Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
File:                     TORqOpla2FRclax7aSMcpiT8iJM.mft (raw, json)
Hash identifier:          FfPXpRezk9wi7sNo1+VeXZT+5UOs5cWFIIP+1Uqn48I=
Subject key identifier:   30:8C:89:35:05:B2:31:CF:25:FB:31:6C:CC:26:32:8D:6C:93:23:49
Authority key identifier: 4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
Certificate issuer:       /CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Certificate serial:       018F8748773EF7E5A0E35880FC092A1FCE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
Manifest number:          0C5D
Signing time:             Fri 17 May 2024 16:00:24 +0000
Manifest this update:     Fri 17 May 2024 16:00:24 +0000
Manifest next update:     Sat 18 May 2024 16:00:24 +0000
Files and hashes:         1: TORqOpla2FRclax7aSMcpiT8iJM.crl (hash: KhUIGscRBNOlkhhuXNwikDuQKpimZEuYNKx3bsw1R18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:77:3e:f7:e5:a0:e3:58:80:fc:09:2a:1f:ce:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
        Validity
            Not Before: May 17 16:00:24 2024 GMT
            Not After : May 18 16:00:24 2024 GMT
        Subject: CN=308c893505b231cf25fb316ccc26328d6c932349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:53:c3:14:06:c7:d5:1b:00:fa:4a:2d:52:
                    b7:a8:1a:76:61:d2:ab:11:9e:dc:a0:e8:c3:88:e4:
                    58:5f:f5:5a:fb:3a:f4:c7:56:4e:e8:1a:81:26:a3:
                    43:4c:be:d0:47:95:03:43:bb:7d:3b:06:f6:11:41:
                    38:e9:24:25:78:0c:1b:7e:1b:cd:d0:1f:da:55:41:
                    e3:3a:df:ef:e0:6c:97:8b:06:6c:ec:51:d4:6b:30:
                    31:bc:18:2b:a3:8f:5f:8e:da:07:f6:b5:f4:2d:5e:
                    35:76:aa:e0:ef:b0:9f:17:f4:bf:7c:46:d7:03:51:
                    35:cd:65:4c:61:f6:db:53:0e:ef:6e:1c:23:e1:14:
                    41:5a:8f:7d:08:e8:e5:76:08:6d:74:f7:72:a9:4d:
                    52:dd:53:4c:2a:b1:67:5a:47:4d:6e:a1:de:fe:55:
                    7b:2d:49:ac:61:91:8d:ad:90:91:9a:04:42:bd:df:
                    70:cd:2d:a8:70:5d:0c:f1:f1:d3:88:8d:5c:fa:a8:
                    d9:46:fe:60:b7:c8:37:73:a5:7a:05:c8:87:87:91:
                    8d:98:be:60:17:64:d8:87:b0:fc:28:fc:49:67:ed:
                    07:55:9f:d4:a5:9c:57:c9:46:ce:5d:02:4a:c3:84:
                    b7:72:cc:b3:59:35:e1:7f:79:d7:66:ea:14:9f:91:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:89:35:05:B2:31:CF:25:FB:31:6C:CC:26:32:8D:6C:93:23:49
            X509v3 Authority Key Identifier:
                keyid:4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:92:11:44:fa:e8:53:e8:83:4c:6a:a9:b4:07:9e:95:76:74:
         f0:48:86:26:78:ce:65:dc:8d:8a:0e:d7:c4:48:81:c8:70:90:
         13:f5:5b:a2:80:c2:47:37:32:80:7b:af:e3:ab:d0:24:9d:63:
         1d:ad:04:c8:e8:0d:cd:ed:cf:32:05:b5:e6:7e:24:38:8e:ea:
         88:44:5c:e6:00:e0:5a:2b:2a:a2:ea:94:e6:73:51:63:a8:d3:
         9f:d7:5c:d2:a4:a4:8c:ed:57:63:23:df:f2:df:cd:37:c9:b1:
         79:ef:0e:f0:f3:aa:68:29:cf:bc:10:bc:0c:7b:69:ec:07:14:
         67:39:e4:eb:93:e4:92:7d:d0:8f:36:1d:52:ce:57:85:46:c1:
         b3:77:d7:f6:6e:6b:e7:f0:f2:e9:31:de:13:5c:3d:ff:c1:1c:
         4e:74:1b:73:0d:62:4c:05:c3:8a:db:fe:12:42:ba:5a:92:15:
         26:35:ab:f9:7a:5c:ce:b5:d4:2a:e7:6a:b7:6c:06:58:b3:38:
         a1:9a:e8:fc:54:b7:5b:f1:e7:97:44:0b:e6:41:4c:95:6a:93:
         45:5f:ae:0f:3f:a8:8f:4a:93:85:90:7b:dc:d7:9e:a6:50:16:
         87:6c:b8:b3:5f:7a:ba:73:88:69:ed:6a:9b:2b:ba:5f:a5:64:
         f1:17:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:57 2024 by rpki-client on console-ams.rpki-client.org