Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File:                     TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier:          8Uk05VPS+4iIGjGdJpBWtpD+I1msTpXiL2pSpalAx7E=
Subject key identifier:   DD:04:22:BC:81:DB:22:33:5C:06:40:C1:AE:48:13:62:41:66:4B:22
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer:       /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial:       0193579BCA2DA0D8D556B0542F1577A82545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number:          0431
Signing time:             Sat 23 Nov 2024 06:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:47 +0000
Files and hashes:         1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: gPT/Zd2U5mDbVNO0NVsD+idzTcj0rPdVWEjx/jCemiU=)
                          2: sX41QwbxW_zW81jdhDX1m0kZpZ0.roa (hash: 8lTkLEPS92+vCiuVyxmvmH31S/VdpsecJeTdH7bwJ7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ca:2d:a0:d8:d5:56:b0:54:2f:15:77:a8:25:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
        Validity
            Not Before: Nov 23 06:00:47 2024 GMT
            Not After : Nov 24 06:00:47 2024 GMT
        Subject: CN=dd0422bc81db22335c0640c1ae48136241664b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:24:60:6d:2e:a0:ee:eb:dc:4f:45:69:6f:
                    69:3d:8b:e2:9f:75:e2:7d:b8:c5:56:db:77:6b:da:
                    31:2e:61:1f:99:57:e3:39:68:c7:98:b3:b0:89:32:
                    ec:66:39:56:d0:ab:a5:56:00:5c:13:79:d9:10:1b:
                    9c:fa:e7:fd:f6:db:3a:13:21:24:9f:d9:05:b0:fb:
                    37:85:c7:7c:c7:7d:08:c8:b1:a4:0e:7c:99:89:df:
                    51:1b:8f:6d:8e:ed:ea:57:01:19:94:6a:c1:f5:34:
                    92:63:14:01:d6:e9:26:51:54:59:57:f4:2a:01:7f:
                    42:35:d2:cc:70:88:8b:9f:bc:7b:03:36:23:93:53:
                    41:15:3a:1d:e8:4c:f7:44:42:04:84:27:77:1e:8d:
                    11:94:1c:60:75:a9:de:06:e0:76:6d:38:9c:61:4b:
                    38:28:b0:2b:0f:12:94:fc:5e:3b:ac:5a:6e:62:fb:
                    7c:d8:43:ac:b0:cc:4a:b5:d5:11:2a:a6:d5:f1:18:
                    dc:af:02:24:66:4c:62:37:22:c5:5b:f4:d1:0b:c8:
                    23:bb:ec:c9:16:98:e5:46:f7:be:ea:22:b3:e8:b8:
                    de:81:87:2b:39:5d:20:0c:ed:b5:61:d0:24:b3:f4:
                    b7:03:59:15:02:60:a3:f2:0f:55:cd:2c:dd:a1:50:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:22:BC:81:DB:22:33:5C:06:40:C1:AE:48:13:62:41:66:4B:22
            X509v3 Authority Key Identifier:
                keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:f3:0a:d7:70:9f:a2:89:67:40:0b:d7:7c:a6:0c:88:e4:40:
         b6:dd:05:49:a2:ca:d2:e4:c6:9f:57:ee:e4:76:b4:c5:da:86:
         56:4d:83:f7:90:99:a1:89:d1:a8:f0:47:3e:d5:2a:2d:24:a9:
         d8:d2:d6:80:2b:b6:30:cb:1c:e6:4f:66:c9:25:15:67:fe:fe:
         12:c4:2e:1d:15:25:3a:4f:63:2e:ec:1a:1b:ae:f6:8d:db:99:
         69:0f:d9:80:4e:05:4c:ce:b0:75:68:79:4c:cf:68:39:15:90:
         7c:ae:5f:9a:86:9e:a3:9f:95:e1:76:3b:e0:c4:b8:63:ad:f7:
         65:f7:7f:26:00:36:f9:4e:12:99:3a:b2:2b:2a:d6:3e:75:95:
         01:3c:32:86:67:7f:19:72:98:26:59:f4:0d:98:b3:63:8f:f4:
         51:d4:cb:82:7c:db:ef:4f:7d:8d:bb:f7:aa:04:a9:1f:81:87:
         f5:ff:4e:07:0a:a2:99:9b:e6:35:85:07:7a:1a:58:6e:c6:15:
         8f:22:ec:12:d4:b9:f6:d2:7b:cb:d3:be:51:7f:71:1a:ba:d5:
         58:e7:f6:a5:a1:a8:5a:9d:0a:85:f3:49:8b:7e:36:a3:f1:ba:
         13:f1:67:35:b0:83:29:34:5d:73:2f:75:66:7d:11:19:77:80:
         39:1f:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:09 2024 by rpki-client on console-fra.rpki-client.org