Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File:                     TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier:          zjaQ4ewhfPXgi05ySmS+ibZviaq8kjibMxMEkDae4OA=
Subject key identifier:   93:2D:2A:C3:9E:00:20:DE:D5:85:E0:6C:CD:DA:89:BF:5C:CB:E3:37
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer:       /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial:       018F87497DA60B76AC10DE7BCE5D2A411AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number:          07CF
Signing time:             Fri 17 May 2024 16:01:31 +0000
Manifest this update:     Fri 17 May 2024 16:01:31 +0000
Manifest next update:     Sat 18 May 2024 16:01:31 +0000
Files and hashes:         1: QwGn6uzoGStscTztkUon7jeLTkI.roa (hash: h8Xcb+Xx9rePH/FrX6J9oxEQYg6giW6qz7DoKyz0mbA=)
                          2: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: dEDYuFEyobfza0m5lqF3Mrd1kgwMKyyOle61InPXpjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7d:a6:0b:76:ac:10:de:7b:ce:5d:2a:41:1a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
        Validity
            Not Before: May 17 16:01:31 2024 GMT
            Not After : May 18 16:01:31 2024 GMT
        Subject: CN=932d2ac39e0020ded585e06ccdda89bf5ccbe337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:f9:54:0a:f6:89:5c:2e:81:29:d0:9b:88:
                    14:a4:ae:13:53:12:da:ee:9c:91:6f:fa:46:df:76:
                    8a:b1:7c:6e:22:a5:a5:f0:b7:85:8e:6e:36:84:86:
                    17:85:8a:3c:04:c3:ab:3a:11:40:1e:79:a0:df:20:
                    2b:6e:c1:94:78:b7:82:77:7c:d1:f6:8f:fc:ba:41:
                    07:07:ae:93:45:ba:2b:51:f5:6b:67:7d:4d:e3:6a:
                    47:0f:99:50:b2:77:2f:be:58:af:88:1a:c0:2d:0a:
                    72:92:dd:f7:a1:ea:39:74:fd:ea:b5:0d:0c:e7:2b:
                    71:42:48:89:1b:19:f6:a7:57:df:bf:3c:82:a6:4d:
                    25:71:23:79:97:ff:c6:01:8f:c0:68:00:f3:40:2d:
                    35:5c:08:86:43:57:ac:2f:71:df:da:48:a3:58:d2:
                    4c:1e:b9:26:f9:5f:4d:25:b2:b4:76:8b:3c:34:6a:
                    53:8f:c4:f9:0a:e4:01:32:a7:39:bc:a8:42:f9:e8:
                    17:9a:0b:87:c4:2d:d6:03:0e:59:b3:cd:14:a7:63:
                    36:29:24:8e:8c:8e:ed:3f:7a:65:9a:a1:64:f3:cd:
                    32:58:87:9a:a4:c9:b4:fc:08:92:a5:07:d9:97:1f:
                    8a:e3:21:a5:32:18:a4:5a:29:64:57:9a:79:f1:b8:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2D:2A:C3:9E:00:20:DE:D5:85:E0:6C:CD:DA:89:BF:5C:CB:E3:37
            X509v3 Authority Key Identifier:
                keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:b4:a9:58:77:38:18:28:bf:d5:b1:51:e0:52:8f:52:9a:
         d5:3c:ee:41:4a:8e:96:76:69:b7:b0:df:e4:bf:32:26:7f:0e:
         51:8f:47:e4:39:6a:18:f0:52:5e:50:7d:1e:1d:0e:b8:03:ef:
         2d:ee:fb:de:d6:31:63:f1:03:46:f0:83:14:c9:85:70:92:d9:
         53:8d:00:25:72:59:3c:ab:9c:72:1b:d1:57:f2:a3:6e:96:36:
         9b:a2:4b:d6:48:1f:0f:dd:56:41:09:3f:64:a7:3a:16:0e:0d:
         8d:40:34:60:e7:d4:b5:5b:69:53:49:95:69:4c:ff:97:43:96:
         c3:01:13:6f:15:0c:b5:3a:18:8f:89:a6:eb:c2:d9:e7:04:08:
         15:30:29:e4:c0:4e:b2:88:3f:18:bb:2c:0a:8d:95:1e:bd:bd:
         cd:14:f6:f9:ec:c7:7c:7e:82:c6:2b:dd:b1:58:78:8b:bd:b3:
         da:fd:01:16:a4:5e:12:99:a6:fd:3a:7d:ae:40:60:24:3b:cf:
         db:a1:10:42:68:36:f8:c0:11:e9:08:9c:92:cf:b0:a7:e5:3c:
         ba:f5:1e:22:5f:75:78:b2:42:99:a6:32:96:1a:ba:d6:be:68:
         cf:29:00:fd:8f:b5:14:92:b9:01:f2:e2:c2:1e:df:86:d3:b1:
         e9:31:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:08:59 2024 by rpki-client on console-ams.rpki-client.org