Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File:                     tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier:          GwWumMrB081s9Qc87jQlRWKQHHs08T96bf5XOdaBhPc=
Subject key identifier:   63:AD:AC:94:B9:3E:45:DD:19:31:1A:94:5C:6A:98:0A:2E:AF:33:A4
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer:       /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial:       018F874A667A5AE75A587056B2268E941D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:02:31 +0000
Manifest this update:     Fri 17 May 2024 16:02:31 +0000
Manifest next update:     Sat 18 May 2024 16:02:31 +0000
Files and hashes:         1: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: KudUG00XPTiG9WPgO1uhTCCq29LWTndvIJ1ifA+h0nI=)
                          2: y6k6VJ3fp2z-itTYA5T4-IMmwrg.roa (hash: HriV6Da8ya5aLrCcKMjh06YnUO/KwMahXWLlxIk8Pwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:66:7a:5a:e7:5a:58:70:56:b2:26:8e:94:1d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
        Validity
            Not Before: May 17 16:02:31 2024 GMT
            Not After : May 18 16:02:31 2024 GMT
        Subject: CN=63adac94b93e45dd19311a945c6a980a2eaf33a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:a2:0e:15:78:11:ed:1f:0e:52:55:17:c6:
                    eb:82:d1:8c:a6:3b:25:1b:8c:9b:f3:86:78:51:e7:
                    fc:d9:5e:92:e3:cd:b0:99:8d:9f:b0:88:3c:14:8e:
                    96:05:11:5f:4e:18:b2:c5:f1:17:b8:d1:5c:29:70:
                    64:00:27:9f:8e:08:ff:66:a2:24:fa:9d:be:96:41:
                    33:d8:91:08:db:14:8a:8b:09:6c:6c:fc:04:1b:12:
                    84:47:a7:d9:3c:3a:4a:1f:2a:c3:05:be:6d:7f:ed:
                    1e:d7:25:6d:0c:f1:3c:c9:c2:22:31:43:c2:20:bd:
                    31:82:cd:01:bb:23:b4:48:f5:2f:b3:81:ab:22:06:
                    49:9d:30:22:3f:c7:83:19:5d:82:8e:cc:52:ab:95:
                    9e:e0:f3:59:90:7f:0a:6d:7a:d9:52:7e:46:f5:98:
                    87:25:ea:b9:72:57:d2:ab:7a:bf:26:ae:6a:a2:01:
                    76:3e:f9:f9:88:31:86:3f:33:2b:ad:31:c8:6e:82:
                    e0:2c:8f:0b:5f:21:81:37:8f:68:e6:ed:88:a7:4f:
                    1a:4c:91:97:22:23:6c:ea:3a:98:ba:5b:13:5b:d8:
                    c0:e6:2e:e3:8f:19:85:b9:40:7b:a1:b2:22:a0:d6:
                    3a:93:36:16:f6:a9:70:28:e0:64:59:e9:40:d5:6c:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:AC:94:B9:3E:45:DD:19:31:1A:94:5C:6A:98:0A:2E:AF:33:A4
            X509v3 Authority Key Identifier:
                keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:88:10:ff:7b:c1:4a:6f:be:4c:ab:b1:cd:37:93:1e:90:cf:
         8e:03:ba:9f:9e:49:c3:b9:a5:5b:d2:c5:d0:2b:36:e1:71:c0:
         31:78:d2:d4:ef:4e:62:ea:e1:ce:ca:3e:8a:8c:34:fe:59:9b:
         55:df:ee:bb:26:7f:60:2b:00:1a:91:30:64:dd:76:7d:ab:fb:
         a4:40:7a:d7:9f:a4:d6:d1:70:7f:b6:5e:46:f6:d5:6d:b4:60:
         ae:13:4f:62:ac:5c:ec:64:e4:8e:6a:05:e1:46:c5:a8:2b:a2:
         a6:0f:dd:52:17:0f:36:f1:fa:54:57:37:3b:db:80:bc:75:87:
         72:6c:97:8f:c7:f3:35:d0:76:7f:e5:b9:ed:27:c9:aa:ff:e1:
         5d:f6:5a:24:f7:5a:42:bb:bd:3a:ac:4c:11:78:13:fa:6e:d2:
         a3:85:f2:6a:86:a2:17:c6:00:15:36:9a:c9:34:fe:7f:0d:68:
         52:eb:3c:7e:15:a0:25:89:72:d4:0d:d8:99:62:1d:98:0f:23:
         ef:6a:26:3a:cc:b7:4f:62:f5:61:3f:cb:3a:2d:e6:66:bc:67:
         c6:c3:a8:a0:bc:5b:97:a2:bd:e2:61:60:64:35:b7:6c:30:86:
         11:8f:5d:fb:a7:12:83:18:ba:d6:8f:56:84:d5:97:5f:a4:9a:
         50:6b:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:01 2024 by rpki-client on console-fra.rpki-client.org