Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File:                     TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier:          MjzX1XMgP0xnBtCvVeVugktp3WqyK7iAwtUzoemCjag=
Subject key identifier:   94:BC:29:6B:42:D8:FA:45:27:25:71:E3:91:CC:C9:1C:5D:61:9A:65
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer:       /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial:       018F87ED473097407A7D656A5CA969CF0D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:25 +0000
Manifest this update:     Fri 17 May 2024 19:00:25 +0000
Manifest next update:     Sat 18 May 2024 19:00:25 +0000
Files and hashes:         1: LcBU1nUQb8GPYT39P9FrjAzjaNs.roa (hash: rmfqXAblv2Tae2atCUeXAzXHBSMKehoXjzj39pxW04g=)
                          2: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: F3qcRKYNps3mbd8qMMkTzR+OAqkfjC9ZoriHUzx7Y0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:47:30:97:40:7a:7d:65:6a:5c:a9:69:cf:0d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
        Validity
            Not Before: May 17 19:00:25 2024 GMT
            Not After : May 18 19:00:25 2024 GMT
        Subject: CN=94bc296b42d8fa45272571e391ccc91c5d619a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:35:68:69:82:1e:5f:2f:12:76:d8:cb:1e:
                    42:66:18:63:28:b8:ca:89:97:75:f6:c6:fd:e4:22:
                    2e:7d:7a:89:57:57:1e:dc:f8:ad:02:0f:39:94:93:
                    c9:01:fe:8b:bf:86:83:43:60:49:ff:d5:d0:32:25:
                    c5:48:4c:97:cc:96:4b:43:5a:6c:77:4d:bb:52:18:
                    89:52:39:eb:e1:35:be:a3:77:08:93:c2:8d:b6:53:
                    c3:a0:9c:58:dc:f7:b0:8c:2f:60:75:fc:fc:b4:55:
                    2d:a5:e0:77:79:38:f8:06:8b:81:8f:0b:7b:a5:a5:
                    a9:ad:0e:77:d1:be:a2:c2:d9:58:ac:d0:ac:a3:d8:
                    d5:ee:27:b7:49:ce:0c:4b:1f:d8:c5:73:e7:36:4f:
                    90:a8:60:92:e6:70:a4:70:2c:df:f7:d5:3e:b1:64:
                    89:88:e5:76:f1:23:49:39:ee:10:20:60:45:9c:b6:
                    36:82:f4:c6:7b:9d:8a:62:ec:5a:9f:38:30:01:95:
                    61:cd:af:01:d6:73:40:e0:46:df:0f:57:8f:b3:0f:
                    55:60:86:b1:b5:f1:34:0f:74:76:a0:4b:ac:69:2b:
                    7f:cc:fc:5c:b7:25:45:e2:1c:5d:20:aa:42:48:6a:
                    44:3a:ce:6c:70:be:99:2a:8d:29:17:06:5c:2c:5e:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BC:29:6B:42:D8:FA:45:27:25:71:E3:91:CC:C9:1C:5D:61:9A:65
            X509v3 Authority Key Identifier:
                keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:2a:87:e7:53:18:b2:65:80:ce:11:45:d8:93:c1:01:7d:
         a4:a1:c0:2f:a3:9b:68:d7:cf:a2:3e:bd:79:ab:8b:b0:f4:85:
         28:7c:00:12:c5:a5:30:40:bd:96:63:6c:bd:09:f9:46:68:52:
         60:03:9d:e2:2d:9f:bd:7e:d0:52:5d:fa:72:4d:82:f2:59:91:
         16:54:4c:2b:c5:aa:4d:39:19:b5:e8:eb:98:c2:2b:59:40:0c:
         7f:33:4c:92:d9:18:dc:1e:cc:b2:8d:7a:0a:f6:90:86:0d:04:
         cd:83:0b:6a:73:82:87:be:db:dd:de:97:7e:e4:38:ba:71:77:
         89:67:94:d5:85:1a:dc:0c:4d:a0:77:da:64:0f:6a:43:9b:73:
         f3:7c:9a:89:a0:66:7a:63:06:35:6c:7b:00:e8:2d:fc:6d:b4:
         bc:a9:a4:2a:a1:a1:16:73:44:2d:ad:1a:02:d9:2c:f0:89:f9:
         bf:66:b4:2c:4d:8c:a8:96:85:1a:3c:e8:9a:21:1f:d1:8b:17:
         9a:c3:5d:18:7b:37:3f:50:b1:aa:de:c0:f0:39:a2:04:35:7c:
         13:65:f1:3e:9d:8f:ec:46:d4:72:b3:08:b4:f1:97:86:94:0b:
         2e:22:b8:c5:aa:2b:02:09:ec:41:35:ca:01:0a:a7:d8:16:2c:
         89:e2:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:21 2024 by rpki-client on console-fra.rpki-client.org