Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File:                     tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier:          OuHD8E2BhiMmiM+D0cIdePO/GHl+U8PVlBolklpYqjo=
Subject key identifier:   8B:36:80:14:54:83:13:09:63:7C:32:C7:FD:67:D8:9F:1E:6A:CA:28
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer:       /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial:       01935764A5255E4E69D3E5739D5AD3689F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number:          12B9
Signing time:             Sat 23 Nov 2024 05:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:33 +0000
Files and hashes:         1: 1K7Fjiv_QF_ERoI4zPn-w9YUg2E.roa (hash: qgDbcrhhOGKpK3TwHDtZAj+Roc94V5RszymGPWebKgs=)
                          2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: HO9Fr80ZWGSgfA3cY6RhKxa48USgN+DL4vAzkjuOLJg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a5:25:5e:4e:69:d3:e5:73:9d:5a:d3:68:9f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
        Validity
            Not Before: Nov 23 05:00:33 2024 GMT
            Not After : Nov 24 05:00:33 2024 GMT
        Subject: CN=8b36801454831309637c32c7fd67d89f1e6aca28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:1c:14:77:98:ca:1d:f5:95:67:9e:e6:94:
                    b5:15:1d:fe:33:46:5e:1a:da:a9:d2:73:ae:16:7e:
                    3c:f1:5c:b4:08:82:8e:5a:dd:08:54:a8:d1:12:41:
                    15:69:b0:7b:39:c7:86:4b:61:fd:0e:6f:8b:cb:b9:
                    f0:7b:d3:70:49:2b:79:cb:af:5d:d0:95:65:73:2f:
                    a8:c0:ee:fe:fa:10:a6:c9:a1:01:bb:c0:e0:97:64:
                    ac:03:92:08:0e:d8:ee:de:65:33:d2:92:ad:55:e6:
                    f3:16:50:e7:e0:b1:6f:70:9e:0b:db:61:ce:d2:14:
                    f8:66:ad:f3:c7:7b:da:67:d9:64:60:27:65:b3:fd:
                    8b:48:f6:16:6c:4f:72:75:73:f8:e2:dd:a7:2c:42:
                    15:49:06:b8:21:0c:12:b5:7b:45:33:2e:2b:37:14:
                    55:73:85:31:af:04:0c:8a:e2:77:55:58:d5:a1:77:
                    d1:26:8b:8f:df:5b:09:86:6f:f3:3c:11:e4:fb:1d:
                    b2:e4:83:5e:d2:56:f6:ed:43:41:36:4a:c3:34:f4:
                    04:98:9c:7b:51:99:28:12:2b:9e:d2:82:02:55:a8:
                    a5:e1:0b:39:cf:a7:d7:9f:5d:be:0a:1f:0d:1d:c1:
                    64:d2:2a:0e:01:6c:d9:b9:37:bc:de:62:f1:8b:fa:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:36:80:14:54:83:13:09:63:7C:32:C7:FD:67:D8:9F:1E:6A:CA:28
            X509v3 Authority Key Identifier:
                keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:52:64:d5:8f:06:9d:69:fd:33:cd:2c:f4:ce:f9:4d:b8:72:
         97:68:15:48:3d:ca:ac:ee:dc:44:7b:51:47:3e:fd:64:a5:fa:
         0e:b3:09:5e:10:30:1b:56:3e:53:2f:44:f6:f6:aa:96:77:ed:
         26:f2:67:1b:ae:f6:02:33:39:6a:2e:d6:30:50:33:ff:60:8d:
         af:fd:d0:02:59:eb:cc:54:3d:09:e9:05:2d:4c:22:e5:6e:40:
         84:64:99:99:0d:75:d2:29:90:77:21:30:e2:af:33:ce:3d:20:
         10:17:5d:14:24:87:26:0d:50:2d:cf:b0:6d:f5:db:bc:5c:ef:
         ef:da:b3:c1:e0:5a:04:cc:30:77:e6:4d:4b:b5:36:ec:df:29:
         ac:05:36:3b:f9:a3:f8:0a:29:2d:9a:76:89:76:83:ae:61:a8:
         71:3b:78:3a:81:07:a5:5c:64:e5:97:73:55:fb:4c:29:b3:27:
         64:b5:7b:d2:d5:c6:e6:aa:c7:6d:a5:04:c2:2e:ba:c1:da:87:
         4f:bc:97:3f:be:7e:61:d4:2e:ce:49:bf:81:91:81:24:f1:4b:
         ec:e8:af:1d:7a:6e:83:ff:ff:bc:b8:5f:ac:9c:70:c4:86:1d:
         f5:65:64:83:44:f0:0c:5e:79:c8:04:a9:11:43:c4:76:2c:c8:
         13:82:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:57 2024 by rpki-client on console-ams.rpki-client.org