Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File:                     tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier:          DnhMvMHN7xxZjGNZGK4Q4DwTqtHbPZuNK3UBSoh7m1s=
Subject key identifier:   82:65:53:B4:3D:A0:3E:09:63:03:AA:68:72:58:AE:06:76:52:D3:0F
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer:       /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial:       018F87482D524176B2B306A1B4F3AFF589C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 16:00:05 +0000
Manifest this update:     Fri 17 May 2024 16:00:05 +0000
Manifest next update:     Sat 18 May 2024 16:00:05 +0000
Files and hashes:         1: q-k9OJB6lmDShSUgxkNbYP1QWs8.roa (hash: iXXi7ZaE3R6JSv2pUC5HJqMyqRPg0oc6N/N2GVVLhpw=)
                          2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: Eh27yc/EWm+HNZmueVXSrf/S2TRVgpZrFfdkDJa4BeI=)
                          3: z2bOzUS6EhIz-F1lyfgX3-R7rqo.roa (hash: BCesQKsy4mGnSOy9PO/gsy6/b7djGAZq8T38MKJuKhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:2d:52:41:76:b2:b3:06:a1:b4:f3:af:f5:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
        Validity
            Not Before: May 17 16:00:05 2024 GMT
            Not After : May 18 16:00:05 2024 GMT
        Subject: CN=826553b43da03e096303aa687258ae067652d30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:bc:71:c9:a9:f8:24:46:dc:3b:95:18:15:
                    de:1b:ae:aa:b3:5e:a0:e0:62:7b:cd:d3:d5:2f:22:
                    ad:63:92:86:de:1e:6a:74:33:2b:5b:67:d7:df:c6:
                    d3:0b:da:af:cb:57:8e:98:08:0c:81:d5:cc:1b:3d:
                    d2:7d:de:29:e3:4e:6e:38:e1:8b:23:0a:06:a2:a7:
                    17:e7:a8:ab:20:c4:3a:b8:10:a1:da:19:91:a4:01:
                    4f:0d:c1:90:4d:7c:b6:3b:00:78:e3:dd:f7:bd:ca:
                    a9:31:6d:d6:7e:5d:61:9d:11:b1:db:6f:eb:59:e7:
                    12:31:cb:98:51:50:70:70:59:b9:47:ae:69:c6:d5:
                    47:a7:7f:09:92:bb:c3:12:1e:66:17:7b:94:62:d8:
                    77:75:f9:4a:32:1b:7f:68:87:13:59:74:67:35:ce:
                    1f:8c:00:87:99:54:f5:08:b7:1a:03:ec:ce:46:86:
                    ef:65:25:15:92:f5:eb:1c:87:92:a3:68:37:c4:c8:
                    f1:08:7a:92:74:cd:c6:80:a5:b9:ef:5c:5e:57:87:
                    12:23:04:a1:f0:fa:1c:58:83:9e:d5:d1:4a:c1:bc:
                    8c:d9:3a:cd:21:cd:07:43:1d:22:0e:14:d6:af:8c:
                    c2:b4:c2:2e:33:47:52:f1:ef:e6:5f:3a:4d:c2:f4:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:65:53:B4:3D:A0:3E:09:63:03:AA:68:72:58:AE:06:76:52:D3:0F
            X509v3 Authority Key Identifier:
                keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:66:57:2b:62:a8:4f:77:e9:c7:f7:dd:e1:5b:a5:09:bb:
         b4:bf:96:35:50:04:99:ac:ad:68:66:f2:bb:72:76:74:c3:6d:
         fa:b5:67:34:8f:a5:a3:9e:37:18:c9:0b:9c:e4:28:07:9b:34:
         b7:7f:c8:87:36:a2:c3:4f:68:da:91:42:04:d0:3e:8f:25:6f:
         09:ab:21:90:74:08:1e:c8:a5:d0:52:ad:73:4a:7c:09:25:3f:
         78:83:b2:12:85:dc:3e:b1:3e:e7:bb:f2:0f:96:d1:7c:5e:cb:
         56:4c:20:de:22:f4:78:d0:25:a5:a4:94:64:68:bc:95:38:4b:
         82:51:b3:7c:47:14:fb:f2:22:c8:7e:2f:e1:44:d9:83:9a:7b:
         40:5e:5a:8d:09:93:df:ea:70:00:11:b0:c0:74:c1:79:fa:4c:
         b6:34:93:a9:64:e8:68:3d:5a:5c:aa:92:97:32:72:6b:de:9f:
         a6:c5:7b:e5:53:02:40:53:87:75:cf:44:38:9a:b9:fc:f2:df:
         2c:a0:b1:4a:64:28:7b:fe:5f:f6:00:41:df:a3:ca:39:bb:9c:
         2a:53:7d:d8:9b:61:7c:c1:14:f2:3c:4d:af:05:89:df:e7:c8:
         c5:cf:f6:c7:9f:c2:89:c0:68:b9:71:6f:46:f7:f4:a1:b2:98:
         47:0f:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:49:36 2024 by rpki-client on console-ams.rpki-client.org