Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File:                     TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier:          jc/vP8lgONopFpr+ks+UJNwYN+/g+/VRQghwaXOuhGI=
Subject key identifier:   3B:1A:D0:E9:27:B7:A9:3D:8B:A4:B4:38:6E:2A:58:B1:A2:AB:A3:19
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer:       /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial:       019355AD20B12BF5668C7C85E4AE4ECF3FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number:          0E26
Signing time:             Fri 22 Nov 2024 21:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:29 +0000
Files and hashes:         1: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: ipy/tvE73i8TGV9vMPdO6aUiamFdv7vC8pLyrHm7jdY=)
                          2: YisDqKMNYCcr4Y2iTSl0FBvdeR8.roa (hash: Rk6nXlcnc04yMlNJeRB+muWPGNZjLe7zHlg6AwG7XNw=)
                          3: ehTXnaAbzYI1ySo05jWWGAjz-KU.roa (hash: /nLs6yf4vLvEaEJWNMXVZzWsCbJrq9HNX9wBJDlq2qE=)
                          4: qnjqXU3AEWVW4mhjV2EqzmtpHfs.roa (hash: Paul4EGZJNUGtvTxFVFiT2kxcEf9J1Dux1xR7ZYBLPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:20:b1:2b:f5:66:8c:7c:85:e4:ae:4e:cf:3f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
        Validity
            Not Before: Nov 22 21:00:29 2024 GMT
            Not After : Nov 23 21:00:29 2024 GMT
        Subject: CN=3b1ad0e927b7a93d8ba4b4386e2a58b1a2aba319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:d3:fb:16:ce:eb:9d:b1:f2:45:a2:cf:85:
                    d1:d9:f1:79:34:6e:4f:da:dc:54:f8:b4:4f:18:5b:
                    be:6b:68:a5:4a:d5:a7:82:54:4a:b0:70:6c:07:c5:
                    2c:04:84:88:a9:06:ea:ee:66:8a:70:cc:37:75:32:
                    64:76:3f:9b:bc:67:38:b5:38:9c:9a:1f:60:21:33:
                    14:a1:2e:18:5c:34:26:bc:1c:89:29:0d:30:d1:c7:
                    21:97:4c:7a:c4:49:98:78:7b:ce:c8:20:81:7c:df:
                    2d:c7:1a:d9:67:0e:8c:77:50:35:7a:cf:5b:f3:be:
                    d4:3a:0d:a6:4e:04:53:8e:72:c4:ed:f2:1a:15:dd:
                    2b:87:5d:ac:6f:9c:8b:ac:25:a7:35:44:f8:d2:78:
                    8c:82:29:aa:12:63:30:6f:20:7f:e1:97:a9:7c:78:
                    cb:8c:85:08:ee:38:1e:22:78:e5:4b:3e:a8:af:60:
                    94:09:d0:5d:c5:83:1a:55:06:0a:84:4e:f2:f3:1b:
                    a8:9a:17:5c:c1:2f:d0:8e:7c:95:52:c0:8f:c3:da:
                    3b:a7:81:8a:74:2d:cf:dd:b2:b7:91:d9:63:97:93:
                    b6:60:a3:77:c6:f9:0f:82:eb:2b:2b:de:e7:43:8b:
                    58:2b:d2:c0:6f:75:c3:67:f6:50:8d:35:74:71:cd:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:D0:E9:27:B7:A9:3D:8B:A4:B4:38:6E:2A:58:B1:A2:AB:A3:19
            X509v3 Authority Key Identifier:
                keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fe:78:a6:13:6e:45:b1:eb:c1:10:33:4d:f3:70:d3:33:3b:
         46:9a:7c:f0:70:df:e2:46:f2:68:59:f8:2c:bc:57:2b:17:41:
         e8:a8:7a:f7:e6:db:01:c1:28:90:13:7d:8d:61:f8:95:7e:f9:
         ef:9b:7e:f8:53:5a:81:4a:a9:c4:36:8f:a1:35:63:b6:7c:53:
         5c:78:c0:20:6a:9e:24:68:46:9e:27:ff:5a:e1:c9:63:53:bd:
         c9:8e:83:73:71:0f:e0:9c:ab:ef:ec:c0:66:44:aa:95:1d:57:
         42:ad:15:b0:c4:57:cd:d2:e5:94:8d:bb:7e:c3:50:f3:82:26:
         ee:08:bd:53:e8:6b:e5:2b:2c:f1:8f:08:63:dc:37:19:5d:12:
         55:ef:00:21:fd:02:9d:7a:f3:6e:88:c5:7f:6e:5c:5c:55:b4:
         3c:e7:32:0e:95:e8:64:a7:fd:fa:f9:5c:f7:7a:f7:89:37:ea:
         a4:34:fb:3b:c4:5c:db:53:d5:07:67:45:4b:82:db:54:62:2a:
         1f:cd:cc:d5:82:4e:91:04:b7:e7:fb:87:78:64:0c:fb:c2:70:
         54:50:4f:75:7a:bb:86:78:93:3f:91:13:77:a6:9b:a9:7b:97:
         b2:8a:4b:2d:1e:ac:89:34:cc:f7:78:f8:ac:54:30:f3:cd:53:
         82:56:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:02 2024 by rpki-client on console-fra.rpki-client.org