Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File:                     TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier:          EQ6Z3wh9zKunNH+k3Mc8K8d3rgB2fMkBV7x8y0xXwOs=
Subject key identifier:   6B:C7:42:AB:C3:CD:2C:D1:E5:B1:C7:A7:4F:32:8D:52:61:1E:A0:E6
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       018F893694E6E66AFB399B0E01D94B7E7845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number:          117D
Signing time:             Sat 18 May 2024 01:00:06 +0000
Manifest this update:     Sat 18 May 2024 01:00:06 +0000
Manifest next update:     Sun 19 May 2024 01:00:06 +0000
Files and hashes:         1: 4PyCpb7jXTE5dHMEcxCXu2jIyCA.roa (hash: c7ecrPmAHMhDMIUG0HUp1DAO4BgzUF6ZUwOhYo3dqzY=)
                          2: 5vpYGSPyNQJYrkCHpNcjy0691eI.roa (hash: xV31imzVCd9IJTr6Pq2klN7TSaU5+BOuBhJWRVIRMVk=)
                          3: HKJqPdNlwIvtM0f8iEoi6mczfMg.roa (hash: 19tKd58Z7I1n7+l/4+A9iHt4PaVuMRdyURBZIZNx9Kw=)
                          4: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: Mzx9KN86D5ASr+KMMP4EsjBsaCu6Sa3zAPniybAHvkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:94:e6:e6:6a:fb:39:9b:0e:01:d9:4b:7e:78:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: May 18 01:00:06 2024 GMT
            Not After : May 19 01:00:06 2024 GMT
        Subject: CN=6bc742abc3cd2cd1e5b1c7a74f328d52611ea0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:30:48:64:1a:e5:ed:a8:63:e5:c9:12:cb:
                    ff:51:07:b6:c8:20:14:c0:9f:28:55:f7:d2:b4:6f:
                    52:9b:18:8a:ef:17:27:b5:87:07:5b:39:7f:14:84:
                    48:fd:02:41:b4:95:11:1c:9f:b5:1e:51:e3:76:3b:
                    bf:9a:36:b6:2d:5c:0e:12:53:d6:53:fc:26:3d:71:
                    9f:52:9b:34:bc:0b:7b:49:34:09:57:29:8d:09:31:
                    52:ce:fd:b0:28:a6:3b:2f:ca:73:12:fe:33:1c:9d:
                    94:63:3a:74:c1:39:41:16:2b:b9:f6:15:d0:a8:30:
                    41:ad:8c:85:11:5f:6b:9d:9a:16:32:5a:c5:9f:29:
                    0a:ad:02:99:bd:24:e3:a2:dc:dc:f8:b5:6b:9a:57:
                    2c:31:40:40:ae:ff:47:2d:1d:74:25:cc:f4:98:d3:
                    3f:dd:a5:b8:79:85:8d:8e:ac:59:50:58:7f:4c:66:
                    35:d9:00:6e:8c:86:d8:df:f4:82:64:e7:55:10:df:
                    a2:a8:89:1a:e2:dd:79:9d:3c:07:59:93:94:a8:68:
                    be:b8:5a:8e:dc:84:56:aa:2f:18:7a:82:71:7b:01:
                    45:0f:aa:17:3a:e0:62:7e:14:5f:4b:c5:be:32:7e:
                    65:b9:54:83:0d:ad:53:4b:2c:a6:97:29:d4:6e:45:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C7:42:AB:C3:CD:2C:D1:E5:B1:C7:A7:4F:32:8D:52:61:1E:A0:E6
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:7f:94:c0:a0:0b:8d:af:9b:6d:f0:14:72:76:5c:17:3d:
         d3:ad:33:dd:7d:21:bb:08:e8:de:1a:dc:c1:6e:4d:61:3b:78:
         f3:89:96:d3:c9:e4:92:5f:01:1f:f3:7a:88:ac:59:aa:07:d7:
         2a:8c:8a:94:79:b1:0d:5d:b4:2b:f0:c2:d5:6f:d4:36:92:19:
         9b:1b:8c:00:19:37:3f:77:c4:df:4e:dc:7f:93:ed:e2:5b:7d:
         a5:ef:fc:8f:e1:d6:e2:62:59:2d:bf:d6:70:d5:dc:81:00:a5:
         64:29:c1:51:41:d5:80:06:46:71:0a:61:68:c8:f0:96:b2:0d:
         78:24:e5:f4:d0:13:d8:97:41:61:18:d7:f3:e7:7a:ef:cb:a3:
         99:3a:16:98:5e:68:d8:3a:90:e7:db:4c:5e:c9:4b:e1:44:98:
         ca:d5:f5:1a:53:90:b0:db:26:c0:6e:a8:b9:f2:5d:3c:ac:f9:
         62:af:01:01:e4:1d:1c:da:a3:66:64:15:6b:73:d3:07:4a:b2:
         7f:1b:ce:e0:4b:37:1c:24:24:3a:c7:ed:cd:09:4d:a0:e4:c8:
         16:bc:27:ed:f8:4a:a0:4d:43:ce:29:20:5e:dd:b1:01:24:6b:
         e0:ce:71:e8:4a:ef:54:87:ba:98:e0:40:cd:73:7d:02:54:1d:
         95:5a:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:32:03 2024 by rpki-client on console-ams.rpki-client.org