Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File:                     tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier:          6E4i+0Yh1WAazfQbKTVUt2Yx7PM3QZynjc26rilLGqA=
Subject key identifier:   DB:7C:E5:BF:97:6E:83:49:3E:09:01:9E:51:0B:46:A8:A7:EE:C4:7B
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer:       /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial:       018F87B624E37228B9E8491EDEA6D2CEDE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number:          0510
Signing time:             Fri 17 May 2024 18:00:12 +0000
Manifest this update:     Fri 17 May 2024 18:00:12 +0000
Manifest next update:     Sat 18 May 2024 18:00:12 +0000
Files and hashes:         1: pxuoe7Zdm8ZlOm-tW9ChRYIk55U.roa (hash: +1USPd1VSVtWckgk0tAbETPmFBHWI+GlUEMJbTckV/c=)
                          2: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: 6My6oqcs4LK47azl9dSMfYs7BzTRjTVWy1P2B0sJD8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:24:e3:72:28:b9:e8:49:1e:de:a6:d2:ce:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
        Validity
            Not Before: May 17 18:00:12 2024 GMT
            Not After : May 18 18:00:12 2024 GMT
        Subject: CN=db7ce5bf976e83493e09019e510b46a8a7eec47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:f5:b8:51:a3:7c:6a:cb:56:a1:6d:f3:39:
                    0b:3e:fa:30:34:25:4a:c9:7d:81:e6:ae:3a:0b:10:
                    2d:85:8d:39:e0:9e:f7:06:f5:65:ef:56:c5:4b:2e:
                    ca:78:54:93:4a:4a:8f:31:98:dd:77:98:1f:74:7e:
                    b0:c8:e1:02:aa:c3:45:8f:e6:b0:32:14:5c:45:e3:
                    78:ee:5b:c9:b9:2d:58:d4:a7:f5:5b:6f:15:97:81:
                    8f:a9:92:49:ba:69:e1:eb:6d:33:14:7c:47:f9:d2:
                    5a:7d:ca:c6:8e:1d:c9:df:0f:22:b2:83:9a:22:48:
                    30:21:0d:b2:09:a9:43:17:6e:66:70:f1:bc:00:37:
                    d0:1e:a5:ea:8b:bd:67:b9:cb:2c:a0:92:54:46:df:
                    64:fd:a0:aa:3d:71:ec:03:c3:bd:8d:e6:be:4a:d0:
                    16:e4:8f:46:67:9a:e4:63:c5:f7:34:39:9b:bf:29:
                    68:bc:ad:ef:5d:48:65:2f:fc:f8:fa:27:7b:99:33:
                    f6:80:6a:ba:5e:9c:4e:a1:bc:d2:d5:dc:35:e9:81:
                    70:90:f5:97:22:1a:e3:73:91:fb:50:da:5b:88:d3:
                    41:1a:fb:d3:df:81:fa:d9:0c:7c:d3:3f:c4:96:41:
                    5f:17:8d:92:9e:f2:f4:2c:7d:18:ba:7e:23:b9:7b:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7C:E5:BF:97:6E:83:49:3E:09:01:9E:51:0B:46:A8:A7:EE:C4:7B
            X509v3 Authority Key Identifier:
                keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:27:2e:08:61:a9:ea:40:0a:ae:c6:22:92:ba:c7:5f:41:
         b5:20:b0:2c:2e:b3:8c:8e:50:66:60:41:c0:cb:f6:24:58:e4:
         94:5f:82:e4:b8:8c:1d:be:87:44:55:82:d9:48:be:72:d0:8c:
         64:d5:fc:63:12:99:33:b2:3a:ce:d2:0d:42:ec:06:25:8b:4d:
         1c:9a:ea:e3:ed:a6:53:05:67:57:8a:86:23:f1:85:24:b8:d0:
         67:b8:3b:e5:d7:85:65:6b:a8:47:e5:90:9b:31:5f:5f:3d:45:
         07:ff:f0:84:4d:12:7e:03:b7:cd:54:7d:a5:ae:ca:44:0a:eb:
         a6:0d:26:e7:a9:84:4d:48:eb:3b:71:bb:a6:d4:c6:b9:fb:cd:
         a8:37:aa:c4:7d:52:19:86:aa:f4:a3:d5:2e:c7:42:31:53:36:
         44:c9:91:ae:b6:f3:e3:f1:3a:28:4a:8b:2c:47:ed:0a:7e:dd:
         7e:55:18:3b:d1:c0:57:82:da:d1:d8:90:c7:4a:b4:af:e5:52:
         e7:ff:94:44:d7:de:4c:5a:36:79:a8:3b:fa:6a:ce:94:11:fa:
         8a:e7:8c:8b:ba:c4:e3:bc:12:5c:53:14:ba:21:5f:9c:06:f5:
         87:6c:4d:6f:cb:1c:6c:98:10:db:ac:b3:49:25:c2:76:6c:54:
         4c:c9:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:08 2024 by rpki-client on console-ams.rpki-client.org