Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          gW1kkvrAtdGBfk724YY/V7lykofFoDeahlhrl7HKEdg=
Subject key identifier:   17:0C:B0:86:3E:DD:FB:7D:94:E7:C2:57:43:1A:64:89:B0:FA:78:0D
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       01936031177C7D8E2CCEAAE64D1BF4384023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          1375
Signing time:             Sun 24 Nov 2024 22:00:50 +0000
Manifest this update:     Sun 24 Nov 2024 22:00:50 +0000
Manifest next update:     Mon 25 Nov 2024 22:00:50 +0000
Files and hashes:         1: JwisEij_9tx3K0ShtHS7qULcuHA.roa (hash: SmR9WN7nwTeW0U5Hj2t92dLKfAxZzX7t8+6FghgK0dg=)
                          2: hXAZ34CkR8YM0uf9Hy7JRv5PKa8.roa (hash: 6SHst5vb2O80ptygFwmcw8Sd8IxFA2B+395m8i6cqCI=)
                          3: nn-DQ0Pa0M-iv2ATFZu1qJa-3bc.roa (hash: 0f97AaB0v+25dWIKdpKNdgwD12TBcxAT6kK6bvZLOA4=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: lPzEKQxcHLhqcJMfOGEhUoz4uoADhUQN6a28r+e7yQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:31:17:7c:7d:8e:2c:ce:aa:e6:4d:1b:f4:38:40:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Nov 24 22:00:50 2024 GMT
            Not After : Nov 25 22:00:50 2024 GMT
        Subject: CN=170cb0863eddfb7d94e7c257431a6489b0fa780d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:19:d4:2e:dd:71:1e:98:dd:82:a5:6e:d3:
                    b8:c6:1e:13:de:03:c9:98:59:eb:bc:e7:dc:ee:e8:
                    03:ff:c4:a8:84:15:7e:87:71:02:ee:50:3b:19:ca:
                    62:cd:a3:b6:04:aa:c8:d0:ba:dd:d3:60:5b:a0:43:
                    c5:bf:bc:50:29:30:4e:95:0a:23:6e:21:95:eb:e9:
                    16:e4:86:71:77:a6:39:67:b7:ab:16:5a:c1:cf:e4:
                    ad:e5:47:f3:11:b1:98:37:aa:28:f8:ac:46:1c:ef:
                    2f:d4:c7:af:b3:90:5f:7e:03:f6:52:1b:9a:d9:4c:
                    70:ca:50:3d:b4:1b:02:23:fe:bf:4b:2f:2a:00:cc:
                    65:5f:aa:2e:34:33:af:9e:49:22:1e:4d:5b:70:cd:
                    29:cc:e1:c7:62:6a:aa:eb:e8:13:81:0f:d9:60:3d:
                    f8:0f:7f:39:8a:9f:84:f1:81:22:9f:a3:19:96:9b:
                    02:14:98:ca:c9:bf:67:df:c1:7d:5a:0c:e9:f4:e1:
                    60:e1:bd:56:78:11:2b:87:2d:59:e9:7a:6e:93:ae:
                    e2:4a:97:4d:80:a5:88:22:6f:52:7b:af:a3:b8:60:
                    e8:09:3e:0d:a7:2b:ec:6b:f0:cf:01:5f:4f:13:72:
                    81:74:25:57:54:71:b0:5a:30:d2:67:b9:45:1c:9f:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:B0:86:3E:DD:FB:7D:94:E7:C2:57:43:1A:64:89:B0:FA:78:0D
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:47:51:86:a9:ae:20:a5:60:83:15:ae:04:05:c1:fa:6b:
         41:7d:9c:5e:12:e7:bb:1e:db:d7:b9:ab:d4:be:ab:9a:73:37:
         4e:bb:64:6a:b6:d3:05:fc:3f:8e:bf:f6:88:13:7e:cd:56:ed:
         50:08:9a:c4:09:ea:ff:58:d0:f6:01:a9:8a:ca:e7:8c:a1:88:
         ac:55:df:d6:92:19:7b:e0:f2:f2:e9:07:09:a9:48:93:d9:fa:
         10:9f:37:73:f5:45:65:b3:f3:ca:a7:40:b0:18:28:d0:bd:18:
         26:1e:d6:8a:e8:0f:45:a2:08:95:13:ae:1c:16:e2:f5:5d:43:
         26:b0:dd:d4:bb:74:64:72:7a:00:a8:53:e7:4b:53:10:14:41:
         54:be:69:9d:f3:20:b9:4a:51:e8:27:e6:d0:09:35:9d:87:a0:
         11:83:32:7e:db:96:81:e8:d8:2f:2d:4c:13:30:ee:b3:5e:7e:
         2a:c3:17:bc:4f:9b:d9:d1:d2:73:14:bf:76:bd:54:53:79:c6:
         ff:0a:7b:da:d4:3a:74:63:0a:2e:d0:ee:c9:fb:51:94:e2:3a:
         e5:0a:49:71:2b:c1:33:34:e7:ae:43:25:78:c5:df:2d:30:d2:
         0d:ec:d1:67:98:d5:5f:ee:07:46:f8:f6:50:67:73:e4:37:c9:
         a2:98:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:01:05 2024 by rpki-client on console-fra.rpki-client.org