:e0:4e:93:81:c3:
         cb:84:e3:71:82:e6:9f:84:f1:04:15:4f:26:e8:4a:e6:10:fa:
         0d:ce:aa:d2:1c:86:76:a4:3e:c1:86:18:23:10:ed:17:17:70:
         d0:25:30:20:9b:bd:8c:87:09:b4:0e:65:4e:9f:67:04:2a:5a:
         67:5e:14:97:39:84:db:4d:bc:16:0d:8a:b7:97:02:b5:39:22:
         d4:30:d7:81:1f:38:0e:1d:b4:8d:1f:af:d2:60:ac:69:aa:3d:
         b1:65:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:55:49 2024 by rpki-client on console-fra.rpki-client.org