Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File:                     TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier:          5swjRRs/NKud3a1e4i614uzRMTk7USoCSG84XpIwBqg=
Subject key identifier:   B2:03:3D:AE:00:6C:1E:21:D7:C5:01:72:F6:62:D0:81:6F:E6:CA:CA
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer:       /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial:       018F87B6CAC6FE56D6FCF05AF698912D24C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: AHYX5wagOEiS2YEOd6_708k8Jo4.roa (hash: PKntJvuqgZ9fHiVaSyDVeLkET053zCJU7dkTIYLdcr0=)
                          2: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: NFjC7alwtUXShh4gBFjhRCujfrbRYAyCVfZ2EV6o3CY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ca:c6:fe:56:d6:fc:f0:5a:f6:98:91:2d:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=b2033dae006c1e21d7c50172f662d0816fe6caca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:b2:bd:b8:59:f0:e0:0b:01:b7:b8:de:86:
                    5e:14:a0:bd:60:3d:45:cf:db:2a:f4:b7:59:38:12:
                    d8:76:39:af:ed:0c:ff:1c:58:dc:f2:62:ef:de:86:
                    02:99:15:2d:75:68:15:9f:8d:d1:51:8f:84:93:e0:
                    30:5e:ad:41:be:a3:e4:cf:f0:92:b6:b3:37:c8:b9:
                    46:80:d2:26:bb:74:04:2a:bf:bc:24:5a:1f:9d:0b:
                    8f:31:dc:e3:66:d7:37:30:2e:16:a9:24:fc:64:4a:
                    b6:1d:77:fa:b4:e0:4d:b7:19:2c:70:df:60:8b:c9:
                    44:85:3b:72:e7:f2:b7:cd:3a:7f:a6:ae:20:ea:d9:
                    68:26:c6:4c:60:65:d7:fc:00:d8:64:6f:24:07:88:
                    dd:d5:ae:84:26:53:77:35:f8:31:37:e5:27:bc:e8:
                    9c:48:f7:ec:fa:93:0b:5f:8c:3a:d4:9f:d0:ff:b6:
                    30:2d:8a:33:8a:df:d1:87:03:5e:4d:6b:2a:7d:cd:
                    c2:f7:49:72:04:e8:99:17:40:d5:24:16:19:71:3d:
                    9f:e7:c6:1d:bb:c8:3d:8f:ea:67:63:d1:45:cb:c7:
                    6d:43:8c:d2:40:9b:21:ad:36:c0:64:51:d6:b0:b5:
                    ee:cc:ee:45:a7:ae:97:9b:33:85:08:39:55:bf:d3:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:03:3D:AE:00:6C:1E:21:D7:C5:01:72:F6:62:D0:81:6F:E6:CA:CA
            X509v3 Authority Key Identifier:
                keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:40:d0:aa:ee:6d:ab:fa:89:56:74:9b:84:d9:f5:d5:21:
         91:a0:88:62:03:21:f6:76:91:0b:f4:da:3d:dc:72:f5:b3:bc:
         5f:97:06:44:33:28:ce:06:a0:05:f5:01:5d:62:b5:d3:fc:a9:
         77:41:d6:5d:de:df:37:ac:5e:65:95:d3:a1:86:e4:41:ba:29:
         97:6a:22:5e:a1:04:db:db:be:b8:cc:ab:92:ad:1d:ac:01:95:
         7e:b6:1f:e7:f7:49:5e:36:0e:dd:d1:71:11:b1:58:f8:bd:62:
         d0:9c:ed:d7:5d:ff:2d:ce:cd:42:17:92:49:98:ef:6b:cf:a9:
         85:f3:95:d7:4c:b3:78:89:06:ae:bd:38:b3:d1:b1:22:fd:30:
         0d:83:0a:b1:e2:8d:9f:54:fb:ac:8f:fd:dc:33:82:68:eb:4b:
         da:89:1f:54:1f:18:61:19:10:aa:6e:98:29:b9:a9:54:25:3e:
         82:08:35:e8:4c:dd:f0:73:66:c3:5c:f9:e8:0f:69:ae:c9:a1:
         44:a0:76:eb:f3:05:b3:a0:f2:b0:19:a0:6e:62:d4:7c:d5:ab:
         a6:9f:50:af:6f:83:4e:7d:02:08:09:e8:0d:c1:5e:89:29:91:
         4c:ba:27:76:31:8c:44:f8:71:c9:15:9b:aa:1b:d5:f6:fd:75:
         9b:a4:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:41 2024 by rpki-client on console-ams.rpki-client.org