Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          ZBFh601wBBQUjYHMBb0JL4/WXzjzw2OjJy2BBWJZaDk=
Subject key identifier:   2E:3C:BA:28:BF:F8:3F:97:67:C0:45:85:88:59:D3:24:E2:CB:4B:48
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       0193696AC9A243A288AE80785143650B9500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          01A0
Signing time:             Tue 26 Nov 2024 17:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:26 +0000
Files and hashes:         1: Nkzflt3ApEgwQpUXtIsgkGaRPS8.roa (hash: ie+4GxncL7+l/pgspE+wQtNMTUS4TaMK7mA21ZHWAJI=)
                          2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: w6rcwZ3gBbMFJJcbyoxyoNGtA0geMhCcPXd89rn5ME0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:c9:a2:43:a2:88:ae:80:78:51:43:65:0b:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Nov 26 17:00:26 2024 GMT
            Not After : Nov 27 17:00:26 2024 GMT
        Subject: CN=2e3cba28bff83f9767c045858859d324e2cb4b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:9b:98:a3:17:90:e5:08:e6:cf:41:f7:51:
                    d3:66:d9:09:da:6e:21:67:f6:c1:6b:d1:23:ce:19:
                    ed:46:34:5e:48:e0:ee:35:7e:d3:21:c9:2e:61:8e:
                    9b:b6:cf:84:42:23:6c:4f:7f:20:fa:79:b5:07:5f:
                    c8:63:bc:d2:3f:c8:a1:cf:6d:c8:87:6c:aa:e1:e5:
                    6f:30:b2:4d:00:ac:57:30:41:2e:63:7d:08:e1:6f:
                    5f:b6:ff:04:74:b4:74:72:22:03:37:41:42:a8:1d:
                    b8:47:cc:e4:b6:b5:8c:91:d8:70:8e:df:fb:de:1d:
                    fe:0e:e2:e1:0a:fa:b9:bf:90:c0:94:e2:6b:12:c4:
                    3b:1a:ef:14:53:88:89:aa:48:a5:bc:a2:7b:f1:16:
                    bd:9d:6f:41:75:af:30:2d:de:2f:0d:42:15:08:be:
                    e9:14:68:ad:e3:2f:8d:31:56:20:21:c5:c7:3e:33:
                    00:b9:b1:23:34:f4:51:17:1b:84:6c:2b:56:41:51:
                    50:61:4d:e0:78:98:d7:7d:52:6f:83:fa:18:a8:de:
                    00:c1:f1:79:f0:ed:06:47:be:f6:5c:f8:e7:43:ff:
                    47:04:d6:4a:70:ff:3c:94:20:7a:34:c5:b2:1e:1e:
                    7d:a2:41:61:08:a1:65:63:8b:be:25:b3:87:5d:77:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3C:BA:28:BF:F8:3F:97:67:C0:45:85:88:59:D3:24:E2:CB:4B:48
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cf:90:9b:fa:18:1e:28:14:b0:f3:e6:0b:92:46:97:cd:0b:
         ea:9c:93:5d:69:64:b4:6b:61:dd:a5:99:0f:99:bb:ea:01:42:
         77:93:d1:18:bd:4b:da:c2:0b:65:38:5d:30:60:9b:68:56:12:
         94:f1:e6:0a:2f:dc:fe:78:26:92:9f:e2:5f:0f:08:bb:cf:c2:
         f4:c2:d5:38:1d:92:a3:4e:9f:6b:bb:44:19:02:ff:f9:0b:b1:
         e0:32:4a:cf:8a:8b:f4:23:6c:0d:1c:c9:a1:99:85:2b:53:48:
         06:57:66:f0:2b:da:3b:74:bf:75:71:fa:94:df:98:5a:9e:cb:
         26:a6:6e:28:88:1e:ca:d9:83:d9:03:2b:5c:38:af:3b:5a:ed:
         49:9e:91:73:6d:d9:51:1b:7d:f7:19:e5:f5:56:0f:c5:e8:f4:
         df:72:79:43:ff:d7:b7:0d:95:d7:45:04:f4:72:a8:49:28:de:
         85:17:0e:8d:6a:58:a6:4e:26:42:59:60:e2:5d:dc:ab:6c:0b:
         1e:7b:ce:9b:dd:c4:dc:bf:89:09:6e:37:20:eb:8b:18:7b:d9:
         ee:c8:e9:0c:8e:78:c2:7b:ee:88:4f:b5:7c:dc:39:12:a5:2f:
         70:34:36:b4:a7:9d:48:ec:a5:73:77:70:3a:2e:bf:ac:db:74:
         a9:0b:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:27 2024 by rpki-client on console-ams.rpki-client.org