Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File:                     tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier:          tzdyNrjwQ/5QW3AAPYOxxufYEInCtQEXQFqwVvSDZZc=
Subject key identifier:   22:88:8F:05:EB:6A:63:56:85:B9:02:94:45:77:F6:22:BC:4A:B9:8B
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer:       /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial:       0191FB22F9DF76CEF24CFA8B0FCF05B5597A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number:          0118
Signing time:             Mon 16 Sep 2024 14:00:58 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:58 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:58 +0000
Files and hashes:         1: ovojrokxTJInSB_VS-y5J67XqCc.roa (hash: yi0QhNgSoYrr9Cl/UY10Vo8G1b9n6XAJqZ5fvKc3QN4=)
                          2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: Ii72uo/NXsG+9rzLfyt5r4eICvcUiWpKObjmO9p2kKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:f9:df:76:ce:f2:4c:fa:8b:0f:cf:05:b5:59:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
        Validity
            Not Before: Sep 16 14:00:58 2024 GMT
            Not After : Sep 17 14:00:58 2024 GMT
        Subject: CN=22888f05eb6a635685b902944577f622bc4ab98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:3a:d3:a4:85:d4:0f:cd:5c:85:84:70:cb:
                    fb:52:0a:ed:10:65:ee:5b:1f:10:45:80:fa:46:57:
                    56:36:09:e9:b4:44:7d:c9:aa:ae:8c:55:c3:68:1f:
                    43:fb:f8:c8:c5:82:7e:55:67:e6:25:d3:26:f7:4a:
                    61:5d:64:9a:08:f5:e9:8e:a1:86:f9:f7:eb:0d:68:
                    9a:3f:e7:c1:3f:10:a2:e9:8b:a6:bc:b3:a0:a4:e6:
                    e6:30:87:87:d4:fb:ce:5a:3a:1a:3d:59:1e:46:b4:
                    d9:4c:24:9f:fc:5d:66:5d:38:1a:72:9d:f0:7e:24:
                    5b:cc:e1:05:83:6d:6b:2c:f7:31:8d:07:30:b6:a2:
                    f4:57:9b:79:ce:3e:14:93:3d:2b:4d:69:d0:89:ef:
                    26:11:9e:a8:9b:00:aa:a9:2e:b7:1a:52:3a:51:e2:
                    9e:d2:cc:87:5a:38:7d:bf:a1:0b:11:e5:9b:46:fc:
                    60:5a:b9:12:33:c5:e0:5f:d0:f7:9a:fa:51:a1:dc:
                    56:0d:56:15:38:20:3a:43:54:ed:a5:48:38:1e:4e:
                    ee:8e:71:5b:d8:30:4b:a2:e1:70:c4:55:84:b0:a5:
                    de:8f:b7:a8:0d:9d:f8:ec:e9:86:b2:b4:01:68:43:
                    63:5b:28:b5:6d:b0:4f:f4:95:9d:81:fd:2c:14:8c:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:88:8F:05:EB:6A:63:56:85:B9:02:94:45:77:F6:22:BC:4A:B9:8B
            X509v3 Authority Key Identifier:
                keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:db:89:3a:35:22:85:9c:a9:c1:4f:08:40:db:cc:2e:2e:0f:
         10:d0:b7:e1:c7:54:b0:a2:dd:e6:5c:59:c5:fe:00:cb:50:0b:
         a1:c3:ff:40:eb:36:69:f5:a5:5e:66:22:c5:9d:70:cc:bf:fa:
         a0:e8:3f:22:8e:63:4e:52:4e:6b:f4:a1:4c:4d:a8:44:1f:1c:
         f2:c9:bb:ee:b8:cf:2e:2b:11:2e:88:21:ed:16:53:9e:6b:aa:
         48:d4:97:19:a0:da:36:63:e3:78:11:2b:87:0d:6d:fa:0f:60:
         88:ea:cd:5e:13:b9:45:a6:15:8d:c5:24:58:96:1e:e4:e6:06:
         3f:64:88:6c:14:9f:90:c2:14:ca:26:ff:a1:6c:b7:64:78:23:
         27:5e:6f:56:d4:04:4d:61:aa:c7:48:55:12:5d:8b:98:8f:a8:
         d3:a1:14:16:00:20:fa:22:e1:b6:52:3d:ca:50:ee:f8:23:dd:
         46:ae:97:a5:34:99:6e:f2:df:84:07:ef:5d:54:f0:58:83:12:
         eb:18:53:2e:13:d5:d0:bf:03:c7:38:05:fe:25:9c:88:b7:45:
         99:97:27:35:17:15:4e:ad:7d:b9:7a:2a:9e:fd:6c:fe:b2:58:
         e0:cc:75:0d:ea:9e:c8:5f:2d:4e:bd:ad:35:78:d6:fe:35:e0:
         e0:dc:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:14:29 2024 by rpki-client on console-ams.rpki-client.org