Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          RRjGGsDyxK9a3UTQajJxVZqBsUR9UYQLJGxSS8xxXJQ=
Subject key identifier:   9C:28:0C:D2:49:B7:4B:A9:A0:58:E7:B9:39:07:9D:DA:29:AB:6A:6F
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       018FB1211D7E4167C77BEC21B78E5C7037F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          0282
Signing time:             Sat 25 May 2024 19:01:28 +0000
Manifest this update:     Sat 25 May 2024 19:01:28 +0000
Manifest next update:     Sun 26 May 2024 19:01:28 +0000
Files and hashes:         1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: CfhA6RodFfb4KxRSynIUKyb3XFnefXq11Jib7EgPEzU=)
                          2: siOfQhv_q1PKVfeCyZhOezZpRLc.roa (hash: lvqczXph1cEKIVNBqB8FpTTlLOQNfESBwwewLU0U/qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:21:1d:7e:41:67:c7:7b:ec:21:b7:8e:5c:70:37:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: May 25 19:01:28 2024 GMT
            Not After : May 26 19:01:28 2024 GMT
        Subject: CN=9c280cd249b74ba9a058e7b939079dda29ab6a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:63:14:56:a5:4e:f4:67:2b:f7:f3:60:6a:
                    69:6c:03:43:dd:4a:ea:e2:1a:ef:92:ff:5e:d9:c9:
                    6b:d1:d9:d9:58:fc:b9:a4:7b:db:d7:58:d1:fc:25:
                    e5:6d:09:4c:e8:51:fd:7f:79:1b:aa:c0:9e:63:2b:
                    c2:13:8e:c4:d6:6f:19:ac:0b:55:a9:d6:fa:09:08:
                    1f:f5:3b:f5:54:68:ce:5a:3f:0b:e6:77:a8:a4:b3:
                    8b:92:f3:d4:75:d6:5b:4f:33:0b:6e:85:f5:8c:6c:
                    4c:ea:e1:71:a3:d0:a5:fa:f1:df:d7:e5:fb:c5:79:
                    f8:db:45:7b:3f:e2:00:db:6d:43:75:c2:0e:7f:d7:
                    13:7e:28:58:bb:d6:48:31:d5:c2:30:61:2c:ec:5d:
                    2c:23:62:34:05:7f:1a:2f:fd:d7:2a:6f:8c:93:25:
                    ec:40:82:e4:49:3e:d8:69:ae:74:45:5b:6e:7e:77:
                    7f:30:ac:aa:76:fc:e6:48:54:62:bd:fd:08:d4:36:
                    1b:f7:07:f0:17:89:df:0f:bc:e8:be:89:fe:32:6a:
                    dd:8f:6a:41:77:0d:7f:ec:9c:33:bb:d5:ed:76:9e:
                    8f:b9:62:98:ce:6f:a6:60:88:f5:9c:cb:82:48:3c:
                    a8:99:ba:0c:2b:23:e0:eb:c9:77:33:81:ef:f7:61:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:28:0C:D2:49:B7:4B:A9:A0:58:E7:B9:39:07:9D:DA:29:AB:6A:6F
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:36:87:64:e6:37:a7:79:38:d6:43:59:c6:02:8e:74:52:f9:
         0f:da:c1:31:6b:68:f5:ae:86:69:21:af:99:af:b7:d0:40:88:
         0f:7c:47:b0:43:89:fe:60:f1:ef:a7:da:9b:df:c2:71:f8:ca:
         6a:aa:b5:c5:89:c6:21:9f:c6:59:f9:b2:18:3f:29:3f:b6:14:
         a3:8b:99:ee:11:13:39:0b:98:f6:ae:c0:65:4e:3b:e9:2a:de:
         d2:12:33:c8:e5:cb:67:e9:81:b6:5c:33:e4:ac:23:84:2a:a5:
         6d:04:e7:ea:86:18:0f:87:95:42:cf:fd:d8:26:6c:03:22:54:
         4c:1e:e8:39:e9:39:32:49:71:58:1c:7d:07:7c:44:dc:c7:fe:
         ac:46:b0:85:7a:c1:e3:bc:b0:38:95:dc:8f:59:85:32:c8:e1:
         bf:a6:88:78:01:b0:da:9e:64:58:f7:01:37:5f:e5:a9:10:58:
         d4:37:57:ce:d9:43:05:33:e6:0f:b0:d9:9b:e5:b6:2e:c7:b6:
         df:c3:0b:ab:5d:c0:6f:7a:88:4f:87:ce:2e:59:73:82:cf:e6:
         99:dc:d7:e1:ce:95:fc:4f:95:cf:d5:b6:d8:b4:76:b2:e7:86:
         8b:a4:6e:fd:b8:21:0e:ad:2c:f3:4d:a7:4f:20:3e:82:9a:2a:
         33:07:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 20:47:32 2024 by rpki-client on console-fra.rpki-client.org