Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          /AP7HvH5uDnMthFKYoaKtuGatBk3+QBMCfHzSdEZUt8=
Subject key identifier:   DB:14:40:1B:7E:27:B9:1C:C8:48:9D:EC:D9:88:69:E4:FA:F7:49:AD
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       0191FA7E38189024D500DA44CCEE81039F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          E2
Signing time:             Mon 16 Sep 2024 11:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:01 +0000
Files and hashes:         1: Nkzflt3ApEgwQpUXtIsgkGaRPS8.roa (hash: ie+4GxncL7+l/pgspE+wQtNMTUS4TaMK7mA21ZHWAJI=)
                          2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: 5ZDH52u6MdSZSReLQ/rqkvrA8BCUFPlfyeWH66h+Sgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:38:18:90:24:d5:00:da:44:cc:ee:81:03:9f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Sep 16 11:01:01 2024 GMT
            Not After : Sep 17 11:01:01 2024 GMT
        Subject: CN=db14401b7e27b91cc8489decd98869e4faf749ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:d5:3b:29:35:71:fa:b6:8d:a4:30:71:11:
                    1a:79:46:a3:97:2a:9f:fa:5e:27:3b:5e:e1:5c:72:
                    10:b3:a3:d8:2c:03:d2:4b:b7:6b:0d:2f:12:8a:4f:
                    0c:b4:cd:46:8e:4e:50:d2:7a:9f:9e:e3:c4:b1:d1:
                    be:cd:65:f4:80:fb:2c:bd:af:2b:bd:d8:a7:37:35:
                    b6:7e:52:bc:ab:6d:4b:14:cb:fd:1e:73:28:0e:7c:
                    81:62:99:c7:d2:6c:29:e2:5d:03:e5:36:0d:02:52:
                    cb:a7:7f:8e:2c:f5:95:ec:8e:6f:a7:fb:8d:40:c2:
                    be:0c:91:49:6d:d2:63:fd:b3:59:40:ec:7f:2f:3a:
                    0a:3f:66:82:3f:9f:07:ce:3a:d5:3c:25:e3:4c:67:
                    7c:3c:bc:5c:20:42:d0:33:ba:f6:90:39:4e:25:58:
                    0f:82:5d:c1:f3:a3:fa:29:45:4b:f6:de:48:c4:fd:
                    ee:2d:50:e4:24:5d:f3:ed:00:90:ca:35:33:59:2e:
                    bd:96:34:50:1c:03:8d:28:70:53:ed:d2:e9:6c:4c:
                    19:36:20:a5:79:7e:61:83:b6:04:1f:ce:7b:5e:d2:
                    3c:db:0b:9b:af:2f:38:96:2d:a4:14:af:0a:d5:19:
                    5a:01:f5:01:3c:a6:da:89:ef:4b:7e:e9:7d:45:86:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:40:1B:7E:27:B9:1C:C8:48:9D:EC:D9:88:69:E4:FA:F7:49:AD
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c7:1d:4e:81:8d:53:b9:b7:04:e8:1b:ff:bb:44:bb:42:27:
         11:58:d2:61:77:6d:c2:33:0a:00:80:f0:8f:ae:2e:9d:b5:97:
         ef:0d:22:bf:d5:a8:76:5f:3b:d0:71:7c:da:3d:95:c3:7c:ed:
         2d:e2:7c:a9:3e:dd:8d:19:35:aa:61:08:f4:06:07:d5:4e:81:
         88:57:63:b3:b6:1d:3f:b5:10:b2:03:95:61:84:8c:b9:85:61:
         0f:b5:ca:ad:12:a6:6c:0a:48:f5:1c:41:7d:9e:64:41:55:c4:
         7f:38:01:d5:e8:8e:c5:80:c3:38:aa:4b:83:12:f1:a3:2f:15:
         aa:b5:4a:71:a7:73:e3:af:bb:79:10:76:35:ef:db:eb:99:76:
         1f:74:0b:99:a3:f5:b7:76:1f:90:b8:d5:08:f2:41:f3:3d:c8:
         93:bb:97:88:7d:fc:e4:9c:60:b9:1b:2e:e2:9e:40:41:33:86:
         00:8c:3f:77:a0:7c:14:72:27:f8:54:e4:99:05:86:6e:2b:6a:
         ff:42:68:6a:f3:98:5f:bc:5c:73:37:bb:3b:4f:07:99:b5:c3:
         9c:c8:8d:0f:29:a5:a7:58:cd:1f:fc:2b:79:3b:49:92:c9:72:
         43:fb:ae:5c:70:9c:77:f1:d7:d5:bd:14:80:16:f4:78:bb:b3:
         3e:67:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:19:16 2024 by rpki-client on console-ams.rpki-client.org