Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File:                     TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier:          1GjXjlKg1PNcpGGNcdMS+GopjzheH3vXItdr88FfEKs=
Subject key identifier:   E2:90:FD:DB:C1:20:DC:31:84:C5:EB:BC:C7:70:F8:81:C5:BB:69:26
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer:       /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial:       018F6E9C07ED8EF79A0A41F8B24CC183A5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number:          1173
Signing time:             Sun 12 May 2024 21:01:10 +0000
Manifest this update:     Sun 12 May 2024 21:01:10 +0000
Manifest next update:     Mon 13 May 2024 21:01:10 +0000
Files and hashes:         1: 43BVPBx9zD5h-Q0DK1OZ6p8WmvE.roa (hash: n3wEzRzA1zzxnrrNmRLcBly13TE2V7iVGBqIngv160A=)
                          2: MD0-yNaqDjWwKQ9Ov-m52l5TYcE.roa (hash: yK5aFhfzHKVtMh4toLMKAANIe7rPl0Q0NGI1ewoo0c8=)
                          3: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: XdhDOyPiJ9zQFarTocvOVD36Y2hhW1TQmYT8hfDLC9M=)
                          4: aUL-KwxJs48qxZuNSqoACOmCIKg.roa (hash: UobfjE6clIgV8sU6s1cuREJGPA1J1FohpvaXLGW0uNs=)
                          5: icwjN3YjUTb6RbyEg6Q5L76HPS8.roa (hash: OOpdgUb2ujBwXaLAk3AhxT8v18tvJHs9T2hbVtSHdfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6e:9c:07:ed:8e:f7:9a:0a:41:f8:b2:4c:c1:83:a5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
        Validity
            Not Before: May 12 21:01:10 2024 GMT
            Not After : May 13 21:01:10 2024 GMT
        Subject: CN=e290fddbc120dc3184c5ebbcc770f881c5bb6926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:fb:65:88:80:18:2d:38:9b:50:23:2a:de:
                    57:ff:1b:0b:2f:7a:90:73:44:73:b0:16:86:02:e6:
                    d2:fe:ea:64:33:02:ec:df:63:ec:d2:3c:4c:66:c5:
                    4e:2e:a2:3d:d7:78:28:c8:6f:27:bb:93:8e:a3:8d:
                    e9:ab:32:76:8b:b7:0f:80:5a:f3:5d:2b:47:c9:bb:
                    92:30:63:ec:9f:52:29:47:a0:5b:98:ca:6d:29:1a:
                    e8:40:fc:e3:a1:4f:93:4f:f8:c8:39:b1:d9:0f:24:
                    53:d5:a1:7c:60:65:a7:ce:08:f3:7e:94:6e:b4:b5:
                    3b:03:26:4d:06:d6:b3:aa:31:78:60:80:57:00:a6:
                    fd:6a:d9:71:58:6e:55:85:2d:73:f7:30:b5:2b:53:
                    88:24:a1:7a:67:96:a3:da:77:de:0d:9c:99:68:f4:
                    dc:45:b5:2b:1b:32:f6:ba:64:51:ca:76:1b:e3:7d:
                    3e:1f:eb:5a:d4:4f:cd:fe:25:eb:e4:f1:86:6b:f0:
                    f5:87:c6:63:e7:b6:86:fc:8f:0e:af:dc:cd:a6:25:
                    1c:78:a5:1c:ac:4d:c7:b3:50:50:d2:bd:b7:32:2e:
                    9a:88:3a:e1:c2:a0:d1:d5:1a:e2:d3:66:19:8a:64:
                    e0:d2:ed:67:be:6a:fd:f9:aa:cc:86:01:dc:31:f7:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:FD:DB:C1:20:DC:31:84:C5:EB:BC:C7:70:F8:81:C5:BB:69:26
            X509v3 Authority Key Identifier:
                keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:45:b8:13:d3:e3:aa:88:92:36:b6:16:71:3d:a5:43:c1:
         4c:68:a0:8b:8b:f7:bd:33:c0:2d:29:74:13:4d:62:03:69:97:
         92:ba:37:86:ca:f8:70:ad:6e:0c:35:d9:aa:5a:f3:3b:8d:31:
         93:8a:c9:d9:96:a7:65:32:4d:70:4b:b6:af:3d:36:a8:dc:da:
         8c:98:43:4b:d8:66:01:34:a0:24:7b:b2:65:5e:53:a4:db:9f:
         d9:9b:7b:6d:33:de:9f:18:5e:f2:05:6a:8b:d7:20:e1:df:09:
         3e:6b:6a:0e:7e:1b:fb:87:c3:46:17:8f:75:6c:13:ae:41:51:
         ce:eb:53:a5:e1:7c:0d:ef:7a:e6:32:1d:0c:f9:54:26:97:bf:
         00:10:de:e9:28:3e:63:f1:31:cf:8c:69:ea:2a:c3:70:43:eb:
         94:57:71:55:28:24:16:11:65:d8:3c:26:f2:1e:dc:af:a2:11:
         39:50:49:8c:52:97:de:2f:c2:a5:de:53:b8:e9:8b:5a:c1:cb:
         f5:59:31:40:bf:c4:9a:fa:a7:92:9e:70:bc:a3:cb:24:bb:76:
         4b:09:49:5b:ca:21:39:b0:ff:42:f5:80:f7:61:fe:60:c7:da:
         a3:20:07:3e:05:e1:c2:d3:4d:95:ab:99:bf:b2:ef:e5:28:34:
         9e:bc:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:51:23 2024 by rpki-client on console-fra.rpki-client.org