Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File:                     TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier:          viV6ZS81H3Idr68bjcKNn7mJPTXU2GW/RcOmtTXyiQ0=
Subject key identifier:   D9:1D:18:F9:D5:48:C5:A5:70:CC:44:BE:8F:7D:EE:81:B6:DA:7E:23
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer:       /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial:       01935688A8E6427F9EC5DD5E2D1ADB4B5370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number:          137E
Signing time:             Sat 23 Nov 2024 01:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:16 +0000
Files and hashes:         1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: AzxQRrIgVB3G+AUQyVxKHesf6sq6WirR+GI7Kp6jw14=)
                          2: aEZhBpXBu0CURJ7zLuP6zQnUM-Y.roa (hash: IiQhGRDR73NzVqSXpqFhEnJefASmUXru4sla0hEXspA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:a8:e6:42:7f:9e:c5:dd:5e:2d:1a:db:4b:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
        Validity
            Not Before: Nov 23 01:00:16 2024 GMT
            Not After : Nov 24 01:00:16 2024 GMT
        Subject: CN=d91d18f9d548c5a570cc44be8f7dee81b6da7e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:2a:66:d2:86:c7:4f:24:67:d6:31:31:8d:
                    1f:89:7b:8c:d5:2d:ab:64:96:8c:55:41:5e:99:46:
                    54:59:83:14:d7:bf:19:69:2c:71:a6:0b:37:b5:0a:
                    94:de:0e:c8:61:5a:8b:cc:86:58:ea:25:80:cb:0b:
                    58:32:69:06:3f:00:32:b6:86:64:5b:b2:69:90:7b:
                    fd:d8:34:23:4c:98:d6:d4:b2:4e:54:53:8d:54:64:
                    7e:ac:f4:b2:a4:95:ce:7f:8a:65:4c:80:1a:08:88:
                    a2:83:95:87:34:ef:35:f7:8c:81:79:0a:97:6a:db:
                    f8:78:a4:3a:1b:74:71:76:62:3a:7a:1b:d5:21:ef:
                    8b:69:36:2a:3e:97:bd:27:de:06:70:8e:45:31:bd:
                    5a:2b:19:da:56:55:ce:fc:38:9b:52:fe:94:d7:06:
                    83:bc:03:ee:0b:5e:7a:46:e2:c4:43:2e:c6:88:f0:
                    0f:71:dc:65:04:97:90:1d:63:5c:53:fc:bc:a6:a5:
                    d7:2b:36:14:83:38:24:e2:fc:79:7e:52:6b:5d:ea:
                    61:32:0f:14:d3:e5:29:af:ee:ad:6a:42:ab:9a:1a:
                    7b:bd:58:10:39:24:7d:3a:52:82:a9:8c:0c:eb:a9:
                    7c:82:fe:f9:4b:a2:04:77:e7:f1:f5:2f:37:c0:68:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:18:F9:D5:48:C5:A5:70:CC:44:BE:8F:7D:EE:81:B6:DA:7E:23
            X509v3 Authority Key Identifier:
                keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:99:bd:a3:a0:8e:f6:a9:ff:31:da:6a:0d:ad:5f:ac:e0:af:
         bc:70:bd:63:12:33:dd:68:6b:5c:93:65:f7:58:de:ae:44:6c:
         30:c6:6a:14:4c:92:ed:21:70:69:bd:49:b2:fb:80:95:84:4d:
         eb:57:e0:d0:2b:a3:13:5e:0b:d4:79:3c:47:4f:e2:42:87:47:
         32:4a:0b:25:ca:da:12:78:6f:34:70:71:f9:8b:b4:7a:d7:3f:
         c4:47:cd:35:da:78:5f:1a:e5:57:98:a0:36:1f:1b:9b:96:4d:
         78:98:6c:03:08:3d:d4:46:7d:f2:f3:fd:da:c9:2b:9c:0a:2f:
         56:30:40:db:22:c4:18:77:d7:52:53:36:74:b2:da:04:1f:51:
         e0:24:61:b8:45:78:fb:eb:70:3d:38:85:62:01:5b:be:64:8c:
         92:d1:6e:d1:60:be:24:d0:93:44:ae:9f:00:54:9c:8e:85:84:
         58:0f:30:2c:cd:81:9b:9d:d2:f3:1d:c7:8f:5c:97:18:60:be:
         46:34:fa:a1:85:61:78:ad:03:46:f0:50:85:58:fc:08:b1:68:
         7e:3e:6f:f2:76:3d:15:36:27:d1:7e:d8:26:9f:5e:00:b0:3e:
         d1:cf:5e:ba:13:9e:1d:89:e7:07:54:c4:33:e4:18:4d:f2:17:
         dd:23:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:40 2024 by rpki-client on console-fra.rpki-client.org