Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          hW6fiokD4ZL4rvVPrGlj5uVHVUXwDUP+V2qp7927U5E=
Subject key identifier:   CF:B2:CF:A2:75:A0:5A:35:68:27:85:50:C8:F5:09:88:B5:C6:E4:10
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       019356BFA462A42AD46E74D4BBA775D76F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          54
Signing time:             Sat 23 Nov 2024 02:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:20 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: H8tOKtO6MTFc8tLsukawHVgF9aCg2I81FJ7SG0jwO/Y=)
                          2: rZhKELf9Q0f0TWXoIzh5fcogcis.roa (hash: PVrDJXay44NQCEyzescyWjI4esEAg+7JBXm7tVo3VuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a4:62:a4:2a:d4:6e:74:d4:bb:a7:75:d7:6f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Nov 23 02:00:20 2024 GMT
            Not After : Nov 24 02:00:20 2024 GMT
        Subject: CN=cfb2cfa275a05a3568278550c8f50988b5c6e410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:31:84:82:37:a9:fc:b2:57:fc:30:70:25:
                    f2:68:a4:d6:6a:43:0d:6d:a0:1a:53:69:53:ce:6a:
                    9a:9f:ec:ef:a8:ca:e6:cc:7f:ef:25:8c:e7:8d:d6:
                    b7:a4:46:b6:93:ad:64:04:3d:84:4f:43:ab:f0:65:
                    94:f3:d2:5a:06:6d:50:da:d6:d8:6b:0d:9a:ac:59:
                    60:dc:68:7e:3b:1f:df:55:be:92:42:eb:9f:95:82:
                    cf:c6:0e:80:78:bc:29:27:b8:b0:2a:c5:91:6d:a9:
                    f5:8c:d4:4e:b7:3f:b0:c6:d5:45:56:bc:62:38:a6:
                    fa:23:fb:fb:ff:28:9d:d0:25:5d:e0:60:e3:b3:7d:
                    23:93:fb:bc:c8:8e:57:7c:ac:ef:b1:dd:00:3c:e5:
                    c6:88:02:32:a9:ee:d3:25:29:be:9a:fb:c3:83:f7:
                    dd:4d:4b:df:30:10:15:20:97:38:59:f0:38:a0:35:
                    68:5f:be:f1:aa:50:f0:ff:6f:e1:ce:77:dc:5a:c3:
                    d2:9b:75:06:8d:77:d1:21:0b:df:be:e9:50:d0:16:
                    42:cc:2c:37:42:3c:32:5a:e2:57:f9:ce:a7:40:88:
                    d7:0e:63:22:cf:39:6f:77:31:8e:cc:f0:6c:7c:71:
                    29:76:ff:ac:ab:4a:c1:b5:28:a5:f8:f5:77:28:64:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:CF:A2:75:A0:5A:35:68:27:85:50:C8:F5:09:88:B5:C6:E4:10
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:65:45:41:ee:ae:d6:be:58:0a:64:47:bd:cb:e2:84:c5:
         14:d1:f3:7d:9a:8c:f9:3f:dc:77:8a:53:46:99:02:2d:c1:f1:
         c6:e8:a1:13:0c:80:69:24:a9:21:ce:28:dd:2c:13:18:9b:a5:
         b2:93:f3:52:77:49:45:b0:f3:5e:cb:02:dc:cb:13:d3:24:8c:
         a5:0c:8e:31:39:a6:e8:b4:4c:51:db:6f:c2:8c:c6:0e:60:0d:
         24:75:a0:68:a0:26:7a:07:85:75:1e:30:5e:10:ce:bb:e6:28:
         db:36:9a:20:b9:0b:cb:73:a3:6d:38:53:16:11:7d:82:93:a7:
         f3:1f:30:db:4f:ba:6d:6f:30:27:b4:ac:cc:3c:62:58:b3:e7:
         e3:db:48:1d:6e:81:da:8b:ee:f0:d7:c3:2a:6b:47:f5:9d:83:
         48:9b:16:d8:d4:23:2a:ac:9d:04:1f:4f:92:59:1c:84:d3:89:
         b1:5b:cd:fe:70:41:94:18:51:b1:01:6f:b4:dd:d0:71:aa:58:
         70:25:2b:7b:da:5f:cc:61:16:17:14:73:87:3b:d8:02:43:0c:
         57:96:58:3f:41:10:c6:fe:68:ca:a9:6c:dc:b3:d2:3a:ef:85:
         f8:7c:77:a7:c1:af:8a:71:10:3e:78:da:45:37:aa:16:03:cd:
         56:80:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:08 2024 by rpki-client on console-ams.rpki-client.org