Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File:                     TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier:          DYxpYoBJuZGz8/GN1OHPOIFL6k8G6rR/XVXGgtS8JpU=
Subject key identifier:   54:0A:8E:64:B1:15:9E:C2:09:D1:9F:7A:74:F5:03:56:1A:00:B7:B2
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer:       /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial:       018F882450BBD1BB303EAAB2172D0002EF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:32 +0000
Manifest this update:     Fri 17 May 2024 20:00:32 +0000
Manifest next update:     Sat 18 May 2024 20:00:32 +0000
Files and hashes:         1: DJuIpVNbhcOiYCYZXfPvmgzY6tY.roa (hash: r4dsVrnxjyCxUOypIBMXhXp+xtJ8jVDD+/zO29UDDpI=)
                          2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: llK26K2+HX13A4CJ/ecBVelnu7cltSQIpjLKllUVABQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:50:bb:d1:bb:30:3e:aa:b2:17:2d:00:02:ef:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
        Validity
            Not Before: May 17 20:00:32 2024 GMT
            Not After : May 18 20:00:32 2024 GMT
        Subject: CN=540a8e64b1159ec209d19f7a74f503561a00b7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:df:17:8e:5a:7a:db:15:8c:e5:9d:38:64:
                    c6:5a:22:37:35:cf:fa:6a:4b:7d:8d:85:96:38:34:
                    eb:71:42:5d:83:a1:f0:8d:d4:09:59:03:a4:3e:67:
                    bd:85:a2:a1:d5:7c:1d:a6:a7:55:07:d9:ac:c0:91:
                    bf:14:e8:3d:b0:a6:ab:d0:ac:fa:ec:30:52:da:6e:
                    b0:ef:ef:02:5d:15:bd:00:2e:ce:56:24:5f:f3:c9:
                    45:e4:6c:f9:4b:f8:a1:97:8d:55:a3:b8:8e:23:57:
                    32:cb:b7:a2:ab:bf:d5:73:59:a9:f1:c7:44:bc:c2:
                    d7:a4:d6:44:8b:eb:86:82:b3:46:ea:5b:be:89:d7:
                    95:9e:95:0a:db:ff:71:82:ec:bd:56:c6:ee:0d:7c:
                    6e:df:c8:8f:b8:f7:e2:85:33:a7:f8:83:7b:5d:af:
                    f2:9d:10:f8:c1:e4:8d:b9:49:2d:5d:ec:a0:f7:91:
                    2c:a2:30:d2:6b:ec:4d:fe:cb:de:8f:27:94:81:a8:
                    36:a3:1e:4c:98:0d:04:a2:bf:b3:73:c2:bd:84:eb:
                    b5:a5:f0:c2:b9:7b:56:9d:4a:e5:a4:40:f0:90:39:
                    cc:bd:f7:eb:05:7b:e3:23:59:a7:3f:aa:72:1a:c5:
                    93:52:c8:3a:78:37:25:80:7b:90:b3:5c:8f:5a:ea:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:8E:64:B1:15:9E:C2:09:D1:9F:7A:74:F5:03:56:1A:00:B7:B2
            X509v3 Authority Key Identifier:
                keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:c4:9f:d0:ef:a2:70:83:8d:c4:d7:6e:0b:a0:dc:98:31:
         22:84:a5:65:a9:e0:97:4f:cf:8d:b3:4d:50:72:e9:49:3e:a4:
         c3:f2:05:0c:37:01:44:29:6c:db:b0:f1:83:72:5c:b1:93:4c:
         45:39:89:27:73:a8:d8:96:fd:76:7e:56:00:68:2a:d7:dc:b4:
         5e:d4:a1:fa:11:f5:c3:1e:e2:0d:68:14:f0:26:5d:8d:00:51:
         fd:54:51:e9:94:26:fb:9e:4f:7d:6b:d4:fd:2e:79:fe:d0:6b:
         0a:be:46:2b:3e:db:76:08:82:e4:69:c5:8d:6f:29:85:ad:bd:
         02:77:53:2e:97:37:cc:38:70:be:b5:49:7e:2b:ef:09:75:e9:
         81:53:2a:cf:81:8f:df:40:fd:f2:cc:c8:3d:da:8f:0f:7d:61:
         7a:85:3a:7b:e4:82:b0:40:2d:07:7a:4b:e3:5a:61:9a:35:be:
         9f:d7:6a:fd:08:c5:9a:9c:cd:2e:04:41:a2:c8:c2:1f:49:10:
         97:5f:90:f4:09:6f:b4:0b:10:cc:59:54:9e:3a:2e:3b:99:a1:
         fd:d8:ce:85:39:29:fb:0b:97:b2:fe:03:a1:9f:64:63:74:5a:
         f9:7b:1d:65:69:a8:de:cf:01:ee:53:34:08:c0:8c:a4:5e:5b:
         50:8b:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:47:16 2024 by rpki-client on console-fra.rpki-client.org