Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          gqXMvmhLZm7xAd+33d0R7HA0C3yoTLLEW8LgcQqR6LU=
Subject key identifier:   15:1A:4B:D5:32:3D:D1:34:FF:30:C3:C5:EE:CB:BB:8A:8E:D5:9E:92
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       0193549AE191D2E330433B70055BEAB57DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          12B2
Signing time:             Fri 22 Nov 2024 16:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:56 +0000
Files and hashes:         1: RyNytlOTGqEMGDNq2XaREyHPm6M.roa (hash: 0DlLaS/LwTUQ3YBvbMHHWrao1EUfhYjKlq1tWuPWywE=)
                          2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: rtJMnEPB2KMZvzTpR8Xhx5owThaktID3v3crzqgINJU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:e1:91:d2:e3:30:43:3b:70:05:5b:ea:b5:7d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: Nov 22 16:00:56 2024 GMT
            Not After : Nov 23 16:00:56 2024 GMT
        Subject: CN=151a4bd5323dd134ff30c3c5eecbbb8a8ed59e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:5d:38:95:ff:53:3c:d3:7e:82:1c:be:c7:
                    28:bf:05:8c:c5:62:3d:b0:20:a0:53:93:e0:dc:b5:
                    62:8c:14:66:9e:1c:a6:b1:dc:47:82:ad:48:4d:fe:
                    33:58:57:21:b2:91:75:b2:67:21:e6:b5:bf:73:87:
                    b0:fb:25:37:eb:3b:58:95:d2:ca:44:f3:7b:64:8f:
                    7e:fc:71:14:68:1f:23:d1:7a:58:0f:f4:46:41:3a:
                    47:c1:ca:3f:f7:2b:68:07:31:fd:7d:66:e7:0e:1a:
                    2d:16:3a:49:33:be:90:82:c2:7e:c0:b8:c5:0e:cc:
                    03:94:47:5d:e2:b8:3f:f6:99:46:40:79:c7:f3:c4:
                    dc:50:b8:db:e7:4a:24:67:6d:e8:fa:bc:0c:59:bb:
                    85:4f:71:ad:9e:89:03:7c:3e:2b:ea:97:dc:83:32:
                    cf:01:7d:3d:2c:d4:e5:7c:b7:e6:18:b5:02:ff:9c:
                    7c:ca:32:15:b9:af:24:8f:0f:44:17:aa:bd:7b:31:
                    fc:24:80:f8:a3:1d:21:b3:df:0d:05:10:67:fd:56:
                    ed:8f:b3:e4:07:60:60:c9:4a:d4:09:d9:99:f8:72:
                    73:b5:1b:d3:00:20:d1:db:ab:43:c8:a4:a6:3b:12:
                    0a:28:69:c8:fb:5f:7b:0d:d8:ea:3d:29:be:39:fb:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:4B:D5:32:3D:D1:34:FF:30:C3:C5:EE:CB:BB:8A:8E:D5:9E:92
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:d9:a5:b9:d7:31:e5:99:6b:28:63:a7:0c:17:b2:0a:6f:
         13:a9:c1:f3:55:b9:8e:ec:14:14:b9:94:1a:6a:57:63:7d:16:
         70:6a:44:ec:79:f6:04:1c:69:dc:a4:bd:1e:98:4c:ec:f4:21:
         24:be:16:16:f5:e3:d5:73:2f:ec:78:d2:ee:7c:7d:a0:6f:4a:
         bf:95:a4:e9:10:34:91:f0:ab:db:bf:cb:a4:e7:46:93:9b:c2:
         03:db:30:55:a8:59:d5:9c:2b:af:b8:a9:0f:94:02:b1:c8:46:
         e9:3a:d8:d0:f4:fc:39:19:f4:d6:ea:1d:ca:c3:1f:35:40:1a:
         a4:4f:63:91:cf:55:70:35:b7:c0:42:1f:47:f8:cc:44:19:1b:
         52:8b:49:81:c6:4e:f5:01:8e:39:3f:7d:56:8a:bb:71:71:46:
         0e:54:d6:82:37:75:79:48:9f:44:c4:dd:09:ef:84:57:cf:ed:
         de:a0:e2:ef:51:0b:3e:9c:1e:fe:74:72:70:cf:9f:ed:d1:e2:
         3f:aa:d2:3f:60:01:02:65:47:05:57:5c:1f:ce:5c:ae:61:f5:
         33:c7:bd:b1:c7:36:1f:a7:3a:c6:6a:d7:0e:6d:02:fe:5b:c5:
         e0:67:34:38:3b:a0:f5:7a:05:4f:a7:09:8b:97:73:86:d4:87:
         86:5d:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:35 2024 by rpki-client on console-ams.rpki-client.org