Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          DokvCjqrACCFc6Mpqje7MPv1ZyQ7oiMQPbDlxGHCvUU=
Subject key identifier:   B2:5A:D2:8C:9F:5C:0A:0D:4A:E3:4E:68:F4:76:D9:96:9A:06:FB:49
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       019358787AE7390F8CB3F2084C452DB1E267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          12A3
Signing time:             Sat 23 Nov 2024 10:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:50 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:50 +0000
Files and hashes:         1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: O8v6HRPZkMLW9WX8hZ4R/RkkrpCvgQp7H0EuIkTUdpM=)
                          2: lDTCW3zHS-OgHqEZEAH5mPGjGd4.roa (hash: ehAx9jNCcepScgcC9iG+4GOmgn0vIE191wCVL79xl1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:7a:e7:39:0f:8c:b3:f2:08:4c:45:2d:b1:e2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Nov 23 10:01:50 2024 GMT
            Not After : Nov 24 10:01:50 2024 GMT
        Subject: CN=b25ad28c9f5c0a0d4ae34e68f476d9969a06fb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:dc:16:13:53:a4:43:76:26:e5:0a:88:8e:
                    d7:8b:65:11:4c:7d:2d:4c:e0:c6:65:64:b3:4f:80:
                    51:b1:01:1b:29:51:be:a6:61:5c:b3:46:f6:c0:f1:
                    6b:0b:92:4c:66:91:eb:1d:69:8f:12:bf:2e:3f:c1:
                    2f:2f:48:0a:0b:ad:e3:d8:4b:02:18:50:dc:65:2d:
                    de:c3:5e:2e:5d:71:58:8a:65:fa:30:74:0e:e1:57:
                    ad:38:28:6c:1c:c7:96:c7:c7:13:2e:bb:dc:c8:09:
                    01:66:29:f2:45:9c:90:b1:bf:ab:3e:85:29:7c:cf:
                    a0:f5:9d:1f:0f:4b:84:ff:46:80:07:a0:85:f6:a0:
                    15:d4:0e:01:4f:7d:29:7b:d8:19:6a:75:0a:23:c1:
                    4c:40:3a:e1:c5:47:38:0d:e3:a1:6e:83:d4:d7:8e:
                    dd:90:b3:dd:8b:d9:b8:cb:b0:dd:82:4f:d1:b7:3a:
                    14:fc:3c:30:68:46:3c:85:5c:72:4b:a3:9f:14:0c:
                    ef:4c:13:4a:c7:d3:bc:03:d4:c1:a9:a6:13:76:f1:
                    08:85:ca:17:fd:a9:b9:53:14:c5:87:c0:d4:1c:97:
                    52:12:66:2a:07:41:b6:ec:da:8b:22:03:d8:e2:d9:
                    37:53:00:d4:54:23:4c:db:6c:ba:5d:af:53:ff:e8:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:D2:8C:9F:5C:0A:0D:4A:E3:4E:68:F4:76:D9:96:9A:06:FB:49
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:09:c0:93:1a:66:62:fd:37:7b:95:99:0b:83:d3:a9:85:
         85:b0:eb:98:b8:4a:9a:ec:92:52:e1:91:a3:f3:fb:e4:db:11:
         d9:09:7c:16:9a:47:0b:39:f7:a1:6e:7b:80:58:aa:fb:ca:df:
         15:9d:e5:a4:43:00:6c:fe:a0:c0:dc:44:de:e0:2b:55:e0:0c:
         de:8e:94:6f:f1:2a:a1:86:85:47:e2:d7:ce:ea:30:b2:03:bc:
         94:c0:bd:6b:1b:e9:d1:aa:0a:b5:51:26:5f:7a:b2:58:3a:1c:
         6a:d8:e6:73:70:46:d4:75:2d:c5:17:37:a1:bb:28:bd:2e:c1:
         a2:d5:1a:b0:d5:e9:42:ee:e3:6c:b7:d5:96:65:80:af:ea:fe:
         ce:c1:fa:7f:43:95:a7:56:3c:e1:31:2c:4a:2b:6a:49:f9:c8:
         dd:c2:86:e8:be:09:38:9e:92:5f:92:40:5d:e6:64:59:73:cc:
         43:29:67:46:11:e5:b5:7b:8b:dd:d4:68:74:7a:8c:20:50:d3:
         1d:e5:ee:7d:ea:26:a2:66:a3:69:20:ae:6b:2c:33:52:7e:fc:
         78:d1:f9:d5:fa:b4:08:77:07:df:fd:c4:60:8a:e9:7f:af:f6:
         c5:32:bb:52:d1:f2:c7:04:40:21:a3:83:40:ee:c9:8c:c6:0d:
         d4:e3:84:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeHrnOQ+Ms/IITEUtseJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDY4ZjE4MTI2NWI0ZDk2Y2EyODM1YTNlNTcwYzI2Nzkw
MzVkZmYwHhcNMjQxMTIzMTAwMTUwWhcNMjQxMTI0MTAwMTUwWjAzMTEwLwYDVQQD
EyhiMjVhZDI4YzlmNWMwYTBkNGFlMzRlNjhmNDc2ZDk5NjlhMDZmYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm13cFhNTpEN2JuUKiI7Xi2URTH0t
TODGZWSzT4BRsQEbKVG+pmFcs0b2wPFrC5JMZpHrHWmPEr8uP8EvL0gKC63j2EsC
GFDcZS3ew14uXXFYimX6MHQO4VetOChsHMeWx8cTLrvcyAkBZinyRZyQsb+rPoUp
fM+g9Z0fD0uE/0aAB6CF9qAV1A4BT30pe9gZanUKI8FMQDrhxUc4DeOhboPU147d
kLPdi9m4y7Ddgk/RtzoU/DwwaEY8hVxyS6OfFAzvTBNKx9O8A9TBqaYTdvEIhcoX
/am5UxTFh8DUHJdSEmYqB0G27NqLIgPY4tk3UwDUVCNM22y6Xa9T/+ipAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJa0oyfXAoNSuNOaPR22ZaaBvtJMB8GA1UdIwQY
MBaAFExGjxgSZbTZbKKDWj5XDCZ5A13/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjIt
MWNkMzM5M2QwYmY1LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjItMWNkMzM5M2QwYmY1
LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7UJwJMa
ZmL9N3uVmQuD06mFhbDrmLhKmuySUuGRo/P75NsR2Ql8FppHCzn3oW57gFiq+8rf
FZ3lpEMAbP6gwNxE3uArVeAM3o6Ub/EqoYaFR+LXzuowsgO8lMC9axvp0aoKtVEm
X3qyWDocatjmc3BG1HUtxRc3obsovS7BotUasNXpQu7jbLfVlmWAr+r+zsH6f0OV
p1Y84TEsSitqSfnI3cKG6L4JOJ6SX5JAXeZkWXPMQylnRhHltXuL3dRodHqMIFDT
HeXufeomomajaSCuaywzUn78eNH51fq0CHcH3/3EYIrpf6/2xTK7UtHyxwRAIaOD
QO7JjMYN1OOEPg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:10:05 2024 by rpki-client on console-ams.rpki-client.org