Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File:                     tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier:          0k39V6iDYk1kdzFT63IZs9aw2Vtmp2uw/0c9OULx+AU=
Subject key identifier:   52:CE:68:2A:65:08:28:30:60:33:58:9F:1B:D0:C7:17:5C:7F:82:7B
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer:       /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial:       018F87492507E78EAD1BDC32F6FD999CC0C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number:          0344
Signing time:             Fri 17 May 2024 16:01:08 +0000
Manifest this update:     Fri 17 May 2024 16:01:08 +0000
Manifest next update:     Sat 18 May 2024 16:01:08 +0000
Files and hashes:         1: nfkGuZvqoPK3fNHGrJ26HFR7mGg.roa (hash: 8Btqxaxvm07vz/8BHD7jJlHtcAVkm/4269S4XN5woeY=)
                          2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: prTJAH/EMw8fRQAePVa6BTmwx/VHp5uiL8qeIgXvarc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:25:07:e7:8e:ad:1b:dc:32:f6:fd:99:9c:c0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
        Validity
            Not Before: May 17 16:01:08 2024 GMT
            Not After : May 18 16:01:08 2024 GMT
        Subject: CN=52ce682a650828306033589f1bd0c7175c7f827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:b0:7d:1f:f8:dd:37:c7:a5:6a:0e:f1:5c:
                    98:04:cd:df:7a:e0:14:25:f6:ac:b5:47:4d:4f:4d:
                    91:83:36:e6:3c:9f:33:0f:85:92:2c:87:77:5e:c6:
                    97:89:45:3f:0f:c5:06:bf:e6:2e:d3:6f:0a:da:09:
                    f2:e8:ca:a7:ed:23:7b:87:8f:ca:1c:1b:f7:72:bb:
                    16:26:89:ca:57:d3:bc:a2:08:57:35:9d:2b:56:67:
                    8b:13:43:d9:86:ad:b0:4c:06:b7:0d:40:03:9c:05:
                    9f:0b:41:db:b3:5a:69:b7:f7:b6:20:19:10:0a:ee:
                    c8:ee:96:81:99:fb:e1:59:48:3f:7c:73:0a:7e:28:
                    18:3b:25:8a:93:28:c8:6e:3b:5f:2c:df:fd:7e:94:
                    f9:9b:ad:c7:6e:01:e5:e8:be:74:85:ec:a5:12:1d:
                    f8:45:4e:d4:5f:fa:97:0b:f7:9e:ee:7e:31:54:f6:
                    43:2d:cc:6e:c7:f4:d0:77:13:62:07:12:d3:bb:f9:
                    1e:fb:90:cf:c9:bf:d1:ba:0f:66:f9:5e:e1:a0:ad:
                    5d:26:53:6a:2b:5e:5a:88:a1:91:96:6a:91:f1:ea:
                    0a:51:a3:b9:cf:7a:77:4d:94:2d:be:bd:02:2f:36:
                    da:06:9a:c5:14:75:7a:ef:d6:0e:5c:d9:6b:3b:31:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CE:68:2A:65:08:28:30:60:33:58:9F:1B:D0:C7:17:5C:7F:82:7B
            X509v3 Authority Key Identifier:
                keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3d:51:e8:86:e3:f4:47:1b:7a:24:52:50:29:bc:5e:3d:bd:
         f9:2f:42:43:0c:60:4a:b7:e4:26:3a:de:c4:ff:58:bc:b2:81:
         60:9d:fb:e8:42:a3:02:2a:11:19:df:cb:12:16:e2:f5:f4:53:
         9e:df:0a:2b:28:2b:c5:cd:0b:7c:b8:2e:04:33:a8:c4:0e:02:
         ca:82:60:41:7f:75:0d:b0:1f:37:7d:3c:5b:a7:bb:bf:82:f9:
         cb:61:5d:cb:d1:12:07:ea:8c:d6:cd:8c:59:5c:4c:3f:8d:30:
         20:2b:99:10:1c:10:4c:db:ed:d5:33:bd:c4:8e:8c:d3:2b:33:
         e9:b2:db:64:49:07:34:87:26:ba:ed:e7:c0:66:b0:bb:d8:b8:
         e9:72:44:86:ef:f2:89:10:d0:95:3d:b7:a7:e6:00:95:f0:d8:
         48:51:a0:fb:54:7d:ff:1c:59:3b:4c:82:b8:4d:66:be:37:9b:
         a7:14:bf:31:8a:e8:b8:cc:94:03:3b:40:b3:5d:5c:b4:f2:f3:
         2b:d1:10:55:86:2a:34:30:ed:c3:32:ac:78:09:bf:c7:55:2b:
         a1:ae:c0:74:c4:02:dd:b4:c2:d5:35:29:0e:4a:7c:c3:0c:61:
         24:b6:1a:a6:0f:b1:a1:da:c6:76:f6:52:85:59:5a:ab:8f:5f:
         b8:49:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:47 2024 by rpki-client on console-fra.rpki-client.org