Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier:          3yATG1JfPNdYiLybcJbifbf8frSONieKVmVFK8VPQX4=
Subject key identifier:   85:EE:A9:D9:75:6B:E2:41:F9:F3:2F:35:77:56:36:9F:E6:74:C6:5D
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer:       /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial:       0193670EB9A80DDA4FA69FA118B7A4500131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number:          10C4
Signing time:             Tue 26 Nov 2024 06:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:38 +0000
Files and hashes:         1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: kTnpDopAhMz9u8ip1/qA91f+HhF6gHHlDIZujcPFHsM=)
                          2: eGWeOP1UMiTgqMenNBVMxBFl3Bo.roa (hash: OsdHl4znAbT1TlkfY6TrGT/ubBX+y2xbv6v/uenREJ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:b9:a8:0d:da:4f:a6:9f:a1:18:b7:a4:50:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Validity
            Not Before: Nov 26 06:00:38 2024 GMT
            Not After : Nov 27 06:00:38 2024 GMT
        Subject: CN=85eea9d9756be241f9f32f357756369fe674c65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:b4:05:15:e6:eb:e6:fe:fd:b8:a0:75:0a:
                    8f:32:15:40:aa:65:fb:e7:53:86:78:aa:49:56:e2:
                    29:f6:16:da:d8:df:2f:fe:57:d8:0b:3d:fe:70:2e:
                    ef:54:20:e9:f1:b9:01:01:cc:7a:bc:9d:42:1d:62:
                    4e:ec:8a:a5:33:59:44:9d:f5:e7:4f:7a:32:d2:e3:
                    04:65:0e:df:c8:93:ba:6c:68:d5:31:bd:66:71:63:
                    28:51:17:49:87:10:e6:2f:c5:b7:63:27:8d:09:eb:
                    13:76:42:46:7e:b4:8a:bb:9a:7e:70:af:8c:9b:d5:
                    30:50:05:f2:a5:a4:eb:2f:b2:1d:06:bb:65:c8:3a:
                    b9:89:b7:bc:e0:9b:d6:cc:3a:f3:e3:27:fb:6f:67:
                    df:a4:1f:16:03:1f:f2:5f:55:6f:c5:71:be:f9:ce:
                    1c:c7:28:7b:12:ac:49:01:3c:11:ab:37:01:5e:f0:
                    21:e8:f5:2c:00:a0:ac:a7:94:85:81:06:2e:68:6e:
                    c9:f3:88:3d:d0:ab:1f:26:8f:fe:95:de:92:14:43:
                    e1:6b:8e:19:d9:9b:54:ce:f4:9f:24:06:64:e5:27:
                    35:13:98:2b:20:04:eb:c0:f9:35:3e:89:e7:42:c1:
                    01:b8:dd:19:85:2d:51:a4:00:91:35:e3:00:78:95:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:A9:D9:75:6B:E2:41:F9:F3:2F:35:77:56:36:9F:E6:74:C6:5D
            X509v3 Authority Key Identifier:
                keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:c1:ad:9e:d0:52:46:f2:54:4b:1d:2d:d1:a0:46:ca:63:
         e8:88:49:74:db:f5:90:fa:57:b9:ff:e0:af:8c:1e:3b:05:85:
         ac:0d:24:8d:96:89:97:df:5f:b6:18:c3:fc:63:19:6b:91:65:
         ec:8a:c4:68:62:1e:86:95:56:21:5b:90:7d:99:33:e9:a3:61:
         1d:92:b2:b3:6e:14:54:fc:83:1a:63:0d:87:19:ce:58:2a:42:
         87:94:a2:4f:97:23:fd:05:a9:93:26:68:c6:6c:73:ec:0e:a9:
         85:41:c5:36:90:13:d3:bd:02:c3:ea:7f:4a:56:47:37:b6:a2:
         a2:4f:14:d5:4a:f8:34:16:43:24:d3:d2:92:1e:35:db:0c:77:
         53:45:e7:06:ab:9f:b7:ea:07:11:3a:5a:38:65:76:28:f1:50:
         14:30:f0:55:1e:3f:96:91:1d:c7:28:dd:c0:aa:d7:65:a4:fd:
         95:61:53:3c:0c:28:7f:31:e1:ec:ef:7b:fd:c6:d5:13:73:42:
         f0:1e:fa:f7:16:2b:35:3c:83:92:93:e6:5a:03:f6:1d:c9:f2:
         c1:b1:4d:ab:8b:14:7f:bc:2a:b3:7c:82:bf:4f:0f:60:02:15:
         d8:f9:c7:44:de:dd:19:96:ee:0b:70:73:52:03:4e:24:21:6f:
         7f:df:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:56:45 2024 by rpki-client on console-fra.rpki-client.org