Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File:                     TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier:          q/nrzc/9uArv3HnjVuApBl4vRYJPJoO/DX+YiZGUxb4=
Subject key identifier:   03:48:CB:C9:37:28:00:10:2E:18:0C:3E:DA:D8:CB:42:64:52:A5:B6
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer:       /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial:       01935688D650BD7D4964CA19BEC35A449E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:28 +0000
Files and hashes:         1: 6XS4QqNWLAtBHVYtzp11SuvSRjc.roa (hash: zCjFt6RvrWArVCkb9D+eqM9UrhRl3bW8h2YmZMnOaWs=)
                          2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: xS2iW4SQTydWRF1xtNJGCYLvBosk0OHNPtqjrcKsZOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:d6:50:bd:7d:49:64:ca:19:be:c3:5a:44:9e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
        Validity
            Not Before: Nov 23 01:00:28 2024 GMT
            Not After : Nov 24 01:00:28 2024 GMT
        Subject: CN=0348cbc9372800102e180c3edad8cb426452a5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:1d:06:10:a1:d6:58:b9:f6:79:4c:ac:75:
                    68:08:5d:7c:0b:23:7e:79:ee:7b:4f:66:69:dc:c8:
                    79:e6:ff:a7:cd:a3:71:5d:5c:d5:fc:1b:65:88:3e:
                    6d:86:68:fb:d7:db:66:20:a7:53:6a:c3:b3:d7:f7:
                    44:fb:27:0f:1d:93:95:d3:ca:e1:f1:fe:60:71:13:
                    3d:bc:4c:5e:a0:32:21:6e:6a:5f:76:10:87:74:59:
                    0c:0e:56:98:71:04:a6:01:86:1c:92:23:b8:2f:6e:
                    f2:32:ac:62:b1:03:0f:ac:ca:c7:a9:bf:fe:b1:aa:
                    2b:b6:a7:44:76:9d:45:2b:ec:ca:d9:c5:62:a1:2a:
                    6e:c3:15:31:84:9e:56:dc:18:76:03:44:db:cc:73:
                    05:88:87:98:72:fc:67:3e:23:ed:ba:66:34:93:06:
                    7b:d3:bb:93:f6:b5:24:a1:8d:f7:9d:eb:62:e1:21:
                    5a:ba:35:1a:8e:14:fb:1a:3f:94:1b:69:4c:1e:2c:
                    ef:9b:75:5a:3e:6c:77:2b:bd:14:2a:f6:94:e9:05:
                    95:85:e5:2d:77:57:ca:82:d0:9a:96:09:e6:ea:73:
                    e4:91:0b:06:73:7c:a9:e2:f0:0e:55:dd:bc:cd:01:
                    e5:59:96:1e:8b:d6:2b:fe:32:77:9d:24:ca:29:ea:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:48:CB:C9:37:28:00:10:2E:18:0C:3E:DA:D8:CB:42:64:52:A5:B6
            X509v3 Authority Key Identifier:
                keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:16:21:7b:1b:68:27:ed:4b:64:3e:d2:a9:2d:6b:2a:22:21:
         c6:34:42:4c:8b:1f:b7:c3:d6:3c:e1:55:ac:ee:82:37:55:ea:
         48:ee:7e:3a:3d:5d:fe:e8:1f:54:f5:d7:08:78:36:55:e6:6a:
         30:00:f6:47:3a:d5:ac:77:9a:0d:f3:c8:9e:bd:53:6d:84:eb:
         10:66:45:84:57:e5:d4:3c:6b:fa:09:ce:d7:00:9b:5a:00:80:
         93:b2:b9:39:46:67:df:dc:e0:e2:e0:2f:fa:2e:b6:9f:ba:2d:
         23:f4:d2:2e:bd:3c:45:02:15:94:4f:be:6d:bd:4c:5d:f1:23:
         49:c0:96:53:27:3b:13:14:6c:a8:fb:67:c8:0c:16:34:20:f1:
         82:79:00:91:01:4c:62:f6:cc:74:13:b4:4d:d0:dd:f0:33:45:
         ff:41:a2:9d:ff:ed:e1:a2:43:f5:c9:b9:1a:a1:1a:09:76:0d:
         48:82:49:cb:73:c7:a5:41:a6:d6:9e:eb:33:e1:84:62:79:a8:
         f5:47:64:24:d8:fd:cf:d7:0f:e2:69:f9:3a:81:a5:c2:80:64:
         f4:8c:28:eb:e4:07:81:ba:3f:0f:89:da:c2:01:1d:16:7a:15:
         89:57:b7:82:54:09:64:35:20:38:5a:ea:a1:98:06:17:7b:bc:
         42:79:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:13 2024 by rpki-client on console-ams.rpki-client.org