Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          kpRq34COWO7emYKkjOoQ5BE2jx5mgfMR/4GsuM/q3nY=
Subject key identifier:   DA:DD:F6:5F:28:BC:73:CC:B3:97:E3:F3:24:A9:2D:F6:36:2B:9E:CC
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       01935688CA0CEACA21BF5116AFC9CF11F5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:25 +0000
Files and hashes:         1: IQUZXLY6K67qzLL00qlDFTbFI4A.roa (hash: i2LGBUVywZvEpk4/SQtTLQRcaaA6Wtozsw7OWiT8sfs=)
                          2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: 5dF/qfN2ajUfYZkjTMmI6UrQ8nEqqt+ii372Kw8aqhM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:ca:0c:ea:ca:21:bf:51:16:af:c9:cf:11:f5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Nov 23 01:00:25 2024 GMT
            Not After : Nov 24 01:00:25 2024 GMT
        Subject: CN=daddf65f28bc73ccb397e3f324a92df6362b9ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:d0:10:93:ec:35:8f:9c:66:1b:8c:81:1f:
                    65:80:d7:ce:b4:00:34:54:99:b1:2c:b6:bb:04:95:
                    8a:40:e0:a4:a0:88:1f:72:77:96:39:1c:60:03:7e:
                    0d:32:9c:a3:dd:4a:d8:4c:b6:e7:a3:35:bd:31:59:
                    dd:47:0f:a8:68:fc:75:9b:5b:5e:d2:74:e9:98:9a:
                    f9:13:f7:61:2d:c2:01:5f:13:f2:53:97:53:7e:c4:
                    2c:44:a0:78:d5:1f:b8:fb:0c:35:3e:5f:57:ba:1c:
                    1d:92:83:4c:fe:ef:75:da:8f:74:d7:cb:9f:c7:61:
                    e6:3f:7d:52:7c:fd:4a:e9:c1:28:5e:75:47:ee:de:
                    94:28:7b:63:2a:99:9a:af:d8:67:0d:0c:45:47:e1:
                    a8:bb:15:73:39:fd:cb:0d:aa:af:8a:a1:c7:80:1e:
                    3b:22:e1:a1:4e:dc:c9:3b:9f:43:53:50:7b:cd:23:
                    54:f4:a4:54:db:ca:00:44:8d:fe:b1:06:55:71:4e:
                    07:ce:35:ad:d3:3e:17:6d:28:44:53:02:9c:9e:4f:
                    38:25:d8:6c:e8:ac:8f:52:f3:ae:60:7b:8d:aa:52:
                    56:90:a3:23:35:21:c5:59:ef:7b:5a:57:bb:e7:dd:
                    84:23:11:33:89:aa:05:b9:4b:c7:c4:b2:97:b2:e2:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:F6:5F:28:BC:73:CC:B3:97:E3:F3:24:A9:2D:F6:36:2B:9E:CC
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:67:80:d5:4e:8b:5b:0e:8f:87:4f:a1:aa:fb:8f:66:08:
         2c:63:ab:93:37:4c:09:86:94:7d:f1:de:e2:0f:3d:d5:52:db:
         78:5c:da:46:f3:a1:b8:8b:fe:9c:cf:81:a2:41:a6:4c:12:ae:
         7e:16:48:3b:f4:90:4f:6c:f6:99:b5:2c:c5:ca:84:4b:2b:e4:
         56:41:9b:12:b7:8a:19:90:73:d0:80:40:c1:8b:cc:d9:73:5c:
         cb:b8:a7:9b:9c:86:fd:f2:ca:56:19:6f:5f:88:71:5a:8f:0b:
         01:36:6a:b1:33:78:5f:8f:5c:05:4d:0c:43:73:d0:3c:cc:6e:
         c6:36:b2:69:53:cc:19:e8:02:a2:42:04:29:0d:72:b8:1c:17:
         cc:30:64:d9:ea:9d:66:ac:15:54:bf:5c:05:9b:3f:3d:a3:18:
         0d:b1:5b:89:60:db:f7:5f:02:ae:76:f7:c5:3f:b1:b2:fb:5b:
         af:12:1d:e7:9a:07:16:99:8a:c3:22:53:e5:95:af:16:d4:02:
         4f:13:75:de:8d:84:10:43:ec:e1:cb:42:d0:4c:ea:44:1d:4b:
         21:11:a1:22:56:ea:76:40:0c:46:b0:fe:ec:8a:a4:1a:52:10:
         4c:07:a3:8c:82:a9:7e:14:4f:62:27:bb:f9:94:6a:28:bd:b2:
         e6:01:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:49 2024 by rpki-client on console-fra.rpki-client.org