Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File:                     1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier:          gATGUwqi7hjoHzxa2hgPeRqam1kVct8eIm2/JKcdLfM=
Subject key identifier:   F7:2C:C1:F4:6F:C0:64:1A:B1:12:AE:77:C0:D6:24:86:20:07:44:59
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer:       /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial:       018F44FBC70680AF3BF743089CBD36211FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number:          0937
Signing time:             Sat 04 May 2024 19:01:42 +0000
Manifest this update:     Sat 04 May 2024 19:01:42 +0000
Manifest next update:     Sun 05 May 2024 19:01:42 +0000
Files and hashes:         1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: psrGLGj6RHHc1BwWjtSuWuHaxZJ512uTc+aUWQs2lDY=)
                          2: MOo_Xp_bK2aAdK5Wek5UjElrTFY.roa (hash: MXVe85r5JFdnbCFKavZD1XEy/Qlf9T5E2nxBfYuGKlI=)
                          3: zD6mW9ybAuJJLOo1VDLuqLqqZ2I.roa (hash: jsrTajcYiWS9v+IrS0azpIUIvvi2tyyM3RZH9wopo14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:c7:06:80:af:3b:f7:43:08:9c:bd:36:21:1f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
        Validity
            Not Before: May  4 19:01:42 2024 GMT
            Not After : May  5 19:01:42 2024 GMT
        Subject: CN=f72cc1f46fc0641ab112ae77c0d6248620074459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:c0:e7:ee:6a:0f:fa:03:cd:fd:35:98:e3:
                    4a:dd:16:0e:37:ae:02:3f:26:c1:ad:ec:e9:11:10:
                    23:0a:bd:b2:b6:0b:75:b9:21:7b:f8:84:52:d7:27:
                    7c:2b:eb:2e:d7:a7:7a:24:32:2f:38:c2:e7:70:83:
                    78:93:46:43:c4:a5:c4:4f:40:75:fc:72:61:1d:b3:
                    36:63:c5:04:5d:5c:3f:04:3a:b3:b4:71:b4:bc:2a:
                    b6:85:aa:2b:f5:a7:68:a2:31:6f:93:9e:d8:a7:c3:
                    4e:ec:69:03:80:55:2e:0c:d7:e3:80:f6:2d:1d:7a:
                    0c:e2:bc:34:f8:43:4b:04:be:29:0f:31:5c:84:45:
                    91:d1:6d:c5:bb:e8:cc:4c:be:f4:c5:ee:fb:8b:b0:
                    3a:0d:d5:0c:96:e9:d6:43:42:60:8c:fb:68:7e:4f:
                    e8:17:31:5f:a6:fb:5a:bf:b6:11:ac:7c:2c:16:77:
                    f2:d4:aa:21:3d:17:9b:02:ea:cc:7c:cc:ce:c8:d3:
                    32:95:fb:55:bc:0d:d3:91:56:6a:25:bd:86:6b:52:
                    42:d9:0e:b0:33:bd:61:bd:38:1a:86:f7:be:3b:d1:
                    c2:28:f9:e2:7d:2f:58:20:84:41:b5:fd:23:33:48:
                    a1:75:5a:48:e7:18:9f:2c:a1:a4:ce:f8:91:39:5b:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:C1:F4:6F:C0:64:1A:B1:12:AE:77:C0:D6:24:86:20:07:44:59
            X509v3 Authority Key Identifier:
                keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:39:c3:94:7e:20:8e:25:0b:f6:a9:11:d3:a3:ac:a5:86:bd:
         d6:b9:21:3e:ca:5a:b7:0f:df:d8:b3:61:7d:d3:91:a9:59:1b:
         10:c0:da:e6:88:8c:2b:9d:bb:23:ee:a4:98:b2:81:5c:e9:4b:
         90:24:20:76:63:5c:35:62:ec:9d:7c:ee:54:5b:4a:f2:29:93:
         fa:30:76:44:d2:4f:90:0f:15:31:a6:2c:35:1f:55:72:7e:32:
         b5:d6:09:26:d8:e9:70:0f:f1:0c:b4:93:e3:1c:ed:8a:b4:fc:
         18:d7:e9:c1:fa:4f:0c:d0:de:00:b4:74:0f:67:5c:be:9e:bd:
         37:45:a9:96:e5:eb:f8:a9:c6:73:6e:64:e4:fe:4d:33:04:e0:
         e7:a4:30:f7:e9:d0:e2:67:a1:5e:0c:e7:c5:3d:79:de:41:07:
         45:a1:88:da:ef:48:83:c0:26:82:d5:10:4f:1c:e1:d3:2e:fc:
         58:85:4e:91:b5:04:c8:71:8d:22:15:9b:a5:d0:8f:5c:07:08:
         9e:ff:f5:bf:14:3c:7f:f2:61:a5:f0:0f:86:a7:d4:57:20:a5:
         63:16:cc:8a:39:f7:f3:d2:c9:38:0c:ff:3c:63:d5:24:f2:32:
         4e:17:d8:70:5f:59:fb:73:28:e7:9a:b2:9f:9f:7d:f2:27:05:
         b8:e3:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:13:29 2024 by rpki-client on console-ams.rpki-client.org