Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          CjcvztzxPuddzMsobospX/MxZAS+l/3bnad++bOomLM=
Subject key identifier:   AD:9F:30:EA:53:5E:A0:5E:6A:D2:AD:46:B2:00:E0:63:87:D4:53:AA
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       01906F094073939B324BB9DA3E443EA5CB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          108D
Signing time:             Mon 01 Jul 2024 16:03:15 +0000
Manifest this update:     Mon 01 Jul 2024 16:03:15 +0000
Manifest next update:     Tue 02 Jul 2024 16:03:15 +0000
Files and hashes:         1: I76f7S0N88ky3FTnvwxMVR7WZBs.roa (hash: FBI3JSml9oNScQTMFrcjENxEJblIVVlNa13WWnu9Yqk=)
                          2: e6-nmfSxRyrIL_jT-ZY1blFVqhs.roa (hash: cuInoOYuRGwnKdQ+pk1txyCf8m/Naz8Duwwm8NRK+KU=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: Hz6cNlO34gbhcq1Oy14VECp8tm7O27mUm+rJj/jt0OI=)
                          4: scNiKgHJlOUFNyS1K8ZoUeSqIo8.roa (hash: mTayRmeegLVpCOzKY/TP5KBxnoMR4zgRNJAhKIm2qHk=)
                          5: vCR5VKGEqYUoMLLsgO7m6_uApfQ.roa (hash: wovBXfDd1YlQOITaWG/zungYc9x+r0GJlxd0uusKFdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:09:40:73:93:9b:32:4b:b9:da:3e:44:3e:a5:cb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Jul  1 16:03:15 2024 GMT
            Not After : Jul  2 16:03:15 2024 GMT
        Subject: CN=ad9f30ea535ea05e6ad2ad46b200e06387d453aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:de:64:b9:2a:f1:75:e4:69:9a:36:e4:b5:
                    ea:fe:02:bb:47:53:37:a3:15:2b:f9:67:81:25:5a:
                    29:78:49:da:f8:c2:1f:d0:5f:0c:33:db:97:6e:01:
                    b5:80:40:9c:9d:ee:28:88:b5:f1:3c:67:29:40:12:
                    e3:af:94:90:4b:ea:73:98:9b:a8:72:45:04:fd:13:
                    e4:d8:fc:01:4a:94:f8:81:07:b6:85:78:cd:7d:23:
                    e2:e3:be:f1:7e:47:cb:72:70:ca:1c:ae:71:51:04:
                    2b:f4:89:0e:c1:7c:9e:ba:2b:29:80:6f:73:31:27:
                    8c:62:08:dc:d1:7e:18:a7:b8:38:49:54:01:79:7c:
                    bd:c1:e0:a5:91:c1:11:10:0a:22:ee:54:6f:b1:47:
                    79:7a:2e:9d:a7:d4:43:1e:e9:a1:75:06:f4:1e:fa:
                    ba:52:8a:a6:38:65:fc:0f:d9:8c:6c:6f:cd:14:ee:
                    f2:8e:9c:78:b9:7c:b4:d1:f3:9c:8a:1c:d1:2b:3f:
                    a7:42:e8:ce:fb:7f:cd:79:41:77:cb:60:b2:6c:d1:
                    fe:ec:cb:2f:1c:0c:a4:78:b4:0f:69:ab:5f:7c:9f:
                    9a:d6:7e:f6:69:c3:1b:3c:9b:52:0e:f0:7c:d3:a8:
                    16:e1:5b:84:8f:d8:d7:c2:e3:22:85:a7:e6:d0:f3:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:30:EA:53:5E:A0:5E:6A:D2:AD:46:B2:00:E0:63:87:D4:53:AA
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:c7:bf:da:c6:39:57:34:71:99:b6:a5:9e:78:dd:19:f0:
         5d:bb:70:14:f9:25:a9:2c:91:c3:01:3d:36:d7:c1:db:f2:5e:
         1e:c9:2f:f1:59:bf:49:19:54:d5:29:cf:a5:38:e0:22:d4:04:
         78:43:bf:a6:67:5f:f6:5a:b7:a8:dd:7c:1b:93:71:30:ed:35:
         7e:c9:a3:af:96:22:14:85:6b:5f:31:28:d3:f7:8b:47:91:4d:
         40:d2:e9:9c:c3:3d:54:fa:15:79:5f:3c:6d:09:0b:07:74:2a:
         6b:84:82:1f:7a:ec:1a:bf:cc:d9:75:1d:51:f5:df:de:47:32:
         1d:aa:d8:29:57:54:8e:51:0c:f5:52:a6:44:d9:58:55:5e:82:
         63:c7:d0:ef:c4:4f:fe:c9:42:9e:3d:2f:63:2e:2e:1d:ac:b4:
         5d:9e:20:ed:29:52:c6:b4:cc:05:f9:78:4d:9e:c4:bd:ff:50:
         27:69:b3:dd:a0:e4:96:38:bc:77:86:bd:d7:b2:f3:d6:ce:7f:
         cb:3b:66:a4:a8:51:c6:b3:e3:75:64:5c:c8:c0:ee:12:f4:15:
         61:87:79:c9:21:73:01:17:6c:79:0f:38:bf:b1:1b:0e:7a:79:
         d7:7f:42:8c:39:ab:a9:53:69:55:38:3f:e7:09:b9:7d:a8:60:
         c4:d4:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:27:23 2024 by rpki-client on console-fra.rpki-client.org