Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          fVMVjjr45xMUnDu+8jEJ/OBcfRzXhch/Fe6H7UR3x9A=
Subject key identifier:   6F:73:BA:25:23:F7:33:3C:25:BB:D4:93:D3:BD:A7:3A:F1:C7:B9:B3
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       018F87ED1030862430C74AC2580D0A456D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 19:00:11 +0000
Manifest this update:     Fri 17 May 2024 19:00:11 +0000
Manifest next update:     Sat 18 May 2024 19:00:11 +0000
Files and hashes:         1: 3z4SeykjCCXuXI_B39fSzO8HBQI.roa (hash: 4U5ljk+C1aHDYQNrbzD63aTk0rilEKbuygrcstLfheo=)
                          2: McFpL3IbEKD9V-T_qTJ4J5m9vjI.roa (hash: BQ2UrXsl23EJls2ba5DouBa0dnPUf2+4nTwNIq+Tz4o=)
                          3: QQJ0j5j5AnA6ydZp6BJdSBwO-6U.roa (hash: AqyLRDcS6v411H2b3Rp3/wJgyDUaYKSjEdnTw0L9THk=)
                          4: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: oH1yaUOAhO001OX/8vJU9meCxlAbLWgXsB/H1DmWE/I=)
                          5: Uy8IJFVP6flp5UuB_V7Kc6ccQz8.roa (hash: CoqbUy7SsN6RZHBdADGGD7WYo4THGlvTX/UihCrZGHY=)
                          6: WDZdRqjdO2o_bmK0QhdkKVvtuUQ.roa (hash: v83Qoio34xrtZ3voSPHEtABZwMLsmzwc1MdlxsVS10Y=)
                          7: Y_QRZTDoALeI7BPATdEKdOxjKuA.roa (hash: 72TNBbukPaxyxMDzKKBOwtDeNChWuMSwa3opxn4rqWc=)
                          8: zM8O5WnEpFRBGRSwJUBuHSweYf4.roa (hash: 1pdH6h7ZMXpeHMmKV4Kx+CccHi8u3oK0iwhU+dFOStE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:10:30:86:24:30:c7:4a:c2:58:0d:0a:45:6d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: May 17 19:00:11 2024 GMT
            Not After : May 18 19:00:11 2024 GMT
        Subject: CN=6f73ba2523f7333c25bbd493d3bda73af1c7b9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:4b:b0:98:b2:bf:6a:e2:62:e7:68:b6:04:
                    4e:24:26:6e:45:ed:ca:7d:9c:50:9e:5a:49:5f:0b:
                    e7:d2:07:a9:6d:a7:a8:6e:b6:b4:60:f1:61:ac:56:
                    c6:68:5a:87:2c:bf:9c:81:31:e8:4e:21:f6:2c:d2:
                    f5:dc:d1:a7:13:d3:09:d6:56:75:10:5c:b2:1a:ac:
                    f4:20:c1:38:55:6e:98:37:e0:cc:dd:73:d2:11:71:
                    df:69:84:66:63:0b:fe:47:33:f2:b2:87:0b:f9:2e:
                    01:2c:6e:cf:ab:b2:6c:ac:42:b3:b3:4d:93:31:dd:
                    c1:95:22:26:3a:c0:a6:17:34:d7:2b:3b:94:e1:cb:
                    8f:ef:a7:a4:3b:21:02:fe:90:30:eb:15:6f:25:c1:
                    55:5c:65:d8:a1:26:9d:c6:04:6e:dc:ac:1e:8e:0a:
                    9c:19:62:2a:46:97:f0:ff:8e:5c:c4:79:9f:09:02:
                    80:fd:0a:fc:b3:73:1e:74:ee:57:c9:96:c8:06:db:
                    d7:cf:d2:53:a6:16:82:3e:2c:24:14:1d:43:b7:25:
                    cb:66:18:ff:f6:d8:24:df:d7:c7:65:ab:12:c5:e8:
                    39:9d:83:9d:ae:f3:08:20:77:6a:aa:72:a0:eb:9c:
                    e6:4b:f6:76:25:fe:e8:43:83:2e:8a:96:77:78:69:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:73:BA:25:23:F7:33:3C:25:BB:D4:93:D3:BD:A7:3A:F1:C7:B9:B3
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:a8:5b:e6:56:d4:79:46:9a:68:39:11:1c:2d:de:df:8c:
         53:8f:0b:bb:81:22:31:a5:9c:b4:1f:f9:b1:5c:0e:f6:bc:e9:
         64:60:23:39:ba:87:fd:46:29:ba:24:d0:b1:18:05:b1:fb:83:
         1e:98:9f:d2:2b:37:a5:0a:f6:7f:89:76:69:8c:c0:47:0c:40:
         4a:56:5a:65:d4:5a:95:75:ce:47:6c:3f:46:9b:69:38:e6:2f:
         b9:1e:3a:a0:d4:7c:94:fb:fa:7e:4d:9e:3b:40:4e:b2:41:63:
         2a:da:55:25:f6:bd:74:5c:b9:7c:76:29:e9:d1:cd:06:8b:a9:
         14:ca:3a:f7:07:5c:5b:77:ac:77:cc:44:07:9c:7c:82:c5:a9:
         05:95:7f:fc:8a:d7:26:fb:fb:c2:3c:5e:5d:87:44:31:41:59:
         b8:e4:b9:c7:9a:70:70:91:e5:2a:71:6f:e4:5d:88:fd:c4:f4:
         cf:64:5b:5f:d8:0e:39:9a:18:ad:79:dc:fb:db:d1:40:58:fe:
         6d:7f:ab:48:72:d2:ad:21:52:47:28:cd:22:9d:8d:ea:df:8a:
         0f:c5:72:be:3b:85:bf:b5:c4:f0:7d:73:d3:39:34:db:99:63:
         b5:71:05:30:e5:d0:77:38:69:d3:d0:ec:8b:1c:52:3e:91:03:
         4d:c0:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:59 2024 by rpki-client on console-fra.rpki-client.org