Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File:                     Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier:          fre78c0i9yus+J8zYZjxBO8J0ryrnLO2omjKgbH7qWM=
Subject key identifier:   CA:13:5C:91:1D:6D:31:D7:38:FE:DB:9F:70:63:B4:71:B3:A0:AF:51
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer:       /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial:       019369D97B22AF364A6A336D6F2FE67F1BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number:          127A
Signing time:             Tue 26 Nov 2024 19:01:20 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:20 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:20 +0000
Files and hashes:         1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: CXbLbSBDCmXOTa549WXU/56UHN4tAeV9bvYVOpxXuqs=)
                          2: _v-QkM_7839GBBphE2mL0zRs7Ak.roa (hash: u85RMb6EXsYoNauTgd40RYwvBVRTvz2eUk5ID/By4Eg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:7b:22:af:36:4a:6a:33:6d:6f:2f:e6:7f:1b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
        Validity
            Not Before: Nov 26 19:01:20 2024 GMT
            Not After : Nov 27 19:01:20 2024 GMT
        Subject: CN=ca135c911d6d31d738fedb9f7063b471b3a0af51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:23:92:d2:32:ed:91:42:55:12:c0:ca:39:
                    24:a4:1f:90:a4:f1:66:7e:4b:a5:17:84:be:5c:09:
                    34:62:cd:ef:4d:76:fe:20:ed:2a:1b:03:c2:12:3e:
                    1f:dd:e5:1a:01:a4:a4:f5:e5:62:4b:a4:0d:a6:49:
                    0a:54:c0:d2:ee:5e:ac:dd:25:71:e4:8c:27:af:81:
                    92:d6:3c:68:3d:01:2a:93:ba:2a:9b:37:7a:e5:4d:
                    3a:1c:75:cd:50:da:9b:82:61:95:5c:67:bb:43:5a:
                    4a:8d:c9:37:17:0b:ff:30:ff:ae:45:1a:39:56:e9:
                    94:1c:09:3c:38:9d:39:28:c6:61:bf:cf:f7:d1:47:
                    f9:5c:2e:51:d3:02:2b:c3:30:ae:fa:6a:38:a7:7c:
                    a3:9e:1b:ca:eb:1f:1a:49:ca:c8:e1:64:f8:ee:2f:
                    8d:9c:bc:ae:06:c5:52:d3:e9:0e:52:fd:fe:ca:43:
                    cb:c5:78:54:51:16:12:c5:74:91:ea:76:3f:c8:63:
                    70:f7:54:83:90:22:26:51:fd:57:8e:56:24:60:64:
                    32:b9:70:90:52:27:00:e5:25:15:0b:d8:2c:eb:bc:
                    d7:47:c6:ac:4a:47:c2:56:96:6e:85:a6:22:91:a0:
                    2c:2f:8e:60:2e:a5:ca:e2:b1:6d:a2:0a:78:3d:eb:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:13:5C:91:1D:6D:31:D7:38:FE:DB:9F:70:63:B4:71:B3:A0:AF:51
            X509v3 Authority Key Identifier:
                keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:72:82:4d:5d:33:b0:d9:52:26:1c:93:c6:fe:cb:2f:20:
         09:6c:7a:ad:db:6f:20:08:bc:66:ac:01:0b:dd:b3:1d:58:68:
         56:bb:61:1a:14:5b:b0:31:6a:c9:ca:16:d0:be:c8:44:1f:b9:
         4d:2d:38:4f:48:1e:93:3a:16:eb:c8:77:43:f3:2a:1f:dc:6a:
         fd:07:bd:81:21:2f:60:e4:07:e9:b3:90:0a:ba:8f:6a:d1:42:
         ba:95:6c:10:11:7d:be:4b:28:97:b0:ab:b4:44:4f:7a:d5:d2:
         8f:f5:99:a9:d6:e2:3b:0c:7e:1e:67:8e:f7:48:3f:50:f2:1a:
         e1:53:7c:ef:96:79:d0:e8:d3:41:cd:09:b7:c6:5f:01:2c:4a:
         bb:28:b9:2d:04:fd:d0:70:cb:22:b6:5a:2d:01:6e:f1:5c:3e:
         65:08:95:c3:12:62:1c:c2:df:28:10:6d:20:85:35:8c:17:6c:
         dc:f3:5f:0e:8a:76:4b:9e:bf:8d:42:84:b2:da:60:cc:96:61:
         46:2e:d7:e7:c0:f0:5d:1e:1d:5e:f5:29:74:6a:b2:a3:ef:e1:
         57:c5:93:0f:b0:b6:9f:68:83:0a:e1:80:02:51:13:24:88:1d:
         d3:bf:16:e1:19:fa:10:26:d0:2d:b9:82:d3:23:ec:f7:7f:be:
         d8:a9:11:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:08 2024 by rpki-client on console-ams.rpki-client.org