Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File:                     TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier:          yJpBGtWnG2qvzXRVNoyjHTyR266WCW5gos7YkA/ycKU=
Subject key identifier:   B4:49:26:9A:CD:15:67:11:B3:37:B9:B4:28:A8:24:39:8F:83:9A:1F
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer:       /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial:       0193550882921446DFF3DC7D0BEB94B19F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number:          09A0
Signing time:             Fri 22 Nov 2024 18:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:41 +0000
Files and hashes:         1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: z0uD5M2pnxk4lkTDbwhWK4N25AUdg9KxVbVH6EFe1wI=)
                          2: Yzk3oJiAquPfdpjMQ2ym82rACE0.roa (hash: JDTWaUA/vPeaJxd4zgOXhYw03dKOnaTyxoWgJWAZtn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:82:92:14:46:df:f3:dc:7d:0b:eb:94:b1:9f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
        Validity
            Not Before: Nov 22 18:00:41 2024 GMT
            Not After : Nov 23 18:00:41 2024 GMT
        Subject: CN=b449269acd156711b337b9b428a824398f839a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:16:73:fb:c3:a4:a5:a1:56:2c:89:a9:2a:
                    f7:f2:e3:45:42:ed:c2:4c:fc:5a:fd:c3:8c:86:cf:
                    43:a1:3f:53:f0:6b:c3:41:b9:4b:fc:9d:bd:ea:a8:
                    41:e5:18:ad:ea:da:51:72:79:2d:9a:4b:12:a4:20:
                    b8:bc:7a:1c:23:fe:c4:9e:09:e8:74:bc:1a:de:61:
                    dd:6d:c3:e1:ec:40:76:60:a8:7f:30:38:21:51:14:
                    a3:a8:e5:54:4e:75:62:d6:c4:b2:19:c8:f8:a4:c7:
                    07:17:ad:24:39:d5:21:d2:f3:cf:36:e2:29:ae:38:
                    e0:b2:28:9a:b4:f3:c2:41:c6:e7:11:37:5c:fd:77:
                    7e:93:89:b5:c4:6e:d3:ca:0c:e4:9e:cd:51:ba:4b:
                    43:78:9a:db:05:e8:0c:13:8b:82:39:7e:35:04:6c:
                    50:96:76:68:b1:12:5c:9d:73:70:40:77:09:d5:cd:
                    e0:ee:93:30:30:0a:fc:35:90:3a:39:f3:d1:51:86:
                    d1:96:06:03:38:f3:c7:be:e4:68:8d:41:22:12:59:
                    a1:c8:c5:d2:34:43:a4:21:09:10:4b:35:cd:e4:9b:
                    69:27:9c:53:c6:ed:6e:53:41:59:76:b1:7a:47:85:
                    36:d8:4d:0a:42:97:7f:85:87:f7:44:36:d2:f1:11:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:26:9A:CD:15:67:11:B3:37:B9:B4:28:A8:24:39:8F:83:9A:1F
            X509v3 Authority Key Identifier:
                keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:b6:d1:4d:38:82:a3:04:f1:86:62:ec:23:52:cb:26:7f:
         14:f2:52:e9:47:09:4d:b2:4e:e3:0f:db:6c:0e:bd:bf:e2:88:
         e5:0a:12:53:e5:2e:f8:73:f5:0c:34:bb:0d:db:ea:5c:7c:ca:
         05:27:f6:23:8e:48:85:c1:15:b1:09:03:e6:87:c7:01:89:13:
         83:33:4a:cd:f4:ba:3a:ca:71:c4:bd:fa:e8:6d:05:6e:b8:99:
         f1:2e:06:43:9f:f3:59:93:f8:eb:22:5a:31:2a:5e:59:16:46:
         40:95:d1:79:51:56:0e:31:be:e3:04:6e:b3:02:88:26:07:ef:
         6c:f1:10:b2:02:18:d1:9b:82:ae:c2:bb:cc:81:db:90:e1:c8:
         e9:24:9d:50:5d:aa:6e:2b:de:e3:75:f5:82:82:1c:d1:31:8a:
         ae:f5:f3:cd:1b:80:41:2e:88:f1:09:62:cd:e0:4d:e9:23:8f:
         0d:2a:f3:2b:f3:f8:cb:9b:34:ce:1a:0c:68:ad:ef:b5:a9:cc:
         ca:3c:ef:fe:49:27:54:94:e4:b6:9c:27:1a:a8:59:13:ce:fd:
         f5:98:07:0c:91:89:83:05:c9:99:94:14:fa:29:8b:05:95:7a:
         77:c0:a4:04:4a:17:93:8b:87:91:22:78:74:da:a1:ca:ec:ce:
         c4:73:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:39 2024 by rpki-client on console-ams.rpki-client.org