Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File:                     TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier:          jsnR4jWiDBOVThQvvja/B53wWeQjTxP+Fl0hReRtiNo=
Subject key identifier:   5B:86:0E:7C:4B:53:F8:82:CE:C0:C8:C8:D0:AC:A5:BB:02:A1:AF:4E
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer:       /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial:       018F86A4140880AE1DF0FC86F5CF206725BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number:          1074
Signing time:             Fri 17 May 2024 13:00:51 +0000
Manifest this update:     Fri 17 May 2024 13:00:51 +0000
Manifest next update:     Sat 18 May 2024 13:00:51 +0000
Files and hashes:         1: AKERlgInC3XwY2cWyudXMewgdRc.roa (hash: lACuj9VNEgdF9ASFMxXPB3OBBuMlNh0U/k6Ud8+/r3Q=)
                          2: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: Awnpr5oCnEW6GisXy9YjsuMgtNawtA05vx0hMq07jiA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:14:08:80:ae:1d:f0:fc:86:f5:cf:20:67:25:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
        Validity
            Not Before: May 17 13:00:51 2024 GMT
            Not After : May 18 13:00:51 2024 GMT
        Subject: CN=5b860e7c4b53f882cec0c8c8d0aca5bb02a1af4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:f1:43:48:70:23:b7:9d:3c:47:1d:9b:8b:
                    9f:00:f7:54:61:5d:ee:cd:01:63:c9:73:0d:95:f9:
                    03:30:2e:e3:0d:ad:a5:e2:fc:5d:34:ae:ef:ac:35:
                    00:35:6c:59:46:1d:b4:ea:b6:67:d5:b3:00:01:43:
                    87:1a:a5:89:26:ec:cf:a1:93:9a:cf:ef:7d:f9:0f:
                    a9:1a:79:4e:72:d1:25:6a:03:90:aa:1a:f4:dd:74:
                    a9:41:ec:23:b9:d9:88:d9:97:7c:5b:e2:57:d6:e8:
                    81:cb:7d:0d:61:99:38:64:88:ee:05:49:71:4c:81:
                    39:13:6e:fe:67:5d:05:cb:f9:05:85:02:05:42:b8:
                    e5:4f:05:00:b4:18:d4:1d:ca:87:26:f7:79:cd:08:
                    eb:20:60:9a:cb:9e:2b:1a:5b:ed:59:bb:da:12:37:
                    89:1e:09:47:95:d5:9a:dc:ec:f2:31:23:84:21:e5:
                    63:7b:06:10:18:a1:d0:fb:98:32:8a:cb:f4:82:d3:
                    da:68:61:51:37:54:b7:3f:29:62:d1:35:1c:c4:f9:
                    fa:a4:73:c9:b0:49:d8:1c:31:cb:06:96:5f:26:b4:
                    42:f2:07:2e:d7:b4:01:a8:52:a2:b8:2b:11:6d:f9:
                    0d:49:53:c4:a4:83:5d:69:88:b9:45:58:f1:3f:fe:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:0E:7C:4B:53:F8:82:CE:C0:C8:C8:D0:AC:A5:BB:02:A1:AF:4E
            X509v3 Authority Key Identifier:
                keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:10:ba:a3:a3:87:3c:34:d0:f1:58:e0:62:5c:f0:66:be:47:
         1e:34:40:d2:55:d7:af:00:a8:11:50:6e:91:63:91:87:99:9b:
         3f:75:d4:59:d6:92:87:d0:1f:99:1a:ed:c3:b8:c2:22:74:c2:
         bc:15:3b:8b:90:2c:2f:8d:5a:0a:22:cb:0c:8a:30:39:ea:3c:
         db:df:82:e4:79:3f:28:72:79:44:12:6f:6f:e3:a9:63:6a:4a:
         89:8a:34:4d:9d:db:4d:84:38:ca:11:9d:4d:fe:e2:87:41:89:
         5e:5e:36:cb:48:2b:f3:c9:64:7f:02:ef:73:4d:73:3a:8c:04:
         9b:c0:99:38:11:d8:9b:09:dd:1d:1e:5f:05:67:2c:48:f3:96:
         45:a8:08:d0:62:8e:e9:ca:11:ce:b6:f5:53:0d:11:7a:1e:14:
         a4:05:11:ef:aa:91:03:4f:aa:64:2a:6b:9f:ed:57:97:ed:10:
         80:79:94:02:f2:36:19:a5:e7:39:85:26:b3:37:0a:31:2f:dd:
         f8:48:3d:9a:aa:39:5f:8c:34:51:df:57:a7:d3:45:3c:c7:ce:
         5a:a0:b9:3e:d8:12:36:13:20:15:64:da:d5:fc:55:e6:6c:63:
         b6:c7:5f:f2:70:12:84:c8:cb:31:95:bb:57:f1:9d:02:da:b2:
         85:c5:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:39 2024 by rpki-client on console-fra.rpki-client.org