Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File:                     TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier:          5/dFc0URJZCZQv9UkBRRPfV/ydiPCrNnbspvMZpi0uw=
Subject key identifier:   FA:CC:EC:AB:67:5B:CA:0B:C9:EE:84:AF:9B:64:D0:9B:07:A0:C6:4A
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer:       /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial:       0193568AD49649D03181ACD94B18810828DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number:          05B8
Signing time:             Sat 23 Nov 2024 01:02:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:39 +0000
Files and hashes:         1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: lQFsj8DLdif1HwLnGtGHEsQseOiDwmsR66dVssVak/g=)
                          2: XDILvvKovK62SZUirswxhxVFISM.roa (hash: QmaTPBawSuypyeS/HwTup0pVZiZWPpJZN1Z1xHIrrUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:d4:96:49:d0:31:81:ac:d9:4b:18:81:08:28:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
        Validity
            Not Before: Nov 23 01:02:39 2024 GMT
            Not After : Nov 24 01:02:39 2024 GMT
        Subject: CN=faccecab675bca0bc9ee84af9b64d09b07a0c64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:e5:85:36:4d:6b:96:eb:89:6b:41:5f:7f:
                    23:70:43:d3:22:c5:35:5c:47:a9:93:94:f7:9c:fd:
                    c8:37:63:48:fd:e0:0f:13:e5:3a:23:1b:4a:d9:cb:
                    a2:38:fc:ee:69:99:dd:78:21:d4:ad:24:39:38:df:
                    d2:41:43:88:0c:96:c5:9d:1c:f5:64:d7:32:85:56:
                    6b:a8:ee:4d:69:94:52:c7:b0:96:68:69:8b:49:5c:
                    0a:ff:cf:00:3a:b0:6a:f0:2b:40:dc:56:20:f9:28:
                    29:ce:b2:c8:3a:8e:80:3e:dd:3d:d2:1b:77:6a:80:
                    2d:ea:de:9a:29:9c:f5:6c:51:9c:4f:7f:5f:0b:95:
                    99:7f:89:6f:38:05:42:93:04:ae:bf:a5:59:48:46:
                    8e:bd:c6:3a:3b:3b:01:f9:4c:71:22:8e:e1:17:4c:
                    76:77:f1:38:79:b7:d6:e0:9e:73:ac:68:e5:aa:64:
                    53:40:1b:2c:b0:1c:0c:93:b8:a1:22:d9:71:76:02:
                    ca:f8:29:32:c4:79:a5:26:b9:64:13:79:75:e8:87:
                    1f:07:c4:7a:99:70:ab:ed:3c:78:b5:1d:14:38:04:
                    9a:36:95:4e:a0:3c:8e:b3:03:43:97:f9:16:88:48:
                    9e:9b:db:ba:23:e4:c3:24:9f:06:e2:fa:7f:8f:5e:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:EC:AB:67:5B:CA:0B:C9:EE:84:AF:9B:64:D0:9B:07:A0:C6:4A
            X509v3 Authority Key Identifier:
                keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:c5:b5:f2:0b:d4:90:53:4e:94:19:36:0d:1d:de:0d:9c:
         61:18:13:13:4f:5a:49:ee:24:59:8b:44:1f:3f:16:3d:02:e0:
         87:01:76:d5:37:c4:6a:29:98:83:25:64:b2:76:c7:22:5b:87:
         c3:16:6d:52:cc:16:05:e0:9a:b9:20:63:62:91:32:c1:48:c4:
         36:21:25:ab:7c:9b:00:3f:1f:63:6f:ac:c9:8f:82:77:1a:bc:
         af:0d:84:a6:d0:29:fd:ca:78:75:0b:a9:f5:f6:ca:69:a6:9d:
         df:db:4c:b8:eb:ec:38:70:49:98:8c:d2:94:90:15:2e:9f:5d:
         f7:2e:34:35:6a:a6:9c:b4:c3:15:79:58:f1:ff:61:cc:73:fb:
         da:fb:ee:d6:8d:0f:27:54:cd:36:b2:be:76:53:25:ce:fc:a7:
         65:4f:82:13:b7:ff:ce:82:a4:0b:64:46:38:ed:a1:52:c3:4b:
         f0:bc:b1:5d:42:2a:dd:0f:94:9c:7e:66:4a:cc:ec:cb:50:a3:
         69:b2:73:17:f1:e8:30:7b:5c:1a:94:83:81:46:2a:e6:ba:db:
         cb:b4:97:e8:94:74:90:19:59:99:79:83:a5:17:c0:ba:bb:d2:
         85:fe:60:0a:e6:ea:0e:3a:3d:07:eb:ea:78:3b:38:e4:59:b4:
         02:c6:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:21 2024 by rpki-client on console-ams.rpki-client.org