Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          kuLMprI63g+8tY4pNUMCnkiVsVJam8TMew2Hft6nwW0=
Subject key identifier:   4B:76:03:7E:BA:95:96:5E:B7:51:0B:CF:7E:C8:5B:10:D6:A1:FE:99
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       0193561AF1A945DF42E4A111E732AD6F7F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          0A3A
Signing time:             Fri 22 Nov 2024 23:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:26 +0000
Files and hashes:         1: VpMdeuXl-C_ErRqb_iOyMlXRyjk.roa (hash: Sb5EvJip94fFKKW9hcAcGUGdSztfoZRXcHOa5GEZV80=)
                          2: fpgr5aQ1jQ4PrAX4Fh6eKOPCZHY.roa (hash: ltN7gZIISH8XuRK4BfGGjerFQdiOtmwoDJYsNHrXMaA=)
                          3: ktWINbCLiBTDHy52jZLW-YhI6Y8.roa (hash: yPJhNycy5ZGZH43js1aXnmRvMHjyEBrkFhP1LtSx4IQ=)
                          4: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: ZqU2+77RAjqecXFdVpB+XRWQqMpO8WbIA025wbL+qpA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:f1:a9:45:df:42:e4:a1:11:e7:32:ad:6f:7f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Nov 22 23:00:26 2024 GMT
            Not After : Nov 23 23:00:26 2024 GMT
        Subject: CN=4b76037eba95965eb7510bcf7ec85b10d6a1fe99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:50:80:9e:ef:1e:27:02:fa:28:ec:66:63:
                    5b:69:6f:18:dd:94:b6:5e:e1:04:79:a1:19:96:31:
                    8b:30:03:16:87:66:c4:b9:f3:6d:f9:e7:c5:58:5e:
                    7a:21:c2:a6:78:fc:95:29:ef:be:c0:8a:3a:83:7e:
                    aa:1a:f8:75:64:2b:e1:f6:21:4c:de:5f:4b:7c:55:
                    a0:49:26:14:2a:17:24:25:2b:77:0b:bc:e2:7a:00:
                    ae:86:84:80:46:eb:81:01:29:82:51:99:31:02:4c:
                    e8:6b:49:77:68:d4:c3:f6:83:e0:5d:6b:be:4b:b3:
                    b4:ea:cc:aa:2e:79:65:29:b7:1d:bd:af:e1:9e:54:
                    f2:61:b2:0c:8c:54:5d:0b:3f:9d:fa:4f:e3:51:cf:
                    b4:60:ff:6e:13:19:47:84:37:80:79:01:ce:dc:46:
                    60:d2:d5:c3:57:d2:d1:22:b0:8d:8e:6b:50:a9:cd:
                    26:e8:2a:d3:b1:d0:3f:60:27:a5:6d:8b:60:61:74:
                    58:5d:38:2b:f7:b9:8e:aa:ee:cf:46:a8:b1:50:1b:
                    fc:cd:42:36:9f:a7:ec:b1:dd:80:23:53:37:53:7d:
                    36:86:31:87:6e:4b:9b:be:71:74:17:6e:dd:ec:b5:
                    e3:b8:d2:4e:2e:12:e8:fb:a7:2f:43:ef:31:84:44:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:76:03:7E:BA:95:96:5E:B7:51:0B:CF:7E:C8:5B:10:D6:A1:FE:99
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:f3:e0:c3:d7:93:0f:f3:b1:1b:af:00:ab:2f:7b:f6:a6:
         7a:bf:26:e2:74:af:a8:c2:e0:af:b0:de:2b:15:69:2c:8e:5b:
         e4:9c:d3:85:e7:07:80:3e:f4:7a:58:5b:a0:d2:3a:1c:20:20:
         31:1f:39:f1:fd:40:be:7f:d7:c8:5f:65:c8:cc:39:89:4d:c9:
         e8:78:1e:cf:25:d7:2b:c5:19:b1:1f:01:52:1e:02:44:e1:49:
         7b:02:eb:a6:a3:83:22:7f:48:9f:47:bf:23:89:e4:8f:d6:bb:
         b3:9f:eb:3d:f7:f9:16:5f:61:84:a5:0f:8b:42:ed:46:eb:21:
         65:94:83:a5:55:0c:b7:f0:84:2d:28:0e:52:12:cf:21:fb:08:
         cf:cc:45:3f:ba:25:0b:76:2f:b2:2a:f1:38:b8:a4:c9:0d:ac:
         0d:1f:a0:c4:fc:88:8a:f1:83:97:65:3e:8c:65:77:29:13:43:
         0b:56:ae:a5:2b:e6:cd:0b:57:63:66:57:63:b8:cd:d0:b0:ca:
         24:bc:9e:32:d4:65:76:30:b4:0b:6d:f2:02:5b:87:cb:2e:93:
         75:fb:15:9e:a2:5a:76:66:12:1b:de:0e:98:ec:f1:3d:a3:cd:
         c0:48:23:a9:87:71:ff:88:73:5e:a0:9d:04:bd:1f:ed:01:b1:
         d2:df:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:10 2024 by rpki-client on console-fra.rpki-client.org