Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File:                     TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier:          FXzxD6E+4K+EU/djYTDPLuqAU/o44bFzDmxQippkW0A=
Subject key identifier:   A7:4E:C6:53:D5:A7:B3:25:81:6F:B5:05:58:40:8B:78:70:07:A7:2E
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer:       /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial:       0193568AE8119A29EF43E94B8EB03CA1D920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number:          09C8
Signing time:             Sat 23 Nov 2024 01:02:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:44 +0000
Files and hashes:         1: QwGn6uzoGStscTztkUon7jeLTkI.roa (hash: h8Xcb+Xx9rePH/FrX6J9oxEQYg6giW6qz7DoKyz0mbA=)
                          2: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: Ap3k4OHXQkSc8fRL3HOTqgiduU7+jP5iQO+o01Z1o4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:e8:11:9a:29:ef:43:e9:4b:8e:b0:3c:a1:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
        Validity
            Not Before: Nov 23 01:02:44 2024 GMT
            Not After : Nov 24 01:02:44 2024 GMT
        Subject: CN=a74ec653d5a7b325816fb50558408b787007a72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:06:dd:4a:65:e0:3a:22:b7:ab:c7:d6:76:
                    9a:08:02:ac:3b:e6:3c:bd:4a:9a:92:4d:63:6e:80:
                    0f:e9:2f:92:cc:eb:c9:e2:71:24:86:96:6b:bf:0e:
                    eb:46:04:1c:33:3e:f2:39:e6:0c:ae:ec:a3:e4:a0:
                    29:59:69:5b:f9:bd:bd:0f:5d:1f:71:6f:1c:ba:f7:
                    8d:dc:e3:67:ce:39:40:63:cc:f2:03:48:4a:d8:a5:
                    7b:bc:b7:39:14:8f:fa:04:14:c3:79:b5:5d:ce:b9:
                    f9:c1:fa:d1:d5:07:f6:41:5f:80:11:4b:ed:02:e2:
                    dc:df:82:41:ba:4e:68:9d:61:f0:ce:8f:6e:48:6d:
                    7d:4e:f1:13:5e:e8:6e:7e:d1:b0:7e:12:a4:dc:32:
                    9f:e4:d5:95:f2:38:e3:12:4b:9f:24:23:19:77:2f:
                    cb:6a:2b:2d:ca:8a:41:7f:2a:1f:fb:ba:3a:9b:06:
                    bb:c1:89:19:a3:3b:56:99:74:09:e6:6a:4b:89:18:
                    8e:ff:a3:79:7b:e6:49:e9:6d:8c:39:7c:79:60:59:
                    c9:1b:85:7d:20:59:87:52:25:85:94:c4:57:93:02:
                    f8:01:0e:a6:89:70:ed:86:22:ed:4f:fe:03:a6:43:
                    f7:30:dc:ad:9a:2f:29:81:51:0e:5b:52:06:03:f7:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4E:C6:53:D5:A7:B3:25:81:6F:B5:05:58:40:8B:78:70:07:A7:2E
            X509v3 Authority Key Identifier:
                keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:76:34:81:a0:e3:15:a3:52:0f:de:ba:d2:0c:38:19:ec:
         70:ff:f3:39:ad:10:d0:f4:81:e7:cb:ae:8c:4b:4f:40:7b:9d:
         3b:a0:4c:64:33:f0:54:0a:6e:bb:ae:6d:4d:e8:3c:04:2d:85:
         d8:4d:00:a3:dd:e8:50:27:1b:8d:55:2e:88:44:ab:8d:c5:ab:
         df:a7:ea:91:09:11:8c:7d:7e:23:bc:d9:30:89:b4:30:73:0b:
         9c:86:88:34:b9:81:a3:65:c6:3a:be:64:5a:0e:73:2d:8c:a4:
         69:9c:17:0e:7f:f0:85:b6:3f:fd:2b:dc:60:2e:4e:91:e7:15:
         cb:83:97:fa:8f:5d:88:12:1c:56:7c:40:b5:65:30:86:69:61:
         df:1f:48:a7:85:5c:50:0d:16:d0:52:05:5b:1e:0e:6b:a0:11:
         a7:9c:48:65:6a:18:6d:1c:f4:9b:78:b6:1b:71:99:e3:0f:7f:
         07:c7:a2:8f:88:49:02:1b:e9:f7:b5:a9:8f:98:c7:6e:6a:03:
         2c:67:a0:af:7d:74:ac:c4:42:2d:ef:b8:e0:e1:0b:3e:5b:ae:
         ab:34:08:99:f8:f9:e8:1b:0c:75:a8:43:bf:b9:8f:29:94:b6:
         be:43:85:e3:d1:8e:42:c8:fd:7b:2c:39:bf:49:3c:03:57:a8:
         18:76:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:28 2024 by rpki-client on console-ams.rpki-client.org