Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File:                     to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier:          eLQIwWT5M5Clp97cNuifqEJFUZFv7vnkbA5s2u8w+vA=
Subject key identifier:   B8:66:D3:84:0F:69:97:43:DE:39:84:A7:22:F5:71:55:18:E6:12:FD
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer:       /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial:       018F86A430D0782E829C1CE5548971B20422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number:          05D8
Signing time:             Fri 17 May 2024 13:00:58 +0000
Manifest this update:     Fri 17 May 2024 13:00:58 +0000
Manifest next update:     Sat 18 May 2024 13:00:58 +0000
Files and hashes:         1: AhpK2xntz_ynrDrqkp1KAFkuHsw.roa (hash: 2Viq9GcBbZAbkyKN2fn02zAQlRDG5a+TKEcLy4ubcjc=)
                          2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: Jmm0rkIvHML/cdhH4W2nMInFJkHP/AYw6FEa8WL5OSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:30:d0:78:2e:82:9c:1c:e5:54:89:71:b2:04:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
        Validity
            Not Before: May 17 13:00:58 2024 GMT
            Not After : May 18 13:00:58 2024 GMT
        Subject: CN=b866d3840f699743de3984a722f5715518e612fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:1b:21:18:4a:fd:fb:b7:d1:d4:34:c7:69:
                    5d:8f:b4:d3:f0:1c:db:fe:7a:f5:e0:fc:37:85:d9:
                    fb:6d:2f:05:eb:22:a5:67:a2:40:30:a1:de:99:57:
                    d4:52:bb:b8:f9:4a:61:ab:a9:3a:cd:a8:c6:5f:af:
                    b5:bc:12:9f:a5:ad:e1:22:99:f5:4e:18:12:23:f2:
                    2b:83:b6:45:fb:fd:cb:fd:b7:d4:8f:23:81:86:7a:
                    76:68:4c:a6:ad:e1:d8:39:a6:98:03:9a:82:15:24:
                    da:81:6e:e6:2e:c6:e8:a8:80:12:86:f5:cb:a9:b4:
                    1a:d8:01:c0:13:7d:bc:9e:b6:c6:5e:01:3a:a5:b5:
                    0e:3d:b1:59:70:32:78:20:13:e1:8c:b9:7d:23:d8:
                    2b:47:b1:22:55:71:61:d7:7d:0a:a6:28:8e:8f:e3:
                    f3:ac:bb:f6:60:2a:2d:43:0d:89:d9:75:fb:85:c2:
                    97:4a:12:ff:67:67:95:78:ca:75:79:d2:82:81:e7:
                    3b:78:eb:a3:7c:79:89:32:d4:04:78:fa:c1:7c:70:
                    cf:3b:54:40:6d:1a:1a:b9:8b:ad:5f:ce:dd:0a:01:
                    1d:83:8f:d5:c9:cd:5e:26:8e:56:b8:9f:6a:ce:94:
                    f4:8c:f8:8e:80:78:f7:5b:ec:9c:3b:24:e5:e8:04:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:66:D3:84:0F:69:97:43:DE:39:84:A7:22:F5:71:55:18:E6:12:FD
            X509v3 Authority Key Identifier:
                keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:dc:84:bf:7e:9e:2a:f6:c0:20:b7:70:57:c1:30:4a:80:
         ba:f4:66:67:92:ee:f0:75:ec:65:31:5e:e6:d1:be:cd:69:95:
         3d:ec:bb:ab:5a:24:a8:66:42:89:b9:a7:c6:09:0d:e0:80:6c:
         5c:02:8f:15:01:56:37:cc:ef:63:23:13:9d:29:46:b1:b5:5a:
         37:ec:ea:9d:27:29:78:f1:b6:1b:cf:7b:52:da:ec:fd:27:6f:
         bf:cd:00:77:85:3c:df:54:36:c0:b4:bd:c2:c3:c6:3c:bc:c4:
         c4:41:4d:f4:7f:f4:0c:d2:90:bd:50:86:61:8d:4f:da:d2:9c:
         dc:bc:17:30:52:0c:c1:7c:46:51:a2:37:35:91:54:94:c3:3f:
         08:6f:b0:98:e1:bf:48:2f:87:c6:ed:b1:78:57:73:06:1b:a4:
         85:29:23:5f:f5:bd:1a:e9:a6:be:3c:6b:15:38:72:93:9d:1a:
         5e:10:19:bd:c1:b6:37:36:ce:9e:9e:35:54:de:1b:05:cb:79:
         c4:81:d3:d9:3b:1f:c8:9f:bb:75:bf:fe:f4:63:bf:61:18:c2:
         2f:57:4c:65:cc:ee:46:b5:c1:eb:4e:ea:bd:70:7d:27:d6:5a:
         b3:c5:14:83:65:93:c6:c5:48:d9:80:aa:e0:0a:21:30:5c:c1:
         ff:73:2e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:50 2024 by rpki-client on console-fra.rpki-client.org