Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File:                     tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier:          BxoJ6NBkgYodh6tCExqIdxvXnuh0QmoM0+ZZOqoInDw=
Subject key identifier:   3B:4E:68:0C:B2:51:7D:79:B6:37:20:B9:65:44:20:9A:35:EA:71:EE
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer:       /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial:       018F87ED2BAEB149BB33BBA9F447536023BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number:          1043
Signing time:             Fri 17 May 2024 19:00:18 +0000
Manifest this update:     Fri 17 May 2024 19:00:18 +0000
Manifest next update:     Sat 18 May 2024 19:00:18 +0000
Files and hashes:         1: sQjoIpmFK5VSTLEPlmUJfFl3Olw.roa (hash: o6qmoaqnTnm/BThQDT3f4wO/dgW7PiaMdjhKCmhcKUo=)
                          2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: Q56Dv1NOucBj/zAtoVcZA/XxcCF88uLmG0EVJqImomA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2b:ae:b1:49:bb:33:bb:a9:f4:47:53:60:23:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
        Validity
            Not Before: May 17 19:00:18 2024 GMT
            Not After : May 18 19:00:18 2024 GMT
        Subject: CN=3b4e680cb2517d79b63720b96544209a35ea71ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:de:b8:3b:c2:67:20:49:85:83:9d:f4:07:
                    9e:6a:ec:8e:78:b9:25:5d:b6:0c:32:58:b4:a5:3d:
                    ec:50:a0:7f:1a:b3:e5:ed:d4:97:9e:cf:de:95:7b:
                    47:fc:27:e6:4c:43:dc:bd:df:62:15:59:b1:c4:d4:
                    49:e2:12:3c:f0:36:e1:b6:89:0a:ef:b1:33:0a:72:
                    64:26:79:89:5f:cb:83:74:22:1b:20:5e:b8:c6:32:
                    b8:84:ac:c9:18:0b:c2:c1:9a:b1:82:16:ed:c7:eb:
                    32:ae:1d:b8:ca:9d:aa:01:ae:38:04:5e:f1:25:9b:
                    a6:cc:10:56:d5:5f:1c:cc:3d:ff:2d:7b:93:04:dd:
                    53:4e:20:a3:97:27:d8:ee:7a:97:be:67:54:7a:38:
                    89:68:9c:8c:ba:fb:61:2e:7f:ad:fa:f6:61:6b:63:
                    6b:23:2f:ba:c2:40:ff:2f:18:91:39:79:c8:b5:ee:
                    ec:ac:c2:ad:f9:69:7c:46:5d:c6:f3:dc:cd:0d:21:
                    ce:54:37:19:9b:9b:98:aa:c3:bf:65:8a:18:2f:f0:
                    06:e4:9b:b7:af:d6:42:f6:6a:e5:e9:43:ee:71:5c:
                    9c:36:6d:2e:20:20:9e:2d:bb:95:47:a7:93:96:2f:
                    5c:b0:e1:8e:30:e8:e9:fe:cf:87:1c:7c:1f:d2:59:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4E:68:0C:B2:51:7D:79:B6:37:20:B9:65:44:20:9A:35:EA:71:EE
            X509v3 Authority Key Identifier:
                keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:1e:be:78:78:34:57:59:18:be:6b:2c:b6:19:93:df:a3:7d:
         d0:b6:90:e8:70:83:36:f2:65:2f:ac:c6:df:17:f5:2b:28:66:
         ff:48:6a:9e:6b:af:bb:d8:3c:cf:a4:57:39:ef:b3:73:cf:40:
         b7:ec:ed:a2:ec:14:51:5a:34:e2:b8:b2:c2:98:e1:9c:72:b9:
         ef:5a:c4:9f:eb:1c:4a:61:7c:a9:5c:85:6d:00:4e:6a:2f:4b:
         e9:90:9e:b8:c9:59:3a:14:ea:8d:4b:f3:9d:eb:22:ac:0b:51:
         7c:ee:4f:74:4c:93:88:ca:0d:22:06:fa:06:70:c2:42:f8:61:
         cb:76:73:b0:ee:85:86:98:83:80:2c:89:fd:7b:f4:89:fe:de:
         84:74:71:a2:78:59:c1:55:a3:cd:6b:5f:54:b1:df:f2:96:ad:
         4f:cb:d1:56:01:96:6c:46:f2:05:30:e7:5f:6c:43:cd:3b:89:
         88:ee:68:33:48:84:61:12:7c:6c:4f:8e:83:fd:a3:6c:bb:bf:
         fd:27:39:ef:11:88:39:43:3e:36:2a:72:4e:38:07:6a:b9:6b:
         47:76:98:60:b2:73:1e:f0:76:33:eb:29:43:5e:90:ce:af:16:
         73:7e:92:54:9d:a7:f8:6f:10:a3:7e:0c:1a:e2:4d:36:f9:c8:
         cf:91:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:50 2024 by rpki-client on console-ams.rpki-client.org