Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          HIz3D5TjzRfI0fb0woX7v0zCAuO1D5ZCLnzbou8wX/k=
Subject key identifier:   C2:AF:D2:D9:81:7A:32:F1:42:B7:33:38:35:7C:A8:D2:11:7F:82:03
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       018F6AF60FB29E99F5C4CE78625BAC6F3EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          0F74
Signing time:             Sun 12 May 2024 04:01:01 +0000
Manifest this update:     Sun 12 May 2024 04:01:01 +0000
Manifest next update:     Mon 13 May 2024 04:01:01 +0000
Files and hashes:         1: Eofdxn_tQk0pqXJbWzxT82dq0uI.roa (hash: vtfLagwl88uWE5Rg7ryI+eLrQ80osECT8EhEeIwrzR4=)
                          2: RTbp2C_JufxhSE6E9Z7q0C_-2Nc.roa (hash: XEKwAstyy5njwmxAODyaNM4Bxjm7z3t9Mv5oNBlUal4=)
                          3: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: FFMduLtMQdwMIWFAVBH74CzaujVRTIKImxV7UwKoBEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6a:f6:0f:b2:9e:99:f5:c4:ce:78:62:5b:ac:6f:3e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: May 12 04:01:01 2024 GMT
            Not After : May 13 04:01:01 2024 GMT
        Subject: CN=c2afd2d9817a32f142b73338357ca8d2117f8203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:75:37:08:8b:22:04:a4:b2:b1:ab:98:57:
                    ca:73:b2:2e:51:66:1f:36:65:4e:72:70:a7:e8:c1:
                    1b:92:7c:e4:8a:e3:ae:ff:f8:1b:98:e7:d5:22:ae:
                    10:63:5c:b1:49:93:04:1b:93:3a:ac:a2:42:fd:dc:
                    ba:f4:92:69:7e:f8:4c:45:60:92:cf:aa:73:11:21:
                    ac:30:c9:83:9a:3d:28:fc:54:31:fd:04:1e:ca:a7:
                    d3:1f:6f:ee:6c:a6:d4:ea:d0:0a:38:8d:65:4d:0e:
                    81:39:79:d7:7c:d1:84:2c:c4:bb:81:b0:8c:b6:9a:
                    64:9d:40:2e:8b:2e:a8:6e:15:4c:6d:ac:62:a8:f1:
                    71:23:53:d1:02:0b:37:be:87:f1:51:c9:86:09:f7:
                    dd:85:32:c3:c5:2f:d1:b6:57:85:2c:3f:d4:74:d1:
                    30:92:46:9e:2d:ea:1c:c1:25:e3:a1:57:f0:f5:bc:
                    c1:90:59:80:11:35:5d:25:32:d0:0f:03:03:a1:d3:
                    e9:60:33:3f:98:b5:01:d4:cc:2a:0b:49:84:85:11:
                    58:16:f0:2d:fa:43:34:c6:9c:db:72:99:ee:e4:b1:
                    1b:1b:38:39:58:d4:91:11:34:88:d3:79:b2:6a:86:
                    6a:08:a1:e4:fd:29:dc:5b:42:91:1a:fe:cf:b7:fe:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AF:D2:D9:81:7A:32:F1:42:B7:33:38:35:7C:A8:D2:11:7F:82:03
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:d2:44:52:ac:6a:25:24:4b:54:26:6e:bb:94:72:bc:d6:
         11:92:e8:a7:83:ed:b0:6e:be:a5:9d:f5:a1:51:7d:7d:51:7d:
         e6:39:56:b8:76:16:05:36:01:9f:cf:18:dc:95:ca:93:29:83:
         02:37:87:d6:a9:0e:98:48:db:f9:f3:ce:9e:46:22:ee:da:91:
         c7:0c:bf:2e:af:69:94:7a:9a:6b:b3:ce:2c:76:59:89:7a:79:
         ee:9f:9f:e2:da:30:e7:ad:e7:b2:5c:e4:32:fc:1c:74:54:d0:
         59:27:5b:97:35:ef:4c:80:8c:8e:31:c5:02:13:6d:e7:30:1f:
         2c:72:93:fd:7d:c6:77:06:7e:3f:47:4e:33:bc:71:12:76:83:
         76:e1:e3:1e:34:ad:4a:30:a4:1c:ab:34:64:e0:ad:cb:48:29:
         6d:67:ac:cb:b4:ad:0b:a6:ca:05:9a:53:75:4d:41:45:a7:77:
         bb:41:3b:a9:98:8a:17:ba:5c:e9:58:69:41:45:f8:20:c2:52:
         0a:d7:f8:c6:9d:f4:00:69:1c:18:40:62:a0:be:c7:05:1d:71:
         86:5c:4a:5c:ac:40:89:45:a6:72:1b:32:29:28:54:5f:f7:70:
         22:49:9e:36:22:5f:8e:38:1b:34:5f:b3:fe:77:f2:f0:42:b1:
         57:7b:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:55:33 2024 by rpki-client on console-ams.rpki-client.org