Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File:                     TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier:          lQ8JVrwshAwpUyCPyp4KiwEYXZaPyZ5Hc/TsWZyhkrs=
Subject key identifier:   0E:3B:51:8B:D0:9A:55:B6:54:1C:21:E9:EA:33:30:17:4E:13:D2:08
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer:       /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial:       018F874B19957837E26C7B6444DA308EAB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number:          0F3D
Signing time:             Fri 17 May 2024 16:03:16 +0000
Manifest this update:     Fri 17 May 2024 16:03:16 +0000
Manifest next update:     Sat 18 May 2024 16:03:16 +0000
Files and hashes:         1: 213hPm3rntXZnFqf0ArcGKBPHSQ.roa (hash: ZlnzIlTjmXnGBAlCiPLKLDwIaSNrpwUHnTnA9jyzafg=)
                          2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: JgvR35WM83XQTF3yJeT5Qz/UCBIhwg08GLHILrgQkWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:19:95:78:37:e2:6c:7b:64:44:da:30:8e:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
        Validity
            Not Before: May 17 16:03:16 2024 GMT
            Not After : May 18 16:03:16 2024 GMT
        Subject: CN=0e3b518bd09a55b6541c21e9ea3330174e13d208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:53:40:1d:53:30:8d:f6:09:3c:9a:ca:7c:
                    09:1a:d6:b5:6f:5f:c7:9d:92:21:84:1e:58:c7:bc:
                    19:dc:ff:5f:a6:59:13:38:3b:86:98:bb:e3:6f:dc:
                    44:c1:a8:72:76:9f:8d:19:a8:27:78:74:a6:e2:aa:
                    1f:04:28:56:5c:fb:0d:45:27:30:32:48:39:18:ae:
                    52:0a:2f:a3:36:97:4d:4e:18:e0:1c:ef:af:08:2d:
                    9d:25:f9:8d:74:b4:51:db:5b:40:75:39:d9:b5:b2:
                    8a:64:4d:0e:d1:dc:c6:d0:31:43:2b:f4:64:e8:9b:
                    1b:3f:1c:eb:23:cc:5f:8b:64:75:a9:48:bd:df:f1:
                    b8:da:20:11:c4:9a:30:06:1a:38:3a:44:61:e7:54:
                    99:6b:5b:0b:23:11:34:e2:5f:42:d8:ec:23:cf:fd:
                    a6:ac:4f:19:ac:ef:f3:d5:31:9b:a5:47:6c:da:4a:
                    9d:b6:73:f6:42:da:f5:df:d4:1b:55:98:92:4d:af:
                    02:40:4a:bd:9a:25:06:55:a9:13:96:70:d2:22:22:
                    38:31:c8:1e:33:00:72:81:a2:c3:b4:0b:0d:4b:cf:
                    df:27:31:9f:d7:99:07:97:e6:dd:f2:b9:67:ca:38:
                    76:fb:2f:0e:7b:ce:e7:24:73:07:98:48:9e:4f:13:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:51:8B:D0:9A:55:B6:54:1C:21:E9:EA:33:30:17:4E:13:D2:08
            X509v3 Authority Key Identifier:
                keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:d2:09:84:be:66:68:5e:8e:6c:c9:02:a5:45:d0:fc:c5:
         35:5a:58:c7:33:ba:07:03:c9:1e:34:76:ed:ac:81:f8:79:e8:
         5a:41:dc:3c:24:7b:23:31:77:bb:af:2f:86:22:3b:0c:d4:f0:
         0d:fa:4e:bf:32:6c:6b:9f:0f:54:2d:11:08:a4:08:bf:cd:f5:
         2a:6d:19:1d:8d:81:38:1a:2b:f1:5f:48:77:2f:5d:40:11:9a:
         46:c6:60:39:3a:a1:95:f8:32:52:eb:2e:f3:0a:af:72:bf:a4:
         9c:d5:7e:a9:2a:d8:cf:f5:7b:86:97:e8:bc:10:68:ae:e2:b4:
         a6:01:69:5c:58:88:de:e0:af:df:a7:18:2b:e3:75:7d:a3:d2:
         f8:cc:d4:66:ea:6e:78:83:d7:66:e2:15:9b:17:48:4a:84:b6:
         c8:ef:9f:81:32:25:ec:33:a9:15:2e:7f:62:14:e4:f4:11:6b:
         46:f1:a3:8b:b1:d6:00:c5:4d:ff:22:c3:ce:d1:15:b5:b4:71:
         b2:26:a8:84:6f:36:ea:62:3a:61:5d:17:fd:47:ce:59:de:d6:
         56:d1:68:c1:45:a6:38:0c:84:c6:ea:e7:cc:8f:31:cb:af:4c:
         68:6b:89:a7:8f:ca:2c:31:a9:11:cf:81:d7:3e:8b:74:fa:40:
         a2:d6:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:35 2024 by rpki-client on console-ams.rpki-client.org