Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File:                     tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier:          y1IK53Z4P67ob8SiSVjY47xbRpSTu+sEU/WeesJPHEA=
Subject key identifier:   EA:22:B9:35:82:E4:51:CE:F5:6A:55:A2:64:2E:EC:64:D1:D8:96:71
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer:       /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial:       019365FC48B78DBFB9C14A22F3AEB8445E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number:          0F89
Signing time:             Tue 26 Nov 2024 01:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:52 +0000
Files and hashes:         1: 49eQk9OAN4QMHK771ZTkRdlJOVI.roa (hash: wMGqRql9PYqa0zJZMLFUVBB/H07P0istAZ1scvSzdb0=)
                          2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: FvlXE/T6E0aI/RP0gjbyPydTiuWD7qb4ktAFAeW2S+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:48:b7:8d:bf:b9:c1:4a:22:f3:ae:b8:44:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
        Validity
            Not Before: Nov 26 01:00:52 2024 GMT
            Not After : Nov 27 01:00:52 2024 GMT
        Subject: CN=ea22b93582e451cef56a55a2642eec64d1d89671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:4a:c6:89:77:a4:41:53:ca:b9:12:0c:cc:
                    a5:77:c9:9d:fb:20:d9:36:0a:df:46:9e:4f:35:67:
                    69:34:74:5a:f6:bb:66:b4:14:2b:b7:34:19:3a:1a:
                    2e:bb:be:37:1f:f2:bf:3c:f0:e7:d5:df:a5:8d:10:
                    fb:87:f7:e2:15:49:c8:df:dc:f4:e5:9a:c1:16:01:
                    a4:17:7e:44:45:37:fa:56:bf:c3:4b:b9:72:db:48:
                    77:f5:c0:3b:fd:bf:08:6f:43:c8:2e:72:1c:f6:91:
                    b8:69:53:1e:1d:b6:06:28:2e:f7:eb:53:54:e0:94:
                    4c:5c:85:c1:cc:22:4e:dc:7c:da:7e:a6:04:98:81:
                    57:2c:b6:dd:ca:ef:c3:44:c9:6b:80:6d:3f:95:fb:
                    1c:2f:8e:3d:a6:97:b9:fd:39:5b:29:53:79:1b:6b:
                    45:17:b1:db:6c:33:9c:0d:c6:ee:25:c3:1b:43:93:
                    7f:6d:07:8f:67:1d:65:2f:67:73:68:98:1d:cb:f0:
                    7d:94:f7:4b:bc:ee:fb:d7:5c:62:c1:69:ba:54:d1:
                    70:a7:46:fc:91:f3:68:3e:91:21:fb:1e:1f:af:78:
                    16:5e:7b:8d:ef:f7:5c:55:ff:c8:2e:7b:70:6f:4b:
                    92:09:0a:01:2f:11:6a:34:82:d2:5e:a0:36:a6:e3:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:B9:35:82:E4:51:CE:F5:6A:55:A2:64:2E:EC:64:D1:D8:96:71
            X509v3 Authority Key Identifier:
                keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:df:59:b0:42:9c:1f:00:32:3b:2a:37:ab:19:b8:a5:64:
         7e:b7:12:31:6b:ed:e1:e6:71:e2:d6:11:f8:2b:81:97:8f:49:
         04:c3:35:67:fe:25:53:04:b2:73:98:91:c1:c7:02:cf:25:b2:
         12:fb:28:85:dc:6e:36:2e:cc:e7:01:a0:96:06:4d:92:34:1a:
         7d:b3:f7:9a:e4:5f:4e:c7:3c:d4:e0:64:57:89:5c:d4:2b:4c:
         b3:0b:8d:ae:9c:74:54:1d:14:05:fd:5e:c2:1d:d2:74:c7:d5:
         bb:96:96:88:f3:54:70:75:d6:80:75:9a:b0:22:a6:ce:5e:d6:
         81:ec:07:83:60:ab:3d:1b:5c:75:4c:c0:46:37:af:b6:d4:1c:
         ce:01:5c:e7:4f:24:be:91:91:d6:b9:6a:c3:53:cf:d3:b8:0f:
         eb:8f:5e:0a:84:ba:43:3e:3e:87:3f:1f:a4:3a:ac:1d:ad:57:
         72:bd:19:67:57:71:de:5b:02:4d:ce:33:84:fe:cc:31:88:d4:
         5f:83:60:84:6b:13:b6:c8:ee:03:c1:f6:34:81:06:30:9b:f7:
         cf:20:53:35:99:28:3d:53:fd:78:e4:bb:c7:ac:bd:83:b1:f8:
         e0:68:0d:c0:23:b6:a8:4e:78:6a:1c:9a:e9:5d:42:4d:61:5f:
         c0:41:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:54:22 2024 by rpki-client on console-fra.rpki-client.org