Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File:                     TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier:          wq55SfbR5qqqcfOIhzgennWGX2LkH9Tddf7Bh/SU3u8=
Subject key identifier:   5C:E0:24:06:EC:18:03:F6:A9:BB:D6:72:8B:B6:BA:27:5E:E8:A3:34
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer:       /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial:       018F86A3D76AFBAC3F8EA62A678D4E5582E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number:          0873
Signing time:             Fri 17 May 2024 13:00:35 +0000
Manifest this update:     Fri 17 May 2024 13:00:35 +0000
Manifest next update:     Sat 18 May 2024 13:00:35 +0000
Files and hashes:         1: 7-6AcILp-kyF0RUhfOrfuN9UTZ8.roa (hash: XFdrowdt2/egNrtK01/uj5bLmFB8vpFN4q5SkdTDobI=)
                          2: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: emNM6QJpxi62CP2dHtoiASVVH+TV/IQMxi+3/MlZUAA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:d7:6a:fb:ac:3f:8e:a6:2a:67:8d:4e:55:82:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
        Validity
            Not Before: May 17 13:00:35 2024 GMT
            Not After : May 18 13:00:35 2024 GMT
        Subject: CN=5ce02406ec1803f6a9bbd6728bb6ba275ee8a334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:0c:36:3e:b3:0e:bb:b2:23:1f:33:54:68:
                    e7:24:2a:16:b4:04:ce:a2:07:77:76:d5:ef:fd:37:
                    81:bf:a9:6d:ef:a0:f0:f9:90:f2:77:73:24:22:7d:
                    4a:1a:4f:58:6a:9c:68:8d:31:84:2d:63:e6:c1:3b:
                    32:56:42:fc:6e:88:7f:e0:6b:1c:c1:52:c4:8b:e1:
                    2b:d2:78:99:3a:14:18:d3:1e:21:c7:e1:32:e0:b6:
                    13:36:5b:c5:37:23:2f:45:62:d7:5b:f1:53:30:ef:
                    8b:82:ff:5d:3a:38:d5:c9:f4:9f:bf:d7:c1:75:e8:
                    cf:c6:f9:b3:18:df:1d:ab:27:29:e5:98:f3:75:a2:
                    b6:4c:98:d6:4b:df:fe:51:d1:c5:7c:b9:62:94:d4:
                    dd:37:ab:7f:cb:c4:6a:61:b8:16:83:6e:63:da:79:
                    f1:22:4b:e9:44:f0:29:07:2c:e7:e2:23:d3:d8:3c:
                    a5:43:7c:9a:63:39:f9:d9:f9:e9:19:d8:22:6e:30:
                    b5:b7:30:e1:5d:ab:bd:81:1f:96:ac:4a:95:3d:dd:
                    02:8a:5d:d2:9c:59:69:a0:e4:6c:19:f4:c3:f6:1c:
                    ec:cc:bf:03:3a:bc:0b:51:ba:ae:7e:05:18:1d:37:
                    81:69:77:8e:0c:4a:23:57:27:58:1e:95:b7:a6:24:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E0:24:06:EC:18:03:F6:A9:BB:D6:72:8B:B6:BA:27:5E:E8:A3:34
            X509v3 Authority Key Identifier:
                keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7d:de:84:21:51:6f:f9:92:89:93:b8:ae:b8:af:39:79:76:
         96:4e:91:57:b4:c7:d3:74:c5:4b:28:d0:b3:84:69:c3:65:36:
         bd:50:a5:12:d8:c3:32:ed:9b:19:89:f1:fe:61:c4:0d:4f:85:
         b8:79:2a:ea:c7:9b:8a:b1:6f:f8:b5:ed:30:b7:c4:2a:d2:48:
         33:c9:76:9d:5d:36:b2:af:a6:c4:42:dd:d8:de:20:9a:09:5b:
         61:ba:66:a3:d4:7d:ae:9b:ca:5b:84:91:1c:52:c5:74:fd:38:
         17:b9:56:76:3e:85:3a:cf:f3:29:63:89:8a:a2:7d:76:e1:a1:
         85:69:bf:0f:6f:29:81:61:a8:76:3e:ed:e7:8a:9b:df:fd:ec:
         41:5d:09:f3:fa:31:f5:30:2b:da:c8:0b:01:c7:af:30:f1:13:
         ca:30:bf:95:f3:9b:5f:22:79:99:16:c0:3b:cd:3b:a7:61:64:
         47:df:2a:46:da:fb:88:c3:c5:62:43:9b:f9:30:1d:c9:c1:ac:
         6d:0c:cc:53:25:f7:63:db:30:80:04:8a:71:20:37:31:eb:37:
         4b:d6:a3:bc:05:a3:f1:c8:56:b3:75:ad:14:93:ae:42:55:2c:
         a1:ff:3a:5e:38:40:9c:3c:2b:c6:93:d5:74:24:b1:1a:01:86:
         84:2e:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:48 2024 by rpki-client on console-fra.rpki-client.org