Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File:                     TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier:          HTTtdBhXRSElsphgz+U5HmBXMBDweqHW0DwbwM2JaxE=
Subject key identifier:   96:FA:F9:1F:64:47:74:99:E9:19:40:1D:17:0E:C5:A0:9B:66:0A:91
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer:       /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial:       01923580991197A1FFDB4E097C1BCDEBDDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number:          126C
Signing time:             Fri 27 Sep 2024 22:01:13 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:13 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:13 +0000
Files and hashes:         1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: 8OvsNr6tohDkYO6cV761honnJiH6qJaZEF16rqjY3k4=)
                          2: aPOdZP8TeWsJ0p0Yn7txQd1tC2Q.roa (hash: 8s9qZKbR3130uE5Jxt0KA6SbFc9E5ZvaTQnz7fwiiyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:99:11:97:a1:ff:db:4e:09:7c:1b:cd:eb:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
        Validity
            Not Before: Sep 27 22:01:13 2024 GMT
            Not After : Sep 28 22:01:13 2024 GMT
        Subject: CN=96faf91f64477499e919401d170ec5a09b660a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:8b:4d:61:3c:59:98:8c:ad:a3:80:21:8c:
                    d9:b6:36:ff:14:e3:03:c9:54:0b:d3:2e:7f:8e:a9:
                    f3:20:c7:e0:7b:d1:13:42:ca:db:b1:2b:18:ff:fc:
                    b9:89:41:57:09:9e:12:24:5d:2e:ef:b9:83:61:1e:
                    6d:36:17:d4:3a:ed:40:11:3d:6c:e3:16:7e:4f:ea:
                    cf:ae:5f:11:af:6b:72:0f:08:6d:78:4d:0d:96:89:
                    91:20:ae:78:10:c0:22:84:23:4f:20:e6:93:45:20:
                    d7:e9:c4:de:8c:ee:05:b0:0c:8c:31:60:6f:65:05:
                    6e:17:54:0d:69:07:ad:81:ed:60:35:fe:5f:4e:0d:
                    31:4f:8c:c0:e9:d2:b1:e4:ef:7a:e5:69:65:b4:54:
                    69:1a:fc:9e:ba:09:22:95:6b:f7:63:d6:92:9c:eb:
                    1e:6a:ae:4a:1d:f6:2d:18:8a:60:c2:96:23:b1:2c:
                    9d:0c:b2:a9:01:20:53:07:82:bf:48:33:ea:0f:bc:
                    9b:54:ab:1c:9f:0a:72:2e:34:a1:ea:15:df:1c:36:
                    cb:61:b7:2c:39:a3:57:ad:44:2b:f3:f2:0c:2d:bb:
                    5f:28:32:9f:40:49:0e:f9:4e:2a:4e:57:b7:34:7d:
                    0a:43:13:73:a1:48:74:47:ff:bc:ba:1d:b1:d0:3e:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:F9:1F:64:47:74:99:E9:19:40:1D:17:0E:C5:A0:9B:66:0A:91
            X509v3 Authority Key Identifier:
                keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:11:40:74:c6:fb:3b:b1:43:67:88:1f:62:1b:4a:31:7f:a0:
         b6:e1:db:84:e7:cb:69:2a:24:5a:c9:99:cd:64:78:14:d9:f2:
         93:69:b4:42:38:ae:2b:c2:f1:4c:fa:33:fc:08:70:cd:35:68:
         c7:36:72:6b:d9:49:4f:b0:5d:9e:35:4c:39:7e:c5:bc:d4:c5:
         bd:21:6c:db:b9:8c:2f:3a:3a:d7:d9:2f:94:7f:28:d6:a4:e5:
         c3:ed:0c:9c:57:f8:61:df:51:32:b6:c9:d9:00:a4:88:78:b3:
         5a:a7:e3:af:22:9b:ef:a4:ba:ca:0c:44:65:83:8a:cb:5b:99:
         21:da:8d:8a:28:17:37:d8:3f:79:d0:a8:91:42:4d:03:cf:0c:
         e9:94:f8:96:89:dc:43:ee:17:1d:95:90:16:22:46:5c:61:08:
         a4:38:52:f1:d0:0c:2d:79:bd:9e:52:45:e7:d0:f6:90:1b:18:
         29:31:e7:d5:86:38:6d:7c:f5:f2:2e:88:0c:1a:c5:46:2a:eb:
         74:47:cb:39:8d:81:b4:5b:2c:0e:67:6b:55:3a:3f:ec:a8:fe:
         4f:f3:35:37:55:23:54:6d:27:8c:9a:4b:65:a5:71:b6:05:10:
         c4:c3:99:f5:d3:f3:63:1f:60:ed:85:16:11:1d:00:01:4f:fc:
         cd:02:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:49:25 2024 by rpki-client on console-ams.rpki-client.org