Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File:                     TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier:          xxTTHE25uFW5fmBFpElM1v/P6N6Sw4s9PQwPqUL277I=
Subject key identifier:   CF:20:96:8C:22:D7:6A:6A:1B:FB:64:54:09:E9:29:9C:E3:EE:38:42
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer:       /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial:       01904979FE1A68853BF126205B9C7DFC1B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number:          11E0
Signing time:             Mon 24 Jun 2024 09:00:49 +0000
Manifest this update:     Mon 24 Jun 2024 09:00:49 +0000
Manifest next update:     Tue 25 Jun 2024 09:00:49 +0000
Files and hashes:         1: PCVTCk4kJKdmWY5Gbhcohqq7yqY.roa (hash: 0BvnuPjtWX2RRE04oQNDzS1IBFJjGsR8tpSiS60V8LY=)
                          2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: yrUbz6m4U1ag93XY69FzfEgrPL5T6mAbH2Ku25qi3tI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:79:fe:1a:68:85:3b:f1:26:20:5b:9c:7d:fc:1b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
        Validity
            Not Before: Jun 24 09:00:49 2024 GMT
            Not After : Jun 25 09:00:49 2024 GMT
        Subject: CN=cf20968c22d76a6a1bfb645409e9299ce3ee3842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:f4:cd:8f:cc:04:51:1e:0a:d7:78:b1:b9:
                    88:9c:02:d9:20:a6:f5:d0:2a:4f:d3:55:02:25:ae:
                    fd:a9:14:1c:4c:d2:a4:a7:07:b4:6c:39:54:4f:3a:
                    9d:b0:cf:4e:79:e3:44:fa:de:83:c9:02:6e:81:c5:
                    87:66:ef:d1:7a:24:8b:62:bc:4a:bb:e0:f9:30:6a:
                    85:a9:77:b1:f5:d9:e5:f1:ff:ac:4a:93:91:92:2d:
                    2f:ec:85:c2:83:26:28:bc:58:de:c3:da:e0:9c:9b:
                    fc:c6:f3:61:24:52:8b:6d:c7:05:40:6d:ea:89:79:
                    3e:cb:47:e5:61:c1:a9:7b:db:91:cd:c5:ee:bb:52:
                    e9:a6:89:0b:b1:76:8e:42:f1:a4:02:c4:02:eb:29:
                    33:ea:2c:77:18:8b:fd:bf:17:9a:62:3c:dc:66:3f:
                    0c:fc:0e:10:f0:b4:19:eb:e7:a6:af:0e:1b:51:f1:
                    d0:ac:d4:61:90:23:ad:a8:28:e6:d8:bb:c4:28:c0:
                    4b:a6:fd:ba:a1:ab:75:06:da:3b:04:be:62:5e:61:
                    c5:a6:c1:cc:16:69:f2:a7:89:2d:2f:ee:ef:8d:b2:
                    22:d9:61:4c:60:e7:c2:44:bc:48:51:8c:b0:06:56:
                    73:d0:3b:3e:1f:a1:1f:72:7e:bc:57:8a:dc:e0:6a:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:96:8C:22:D7:6A:6A:1B:FB:64:54:09:E9:29:9C:E3:EE:38:42
            X509v3 Authority Key Identifier:
                keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:99:65:d6:06:e5:11:6a:29:8d:20:03:94:b9:07:5a:10:
         8f:65:e4:af:49:05:d3:a9:77:14:1e:ae:80:e7:a2:a1:03:10:
         3d:24:69:4e:ae:81:c5:2e:4c:f6:27:5f:70:45:0f:c3:7b:ae:
         59:a9:e7:fa:58:93:8c:9d:6e:d8:73:62:2b:f1:3e:49:f8:fa:
         60:0e:aa:58:65:03:17:79:8a:3d:97:c5:ff:ad:c2:98:19:99:
         3a:85:85:bd:3c:02:c1:8d:dc:a9:b5:08:f8:41:19:f2:d9:0d:
         26:39:f4:19:36:ac:a7:4d:61:be:6a:ab:ab:84:67:9c:91:b7:
         77:ef:f5:fb:d3:0a:ee:f4:b6:07:da:bf:a8:44:23:db:80:9c:
         35:b3:10:5b:6f:88:75:55:c0:02:e5:13:14:8b:31:58:59:20:
         69:63:8c:d9:1f:90:8d:f0:cc:9c:74:df:b6:87:69:3f:7a:77:
         45:bd:35:19:cf:48:87:72:33:97:8c:85:9d:10:c2:89:e9:cb:
         2f:9a:5a:c2:9b:66:be:87:ba:a8:c4:e7:8d:33:3e:87:3b:ec:
         78:6e:4e:96:ac:54:58:1b:99:db:50:4b:c1:5b:44:ad:ef:ad:
         6e:64:4e:b8:69:86:2b:8d:96:dd:95:aa:61:6a:2c:3f:4d:a2:
         08:2c:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:01:53 2024 by rpki-client on console-ams.rpki-client.org