Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File:                     TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier:          +oRMDYrnqAJv7pjBp/xqeOaU0OkWh9Yh7elCUsVQ/Cg=
Subject key identifier:   70:F0:46:C8:40:2E:36:C3:10:0E:11:EC:B1:7E:DE:90:69:66:6B:15
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer:       /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial:       01935689CE668229ABEF2BC9ABE2755E933D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number:          03C6
Signing time:             Sat 23 Nov 2024 01:01:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:31 +0000
Files and hashes:         1: NSS0OlM5O52FDTgB7ycZJ18Ew2o.roa (hash: N8CopnilQlEGV+OzNW141ymMtvNg9HkPkrbPWloWTjc=)
                          2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: bTKbCYkuFZcrHU2pavwnXMO8AR/3KGkaLhQLMhfRIsc=)
                          3: sFQebQQfmfZ1ChQvAVce0K-uXb4.roa (hash: VDEY8v6ld/RKdBxeHBTQh0OCbyxStJmCz0sdg+0eEgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ce:66:82:29:ab:ef:2b:c9:ab:e2:75:5e:93:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
        Validity
            Not Before: Nov 23 01:01:31 2024 GMT
            Not After : Nov 24 01:01:31 2024 GMT
        Subject: CN=70f046c8402e36c3100e11ecb17ede9069666b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:7a:b3:48:97:54:10:ef:20:21:92:79:53:
                    57:6d:1e:b4:d7:14:f1:fb:74:21:ca:99:e6:d2:86:
                    53:4d:a7:98:5e:cf:0a:25:d2:de:27:f6:92:2f:51:
                    55:7e:bf:eb:65:ff:dc:a2:89:ed:ab:a4:cc:35:ae:
                    93:ad:21:b5:17:c4:21:12:f2:54:39:b8:ab:fb:d8:
                    d9:3b:5a:f3:17:5f:63:a2:ae:86:71:77:3b:33:f5:
                    59:d4:c8:c4:7f:51:21:9b:6a:e7:5d:66:8e:8a:27:
                    d8:56:20:b0:ed:65:94:d2:65:76:90:a1:0d:b5:3f:
                    58:48:82:14:b9:b1:48:45:12:1b:04:71:4a:13:9a:
                    bd:99:4a:fc:d6:26:c6:90:f9:f1:f7:09:3c:ca:ac:
                    9a:56:cc:23:ca:96:53:e0:50:39:f6:e4:ed:ea:bf:
                    59:07:ac:3c:11:30:c0:2a:20:89:71:f8:c0:59:a3:
                    56:17:15:bd:f5:d7:6a:c0:a0:6e:ab:0b:26:25:5f:
                    24:b7:8f:47:0a:12:5f:92:a6:9f:1d:eb:05:43:c7:
                    d1:1f:ba:7f:b3:04:0e:20:2b:20:9e:4a:4a:f4:db:
                    ac:b4:eb:9d:b7:6f:cd:df:9b:80:2b:0c:ca:a9:90:
                    d8:ac:f1:02:9e:68:78:dd:1b:eb:b9:ba:16:06:c7:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:46:C8:40:2E:36:C3:10:0E:11:EC:B1:7E:DE:90:69:66:6B:15
            X509v3 Authority Key Identifier:
                keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:63:43:8e:8b:c3:65:a2:ba:9a:31:88:e0:d1:2a:01:56:
         52:3b:71:57:5b:ec:9f:83:96:db:d1:62:70:c1:c5:fc:6d:e2:
         7d:4c:0a:23:e1:21:ad:8f:09:0d:00:10:fe:3e:b6:48:18:5c:
         c8:ef:d9:b9:4b:d3:80:7f:8b:cb:7a:8f:d9:73:36:1f:97:b4:
         d1:92:1d:83:7f:04:a2:44:7b:6d:88:b2:62:97:82:88:2c:05:
         e0:67:0c:ad:7a:99:3c:6a:38:b9:fd:a5:c2:ae:ea:cf:81:ae:
         2e:e8:64:86:78:db:49:48:b6:c4:f3:f1:c5:6c:08:df:62:7d:
         1e:61:24:42:5d:d5:90:d8:e1:a2:63:26:ce:38:4c:6b:0c:d4:
         56:38:2f:79:48:f5:92:42:aa:7f:0d:d5:01:79:71:a3:6f:e8:
         8f:ac:2d:ad:a9:a4:17:ae:6e:29:d7:74:07:1e:0d:1f:59:36:
         11:0b:d7:e9:9d:d2:de:75:26:79:c3:e2:af:16:ea:27:dc:ae:
         2c:4c:94:2f:e4:0f:c3:c5:2d:f7:2a:bf:59:c6:43:75:fd:85:
         ec:08:1d:c3:42:b1:d0:06:f2:ff:81:0f:69:2b:61:d2:fb:42:
         2e:b5:58:93:79:71:33:81:53:65:eb:46:33:9b:b4:b4:3e:fb:
         1b:15:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:29 2024 by rpki-client on console-fra.rpki-client.org