Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
File:                     tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft (raw, json)
Hash identifier:          DPJdDfzq09cKhQBupT5o1NlOnVIqmH/6nM91Atgm77g=
Subject key identifier:   E6:6D:4D:0A:3F:03:1D:9D:13:68:54:D6:2F:8E:B0:0D:0A:87:FC:22
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Certificate issuer:       /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial:       018F836DC3491FEEE09A77530A6E6124CE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
Manifest number:          1172
Signing time:             Thu 16 May 2024 22:02:39 +0000
Manifest this update:     Thu 16 May 2024 22:02:39 +0000
Manifest next update:     Fri 17 May 2024 22:02:39 +0000
Files and hashes:         1: bpV7I_XNU2chefMU4R09gkSH0wM.roa (hash: mLHFtO7R0xg1XzqOhJ1OPqVkp4rItC5RQC59eaRQzBs=)
                          2: jI7ofPBkxfgBTJQMe4a3hpxR-Uw.roa (hash: Z53lHwF40kPkLKXLEQFDjc+QTV1haoOzfNCxm9V32/8=)
                          3: rVUY8n89COrSo3MOO0BpDB9bHTQ.roa (hash: dYXczOoGm+UUFjmvsMyO1jjcS1JnVNQgJpHJ4sF281k=)
                          4: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl (hash: TH1eDcOwb+bL+Nx5Mwyv5pqrbOpv3VgNJZgBuKubf+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:c3:49:1f:ee:e0:9a:77:53:0a:6e:61:24:ce:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
        Validity
            Not Before: May 16 22:02:39 2024 GMT
            Not After : May 17 22:02:39 2024 GMT
        Subject: CN=e66d4d0a3f031d9d136854d62f8eb00d0a87fc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:59:8e:5c:c8:c3:c2:6b:c4:9b:f8:c7:4a:
                    86:80:61:4d:7a:25:48:0c:69:72:a0:be:a9:c7:69:
                    1d:3b:cb:3d:2d:9b:d0:ac:f3:65:ed:f5:37:7b:d7:
                    b3:bb:67:5c:e6:9c:f9:33:a3:e7:1d:11:75:ee:53:
                    e3:76:43:88:86:4e:14:b0:de:af:a8:f0:36:bb:29:
                    52:80:8e:b6:cf:f6:0f:1f:17:99:4d:b4:df:12:07:
                    ba:f1:b0:64:2a:53:e1:b1:4d:17:14:e2:d8:ad:4b:
                    85:3f:25:98:6f:ee:fd:e6:6b:11:5e:ec:c8:b5:38:
                    3c:6a:9d:72:62:f3:54:32:32:be:39:7a:8f:cb:93:
                    c2:ff:3d:48:33:7b:d1:5e:5b:3e:6c:13:a8:29:55:
                    e2:07:41:64:78:5c:60:67:ed:fc:97:50:50:5e:c3:
                    b8:6b:db:dc:e1:d4:d6:46:92:bb:71:70:34:d4:f1:
                    dc:37:b7:2e:4d:f1:ce:0f:be:09:17:72:21:ba:a3:
                    21:b4:fd:69:30:ac:de:46:ac:a2:b8:2e:2d:0e:4e:
                    97:4d:69:ed:2f:52:15:ab:c9:df:28:80:df:1c:07:
                    91:34:25:4d:92:12:b8:b0:0a:a7:1e:49:7d:b9:5e:
                    12:1d:c7:e1:31:9b:05:64:52:85:11:63:79:f4:08:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6D:4D:0A:3F:03:1D:9D:13:68:54:D6:2F:8E:B0:0D:0A:87:FC:22
            X509v3 Authority Key Identifier:
                keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:af:fe:1e:5b:27:c4:2e:7a:76:87:20:0c:9a:09:d3:97:80:
         4a:7b:66:01:11:95:c8:6c:c5:83:20:78:a6:c4:6d:06:c9:94:
         43:2d:ad:82:10:4b:24:aa:84:3b:1c:3a:c8:3c:68:c5:0b:04:
         8d:01:e0:cf:8d:80:a5:0f:7f:30:a6:8e:e6:2f:48:22:2e:20:
         59:7d:85:b5:68:15:2d:61:fd:e7:fa:2a:ca:7c:68:6a:2f:59:
         f1:68:46:b9:4b:62:48:6b:75:24:77:4d:6f:6d:a8:bf:31:64:
         16:b3:76:23:9e:d2:7c:f0:45:0c:e5:ee:6a:48:77:86:6f:1b:
         77:ce:3d:78:8e:4c:2b:2f:25:b8:de:7f:2e:f2:4d:8e:08:b8:
         fa:2d:03:94:14:bb:22:80:d3:fa:7b:ef:31:c7:db:4e:d0:26:
         b0:cb:ab:ae:14:67:e8:70:d6:6f:7a:88:f5:aa:36:0d:e7:05:
         23:63:07:1b:9c:5a:b4:15:a9:dc:0e:a4:14:d0:b0:7e:58:9c:
         bf:ef:52:85:40:bd:42:c6:9a:ce:f0:71:ef:74:cc:4c:41:9e:
         61:84:d5:e5:09:6a:2c:3c:4f:59:b6:37:31:95:17:f3:99:6d:
         8e:bb:38:e7:81:d0:c7:21:93:84:8f:2b:39:08:f6:c8:ed:02:
         cc:cb:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:49:09 2024 by rpki-client on console-fra.rpki-client.org