Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File:                     TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier:          TsdTbf/s8FslFBZL9NMTd52N73aSv1JALcCTiTdORbQ=
Subject key identifier:   A0:BB:2B:89:BE:52:0C:AB:14:D9:7E:6E:2B:08:85:21:9D:E8:A9:59
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer:       /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial:       0190754028C48D956B75D29504509D89DEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number:          0CA5
Signing time:             Tue 02 Jul 2024 21:00:57 +0000
Manifest this update:     Tue 02 Jul 2024 21:00:57 +0000
Manifest next update:     Wed 03 Jul 2024 21:00:57 +0000
Files and hashes:         1: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: 0bauV8WGjCBWd2gMmrf2gOl7oXOFxRMNhwcqkzOEN+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:40:28:c4:8d:95:6b:75:d2:95:04:50:9d:89:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
        Validity
            Not Before: Jul  2 21:00:57 2024 GMT
            Not After : Jul  3 21:00:57 2024 GMT
        Subject: CN=a0bb2b89be520cab14d97e6e2b0885219de8a959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:3a:b5:a8:ce:88:86:6f:3a:86:64:3c:db:
                    d6:2e:59:6a:1e:7c:1e:3c:a5:ff:b3:45:15:5d:b2:
                    4c:94:de:34:c6:73:17:dc:ee:01:14:af:0f:d1:a8:
                    1c:3b:77:69:dd:6f:44:4e:6d:d6:37:62:96:aa:ec:
                    b6:da:c8:04:66:91:69:34:86:56:3b:0f:e1:d5:ff:
                    0f:81:91:2a:85:e3:19:84:00:fc:53:40:c8:34:71:
                    f4:3d:20:1d:80:7f:9e:8a:6e:4c:02:35:0e:08:c0:
                    cd:45:05:7f:d4:e8:d9:16:54:3b:70:c7:33:5f:1a:
                    35:c2:cd:8f:fb:0c:fa:64:49:a0:3e:9f:97:12:5a:
                    28:9c:ac:dd:cb:7c:0f:ad:15:fe:6e:36:a9:c9:98:
                    42:2e:14:9c:4b:39:0d:68:4e:b6:66:a8:b7:44:92:
                    1b:8d:e5:2e:ac:de:88:e6:c9:ed:74:b2:6e:60:83:
                    64:eb:da:84:ec:7e:a1:f4:39:6e:1d:32:24:a0:6e:
                    f8:f2:b7:55:fa:1a:6e:73:97:44:95:9c:d9:3a:01:
                    c6:bc:10:fe:97:25:3e:aa:59:00:4d:67:44:76:d1:
                    76:29:45:ec:1c:cc:61:f6:82:cc:b8:b3:61:de:5a:
                    ac:c6:43:01:53:4d:e3:3f:fc:ec:a0:ed:5f:71:f8:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:2B:89:BE:52:0C:AB:14:D9:7E:6E:2B:08:85:21:9D:E8:A9:59
            X509v3 Authority Key Identifier:
                keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:a9:3b:9e:50:70:e1:77:e5:72:db:c6:7e:2f:10:af:28:
         cc:0b:dc:bc:aa:6c:5f:86:66:58:2e:c5:eb:94:5e:7b:a5:dd:
         3d:1d:29:cc:d0:3f:13:b1:e5:25:f0:4e:6d:14:6e:4c:30:76:
         17:5c:d4:98:d7:c4:72:0b:66:4e:6b:9e:af:9e:6d:90:63:3e:
         99:31:26:cc:85:38:95:55:d0:67:04:d5:37:2d:e7:d7:56:db:
         91:4a:e4:fd:f7:bd:df:ac:24:c4:d0:c0:8f:08:65:74:19:86:
         f5:18:16:91:da:f4:e2:5b:82:87:7d:7e:37:39:fe:92:ef:d6:
         aa:dd:ef:49:70:5f:81:45:42:5a:0b:27:ee:8d:a4:03:cb:c9:
         e2:27:fe:87:76:bf:08:9f:eb:59:73:ab:a1:8a:77:26:a2:f3:
         bf:a7:80:43:93:e9:50:37:01:ad:72:8b:74:de:26:8c:7c:e6:
         d7:db:04:53:5f:50:b5:4c:5f:8f:a4:e2:d1:0d:56:47:6a:ff:
         56:bb:1f:d0:82:8e:be:2c:9e:40:8b:fd:89:5a:e0:86:df:b9:
         99:ee:68:b3:11:11:dd:f9:d8:5d:f1:16:67:57:3e:1d:e1:e8:
         70:0e:97:d9:21:35:dd:25:13:fb:37:77:14:af:37:f3:25:47:
         d0:d7:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:17:56 2024 by rpki-client on console-ams.rpki-client.org