Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File:                     tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier:          IP6jejVK3Q+zRFwakkKSJrRoLgRmzdxSXyRq8fwAd0I=
Subject key identifier:   4E:23:B4:5B:F6:ED:00:4C:BB:6E:9D:F1:96:54:90:73:94:4D:9A:E8
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer:       /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial:       01935689A54A501CCB0F7AB26DC0CDBF4AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number:          06B6
Signing time:             Sat 23 Nov 2024 01:01:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:21 +0000
Files and hashes:         1: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: bgAJQyIYFK3kHseZLACoc8OT+GBmaJV0m+47k6+MZSM=)
                          2: xquxBBIS_4dha5xOk8dT19MoMog.roa (hash: g50AJBxeiPOmpUZD67NYfFfwsP9zRIi3K+tmd//V4Dg=)
                          3: z5UBgE_XknMP2z6XbS3POeLiHJs.roa (hash: xqkdsLRrUFHhZnUjVp7prAWbeRhLnuYiPpOat2Zl/2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a5:4a:50:1c:cb:0f:7a:b2:6d:c0:cd:bf:4a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
        Validity
            Not Before: Nov 23 01:01:21 2024 GMT
            Not After : Nov 24 01:01:21 2024 GMT
        Subject: CN=4e23b45bf6ed004cbb6e9df196549073944d9ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:33:ed:ed:0c:ce:ac:e9:a8:3b:fb:8b:c6:
                    6e:08:bb:1b:a3:e1:7a:8f:dc:43:45:5c:5b:4d:62:
                    9c:8c:54:e5:81:8d:7e:83:98:03:5e:a9:2e:5d:21:
                    3d:49:83:2a:d0:a7:98:a3:f8:78:dc:28:c1:0c:74:
                    10:88:9f:87:93:25:e2:e6:62:e0:22:d0:db:fb:a9:
                    6a:13:1a:a8:70:b1:8d:d6:cc:51:76:31:1b:a3:d8:
                    d8:10:3b:07:d7:fb:d1:8b:b7:1c:fb:7e:90:64:6f:
                    79:88:e3:09:7a:b0:6a:c2:8c:10:b5:84:02:54:8e:
                    fa:69:36:db:72:b2:14:9e:11:ee:3b:84:0e:f0:5a:
                    a0:de:0b:bc:e3:fb:62:13:4b:3e:48:50:a5:3a:ce:
                    64:55:31:f5:0e:df:8b:f2:cf:e2:da:90:5e:62:a9:
                    bd:b5:88:92:89:f5:45:06:c4:b5:83:f6:54:8e:f5:
                    bb:ae:37:5a:73:ab:29:cb:c2:e7:e8:a8:3b:ef:00:
                    b1:81:1a:8f:06:73:78:2e:26:0b:0e:66:97:14:30:
                    2b:3f:16:a8:5e:c3:1e:04:10:3f:c5:d9:c4:e0:ca:
                    70:96:62:92:a4:50:22:5b:05:75:71:27:6a:79:02:
                    c4:75:1e:41:d2:ec:4e:df:ff:58:5f:80:36:90:20:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:B4:5B:F6:ED:00:4C:BB:6E:9D:F1:96:54:90:73:94:4D:9A:E8
            X509v3 Authority Key Identifier:
                keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:ed:bb:4f:f5:76:85:25:43:90:91:f9:f0:60:4c:2c:b9:
         78:dc:db:04:3a:06:f2:15:a2:d9:ab:13:7b:12:a5:93:48:8a:
         a2:41:ba:ea:9a:aa:09:e5:41:c1:39:80:b6:d4:48:a1:c5:5d:
         5f:08:33:4c:b6:98:43:37:0d:00:34:a5:7e:75:c8:ac:6c:87:
         57:9c:28:ae:3a:a8:05:5b:d7:bb:12:bf:0d:cc:64:b0:2e:a8:
         1b:5e:9b:13:b0:47:88:eb:b9:b0:ef:03:28:6f:a2:d9:04:56:
         7f:42:aa:17:59:82:03:c5:a7:18:b5:a5:98:54:2a:76:6b:9b:
         df:0c:53:29:d3:fc:74:9d:ff:b1:05:64:02:29:23:7c:c0:7f:
         71:37:7e:93:8f:ad:5a:cd:ac:a9:a0:6b:c6:47:10:30:1a:a3:
         ea:73:dd:bf:bb:46:10:91:05:4a:28:fd:7e:5e:9d:d5:02:e3:
         1b:9d:2a:40:01:7c:cc:e8:d7:39:7b:a0:a3:9c:01:0c:76:22:
         88:01:57:76:32:72:53:ab:b9:2f:3b:8e:01:4b:50:dd:c5:9f:
         29:f6:cc:5d:8a:5b:b0:23:5f:4a:93:67:97:dd:ce:72:ed:fe:
         b3:ce:02:1c:c3:66:54:c3:2c:37:a8:d8:d5:9d:45:2f:0b:c8:
         6b:27:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:51 2024 by rpki-client on console-ams.rpki-client.org