Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File:                     TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier:          4AseTWH/A0fTBxw0uyHBcLR02/09hwWUYtsKrtFwPws=
Subject key identifier:   60:E3:5C:27:35:DD:53:2E:C3:69:BB:D1:8A:58:DC:32:37:42:8D:75
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer:       /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial:       01936A7D9E16C14987E99D0C68261008B2FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number:          0174
Signing time:             Tue 26 Nov 2024 22:00:37 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:37 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:37 +0000
Files and hashes:         1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: 6aw9OpneUchFa+cK7wCqH3/GVX3xUm6/y3Mr5fdIpgg=)
                          2: hvDoxRi_vFr2plKJlQwTmW6R264.roa (hash: ftTPtgJfzHoxIPm/sVk2WD/zfc/x+Sc/0s+8jPKd/LA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:9e:16:c1:49:87:e9:9d:0c:68:26:10:08:b2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
        Validity
            Not Before: Nov 26 22:00:37 2024 GMT
            Not After : Nov 27 22:00:37 2024 GMT
        Subject: CN=60e35c2735dd532ec369bbd18a58dc3237428d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:44:c5:59:f0:d4:75:ea:dc:88:b4:d4:34:
                    63:9a:9a:96:87:76:38:36:e2:97:29:a5:c1:cd:fc:
                    85:d2:29:3b:8c:4d:c4:6d:f4:d4:dc:4a:3c:3d:4c:
                    55:ed:b0:da:bb:58:1e:ac:9a:d3:2d:05:2c:4d:c4:
                    2a:d5:f4:b7:94:bf:7a:a7:58:cf:e3:2b:43:59:0d:
                    89:7a:1a:63:d8:11:86:26:f4:e8:97:c4:2c:7f:10:
                    60:42:5f:30:9c:5e:60:a9:17:ac:42:3d:e7:b3:92:
                    a8:e8:a0:f0:12:35:fa:e8:dd:79:e7:c5:1d:23:90:
                    f3:a5:4b:57:e4:a0:0e:b9:c1:d7:a3:99:f2:95:e4:
                    c7:6d:d5:16:47:a2:de:71:62:ab:f1:f6:02:2d:83:
                    c4:10:50:bf:5a:76:e3:aa:a3:5e:6f:c7:28:8f:c0:
                    54:97:86:01:8f:0a:af:e3:94:27:1b:10:b4:4e:36:
                    96:35:94:cd:89:0c:8e:c1:fa:2a:e5:ca:0a:45:3e:
                    dc:12:ed:99:14:12:78:e1:8a:c0:12:0c:d7:37:be:
                    3e:c2:fd:fd:91:19:ca:dc:37:2d:de:ad:27:00:e8:
                    a2:b0:3b:52:86:f8:f4:d2:4f:fc:d3:25:e0:d1:64:
                    4d:24:61:67:c9:3b:8c:24:fc:83:10:67:5b:46:ee:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E3:5C:27:35:DD:53:2E:C3:69:BB:D1:8A:58:DC:32:37:42:8D:75
            X509v3 Authority Key Identifier:
                keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:1c:e1:f8:f6:36:72:18:d0:26:f6:84:6b:86:31:49:99:
         a9:6d:cf:0e:e7:22:02:1d:e0:91:e3:67:d4:f5:6e:44:db:85:
         c4:61:17:2e:03:34:71:5c:63:49:b3:2d:0e:d7:63:df:75:bd:
         c8:9b:15:24:5d:99:c5:fb:4c:5f:0d:1d:21:e3:f6:6e:10:4d:
         6c:14:fb:06:0d:ae:fd:45:09:29:f2:d0:35:95:46:01:88:01:
         31:a6:a1:c1:d6:f6:61:31:39:ab:e5:87:fc:7b:78:b9:85:d2:
         41:cf:d7:26:43:6c:fa:0c:fe:94:f8:8f:5f:9e:b7:ed:dd:08:
         34:30:52:a1:e3:99:ce:98:b9:3c:fa:25:e0:82:cf:d1:65:a0:
         c8:f4:07:5e:13:13:54:c5:56:46:a3:32:3d:14:fa:74:55:cf:
         68:63:4c:eb:7f:c4:8a:a8:e3:fe:e3:e5:c0:a1:18:02:6e:be:
         48:12:4f:fa:2b:70:12:db:4b:51:19:3e:f1:28:b1:3f:f6:69:
         0d:1b:3e:37:22:15:14:18:46:95:04:e5:20:5f:f9:92:00:60:
         fe:62:66:f1:02:09:71:39:e4:58:2a:c8:b5:6a:1a:1e:52:94:
         c6:36:c0:01:01:a3:d5:56:4d:8f:71:3e:04:bc:35:f1:67:4d:
         f3:14:cc:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfZ4WwUmH6Z0MaCYQCLL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh
MTkxYmYwHhcNMjQxMTI2MjIwMDM3WhcNMjQxMTI3MjIwMDM3WjAzMTEwLwYDVQQD
Eyg2MGUzNWMyNzM1ZGQ1MzJlYzM2OWJiZDE4YTU4ZGMzMjM3NDI4ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7dExVnw1HXq3Ii01DRjmpqWh3Y4
NuKXKaXBzfyF0ik7jE3EbfTU3Eo8PUxV7bDau1gerJrTLQUsTcQq1fS3lL96p1jP
4ytDWQ2Jehpj2BGGJvTol8QsfxBgQl8wnF5gqResQj3ns5Ko6KDwEjX66N1558Ud
I5DzpUtX5KAOucHXo5nyleTHbdUWR6LecWKr8fYCLYPEEFC/WnbjqqNeb8coj8BU
l4YBjwqv45QnGxC0TjaWNZTNiQyOwfoq5coKRT7cEu2ZFBJ44YrAEgzXN74+wv39
kRnK3Dct3q0nAOiisDtShvj00k/80yXg0WRNJGFnyTuMJPyDEGdbRu4amwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDjXCc13VMuw2m70YpY3DI3Qo11MB8GA1UdIwQY
MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt
ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4
LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbecc4fj2
NnIY0Cb2hGuGMUmZqW3PDuciAh3gkeNn1PVuRNuFxGEXLgM0cVxjSbMtDtdj33W9
yJsVJF2ZxftMXw0dIeP2bhBNbBT7Bg2u/UUJKfLQNZVGAYgBMaahwdb2YTE5q+WH
/Ht4uYXSQc/XJkNs+gz+lPiPX5637d0INDBSoeOZzpi5PPol4ILP0WWgyPQHXhMT
VMVWRqMyPRT6dFXPaGNM63/Eiqjj/uPlwKEYAm6+SBJP+itwEttLURk+8SixP/Zp
DRs+NyIVFBhGlQTlIF/5kgBg/mJm8QIJcTnkWCrItWoaHlKUxjbAAQGj1VZNj3E+
BLw18WdN8xTMaQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:57 2024 by rpki-client on console-fra.rpki-client.org