Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          WRFT9wfaiNJA4LT/3FfkMDJA5IJhvtsU/MIRdvGKVf8=
Subject key identifier:   94:24:76:D3:31:81:67:E1:19:47:C0:86:F3:12:B8:A4:73:AA:22:1A
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       0193579BD79701C8CE2FD00B9C42314CC801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: IbivKv7SxGWPFQO53GjLVx-3kbw.roa (hash: o+5Evfm+GPX6CMC9IGAaqi4Tmdq/MR63Ea9AaoE+3uo=)
                          2: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: GNokJuSvneKO3cbU50p7NKHXP779N5fhFHPYlyQAuqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d7:97:01:c8:ce:2f:d0:0b:9c:42:31:4c:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=942476d3318167e11947c086f312b8a473aa221a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:a1:a6:a5:9f:90:16:ce:89:a9:23:e9:28:
                    6a:81:d5:6d:26:25:8f:e9:9e:12:25:ef:55:54:9d:
                    db:87:0c:7f:2e:da:e3:88:27:f3:2f:bd:05:e5:43:
                    10:73:ca:5a:36:b5:ba:52:74:0d:1b:d8:4c:2a:ff:
                    72:7c:dc:4f:73:f5:aa:e7:c7:9a:2e:aa:6a:a7:f7:
                    8e:0e:54:78:02:6d:65:9e:fb:3b:2a:62:28:78:f6:
                    99:a8:ba:fe:01:40:85:1d:b5:46:5c:c0:24:97:48:
                    cd:b7:ad:e4:aa:b8:f9:95:e7:12:92:43:2e:13:29:
                    ab:fd:d0:a1:c7:7a:f7:44:1c:66:cb:96:30:57:35:
                    7e:48:49:30:59:7b:de:3f:1c:fc:47:45:b2:9d:38:
                    5d:cc:2b:e7:a4:4a:f2:04:99:9b:37:90:74:12:ae:
                    8f:e8:e7:cc:2d:61:6f:c6:8f:5a:f2:40:82:ae:47:
                    47:64:d6:f1:9c:c5:c5:cb:58:1b:88:b4:e4:bb:26:
                    90:f1:bf:a2:89:6c:7f:b3:07:55:49:3a:bb:b2:3e:
                    94:9a:6c:1a:34:ba:34:75:20:2f:5c:49:f5:e5:ff:
                    bf:ed:94:9f:41:af:9c:9a:d3:de:b2:03:75:c4:dd:
                    16:4b:a4:12:30:4c:b5:56:51:db:59:c7:a9:87:32:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:24:76:D3:31:81:67:E1:19:47:C0:86:F3:12:B8:A4:73:AA:22:1A
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:b4:3c:d1:2b:61:11:48:b6:88:a7:9f:f0:14:f5:29:d9:
         e1:71:bf:49:42:cd:ec:e2:02:d5:98:1e:bb:76:df:42:7f:72:
         78:22:0d:e1:0a:df:38:3b:d0:64:06:eb:bb:f4:81:b7:56:34:
         6b:ed:dd:3f:d6:8c:86:de:25:db:cd:4a:23:c6:c3:ab:07:88:
         c8:f2:54:95:30:f1:8a:6e:25:50:42:ab:67:b8:2b:89:8a:7d:
         8b:25:29:63:9e:6e:f2:b3:a4:1c:77:f5:b1:75:25:3b:06:12:
         e9:dc:97:ec:1e:18:95:92:57:d0:14:5c:c8:00:2a:bd:9f:78:
         a6:17:0a:88:2f:f0:c8:0e:5d:36:ef:4d:e5:98:63:fc:33:29:
         5c:97:f2:cf:3c:b7:61:4a:a6:af:83:7e:cb:7c:d4:dd:d2:ef:
         f4:3d:ae:57:ca:b3:2d:d4:e0:02:af:d3:3f:8f:b6:47:6f:ae:
         38:8c:7b:5f:02:1e:32:a0:0b:10:d1:aa:cf:13:47:5c:48:60:
         5d:50:24:05:52:27:b7:71:5a:9d:2e:80:59:31:14:5e:70:18:
         88:65:90:3c:36:c6:38:36:a2:9e:c5:7d:e0:b8:00:e8:07:d5:
         3f:3f:8f:20:53:98:e2:e4:36:3e:94:b2:63:37:99:2d:bb:52:
         4f:20:25:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm9eXAcjOL9ALnEIxTMgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2I4MjI5MGMyZTgwOTA5MjRhOWVmZDljNTE3Y2ExNGE1
YzM3MDQwHhcNMjQxMTIzMDYwMDUxWhcNMjQxMTI0MDYwMDUxWjAzMTEwLwYDVQQD
Eyg5NDI0NzZkMzMxODE2N2UxMTk0N2MwODZmMzEyYjhhNDczYWEyMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGChpqWfkBbOiakj6ShqgdVtJiWP
6Z4SJe9VVJ3bhwx/LtrjiCfzL70F5UMQc8paNrW6UnQNG9hMKv9yfNxPc/Wq58ea
Lqpqp/eODlR4Am1lnvs7KmIoePaZqLr+AUCFHbVGXMAkl0jNt63kqrj5lecSkkMu
Eymr/dChx3r3RBxmy5YwVzV+SEkwWXvePxz8R0WynThdzCvnpEryBJmbN5B0Eq6P
6OfMLWFvxo9a8kCCrkdHZNbxnMXFy1gbiLTkuyaQ8b+iiWx/swdVSTq7sj6Ummwa
NLo0dSAvXEn15f+/7ZSfQa+cmtPesgN1xN0WS6QSMEy1VlHbWcephzIVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQkdtMxgWfhGUfAhvMSuKRzqiIaMB8GA1UdIwQY
MBaAFE07gikMLoCQkkqe/ZxRfKFKXDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEt
ZDk3OWVjZTkzMjg1LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEtZDk3OWVjZTkzMjg1
LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7O0PNEr
YRFItoinn/AU9SnZ4XG/SULN7OIC1Zgeu3bfQn9yeCIN4QrfODvQZAbru/SBt1Y0
a+3dP9aMht4l281KI8bDqweIyPJUlTDxim4lUEKrZ7griYp9iyUpY55u8rOkHHf1
sXUlOwYS6dyX7B4YlZJX0BRcyAAqvZ94phcKiC/wyA5dNu9N5Zhj/DMpXJfyzzy3
YUqmr4N+y3zU3dLv9D2uV8qzLdTgAq/TP4+2R2+uOIx7XwIeMqALENGqzxNHXEhg
XVAkBVInt3FanS6AWTEUXnAYiGWQPDbGODainsV94LgA6AfVPz+PIFOY4uQ2PpSy
YzeZLbtSTyAlOA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:11 2024 by rpki-client on console-fra.rpki-client.org