Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File:                     tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier:          44TmUtpQpYUCWExocbvP4JnWkvW/1lSSbx9qI38+ZVo=
Subject key identifier:   1B:05:E7:3C:63:2C:AB:DD:19:14:C8:58:A9:94:DD:6A:85:6D:85:84
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer:       /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial:       019366A0D458DF76081D338A925F7213107D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number:          1119
Signing time:             Tue 26 Nov 2024 04:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 04:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 04:00:36 +0000
Files and hashes:         1: TDWdQnyyUoy5ZzDVYf7fJ7q9vI8.roa (hash: Z4LBSHvfeKroOirv78BQyzjKEaqAR5iWuuq1hEmSV4Y=)
                          2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: JpSZAKXGypeD0JhW92Utnx2lHj0iwjT9hp5PR4XvzhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:a0:d4:58:df:76:08:1d:33:8a:92:5f:72:13:10:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
        Validity
            Not Before: Nov 26 04:00:36 2024 GMT
            Not After : Nov 27 04:00:36 2024 GMT
        Subject: CN=1b05e73c632cabdd1914c858a994dd6a856d8584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:b5:af:a6:e3:89:41:bc:7d:b2:9b:e7:19:
                    65:95:40:41:8d:10:98:d1:2a:5d:48:b7:15:1c:2e:
                    49:29:f3:ef:a6:84:ec:32:2d:82:95:13:3e:92:17:
                    f9:f6:01:44:80:f6:fa:b8:ed:13:f3:1d:99:be:9e:
                    43:68:c2:e9:d2:e9:15:22:d2:75:93:63:64:2f:ff:
                    fe:23:31:78:85:6b:94:58:48:16:a0:9f:d4:9c:a4:
                    f4:91:c6:dd:f9:98:58:d0:02:8e:cb:7e:1d:d1:95:
                    e9:a5:6f:78:3b:ec:7e:07:94:4b:77:b6:68:b6:93:
                    b4:a8:71:33:20:92:80:a6:ca:80:36:e1:23:7c:5e:
                    0d:6c:45:ab:cb:c8:c5:a7:f4:f5:f3:bd:e6:4d:f9:
                    b7:f1:6e:4f:64:16:86:69:ad:20:98:6c:f0:3a:25:
                    c0:5a:36:9c:70:49:6b:d9:7d:b8:ac:48:f5:7a:91:
                    9e:f0:d1:a1:79:91:d3:7d:47:ae:f6:0d:c7:d3:92:
                    e6:47:97:12:d4:72:96:89:3c:e7:f5:f5:98:2a:45:
                    dd:ce:1c:64:07:d5:3a:8e:c0:9a:66:18:cf:d9:f7:
                    42:46:f3:9f:5f:c7:c3:2f:c4:76:6e:60:99:70:02:
                    36:77:73:b0:f7:7d:8d:27:c8:83:46:d8:c4:6b:c2:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:05:E7:3C:63:2C:AB:DD:19:14:C8:58:A9:94:DD:6A:85:6D:85:84
            X509v3 Authority Key Identifier:
                keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:7d:20:29:4a:c4:53:a3:24:44:9c:f7:cc:c0:e7:4f:1a:
         a9:71:6d:68:d4:36:fe:f0:23:f3:a6:9c:c6:b6:85:87:bd:4a:
         d6:6a:b7:a7:17:a9:b9:7e:22:91:ce:22:2c:7f:ea:ab:59:bc:
         e5:37:74:e9:14:c5:02:52:4e:93:ed:23:ce:69:21:f4:8c:0f:
         79:6a:a5:a7:50:75:0e:eb:42:26:f9:de:3f:b8:26:60:c2:92:
         d2:6d:72:85:d3:7b:4b:9a:16:e5:94:22:bf:68:58:12:dc:82:
         86:e6:79:6f:3e:f6:0e:e8:c1:18:c4:70:a0:d1:e0:ec:22:a0:
         81:d7:68:db:df:cd:41:0f:4d:47:17:73:55:b2:42:8b:91:23:
         b1:2a:8e:54:48:98:7d:35:77:82:58:16:d0:bc:73:d3:4e:74:
         7e:6e:80:eb:de:f9:bc:e1:2b:5a:8b:d4:fe:89:77:7e:c9:18:
         73:e4:8a:bf:84:1b:1a:2d:12:8c:e0:56:d1:60:51:f9:47:1f:
         32:ef:d6:dd:0d:66:bc:17:30:7a:3d:44:48:0a:ff:24:69:8b:
         fa:1f:f3:26:c0:d7:99:06:9c:8b:08:2a:64:12:98:a5:ab:18:
         7e:1c:9c:21:56:8e:b0:18:35:38:e3:44:e3:dd:9c:a6:87:4f:
         ed:30:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:36:46 2024 by rpki-client on console-fra.rpki-client.org