Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          WFakZs+S6wZkxV/5qyNBffxRUcAOVdEqNRHdsWU90Bk=
Subject key identifier:   5B:37:66:81:26:6C:80:69:F4:D9:AD:30:5B:BF:A4:66:83:61:1D:8A
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       019355E42E71EF113ED14E35C4F627807599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          0465
Signing time:             Fri 22 Nov 2024 22:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:37 +0000
Files and hashes:         1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: AjiCRf4bASADS91FPej1NB0E/YzvB3CZsRB/CA93Wh0=)
                          2: siOfQhv_q1PKVfeCyZhOezZpRLc.roa (hash: lvqczXph1cEKIVNBqB8FpTTlLOQNfESBwwewLU0U/qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:2e:71:ef:11:3e:d1:4e:35:c4:f6:27:80:75:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Nov 22 22:00:37 2024 GMT
            Not After : Nov 23 22:00:37 2024 GMT
        Subject: CN=5b376681266c8069f4d9ad305bbfa46683611d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:53:6e:08:05:d1:c1:7d:ee:bb:39:c7:80:
                    e4:3c:fb:d0:0b:0a:91:64:20:cf:b6:f4:59:cb:5a:
                    91:e0:f1:10:0a:c7:a0:51:c1:0c:da:0e:3e:10:d1:
                    47:6b:b9:42:8c:92:66:3b:4a:49:a8:57:09:ee:35:
                    11:25:96:8b:f0:58:09:0d:5a:ec:f8:3b:22:bf:04:
                    20:50:62:5d:2a:0f:4c:3d:6f:ca:ff:48:d3:e5:9c:
                    c5:34:fd:88:fe:ec:98:5a:5c:6b:20:0f:90:bf:65:
                    5d:f4:ad:07:f7:ee:b7:85:de:a4:e6:75:a1:3e:4f:
                    07:03:65:66:8f:ac:f9:9b:d1:b3:47:06:38:47:08:
                    0b:b4:a7:57:71:b8:6b:b3:00:e8:6f:ae:a5:7b:f1:
                    9a:2f:c0:d2:0a:69:cf:86:d5:aa:5a:88:03:a3:bf:
                    92:1e:40:a8:90:8d:94:26:8e:f0:2a:53:ea:ab:02:
                    c6:56:60:8b:61:2a:16:b3:16:2f:9f:b7:d3:76:3a:
                    38:1e:25:e1:57:01:dc:51:15:71:1e:a3:bf:8f:50:
                    6d:af:7b:f8:77:17:09:74:92:74:5a:66:42:71:b8:
                    58:b4:c8:2d:86:c7:98:51:1f:c9:e9:3d:fc:1a:f9:
                    5c:e9:58:a1:f1:6c:e7:49:aa:d6:5e:42:7e:51:d7:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:66:81:26:6C:80:69:F4:D9:AD:30:5B:BF:A4:66:83:61:1D:8A
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:7b:de:cf:78:94:e9:31:44:b6:9b:a1:60:2d:cb:ff:16:
         2e:55:02:02:43:ca:84:03:de:67:f9:d4:84:d1:e7:98:b6:3d:
         bb:85:63:16:d9:26:c7:3b:5b:aa:57:27:b7:a1:3e:56:5c:79:
         7e:6e:ad:53:d3:fe:cc:e9:c3:53:1f:f8:70:f6:b8:2f:7f:18:
         bf:c7:cb:98:5b:66:be:a0:b4:41:3b:b4:f1:19:16:55:e5:98:
         f0:e0:5c:92:00:7a:98:5d:4a:9b:39:6c:51:82:c8:dc:43:97:
         eb:36:4b:c4:3c:df:6d:2c:cc:ee:4f:4d:84:71:e6:70:7c:17:
         63:07:8a:09:1c:1e:50:16:c0:c8:42:88:e5:ec:68:02:c7:b9:
         e3:29:c3:08:cc:89:5b:5b:4c:26:e5:bf:47:77:fb:7e:1f:5e:
         66:a6:77:fb:ef:74:cb:2d:e5:ee:c5:8c:62:32:4e:2f:ea:63:
         49:40:2d:6c:2f:1f:8e:63:1e:08:6d:3d:81:5c:f5:f4:fb:c7:
         cf:25:12:55:a4:8e:32:14:79:94:38:ee:42:9e:04:f5:4e:33:
         f1:98:c1:3a:f3:43:d6:43:72:18:f8:7c:14:95:ad:a1:d1:06:
         77:d6:ba:6e:28:7d:4a:d9:8e:47:71:d0:2e:d9:45:6d:c6:55:
         fd:37:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:22 2024 by rpki-client on console-ams.rpki-client.org