Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File:                     TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier:          XqvC4xhrH5Rl+esq5LzE6UZt3VV5qFUWsxHYGPSp3wM=
Subject key identifier:   D3:44:7C:6C:91:42:92:3F:4E:EA:6F:C1:F6:48:EA:8F:90:44:76:AE
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer:       /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial:       01935508BF5CADBDE9F43092152A316DBB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number:          02E0
Signing time:             Fri 22 Nov 2024 18:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:56 +0000
Files and hashes:         1: Kv_jN_jafPlFCORqqwyDET-JAn0.roa (hash: +HifRBg/IBVskPxHd+jM6bJ5csZZJJTqH5b9ocaJqIg=)
                          2: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: F9R/vLic2Ai1y8oZ2U0TN4XCx+JNZqrYJQjJxf5lHTA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:bf:5c:ad:bd:e9:f4:30:92:15:2a:31:6d:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
        Validity
            Not Before: Nov 22 18:00:56 2024 GMT
            Not After : Nov 23 18:00:56 2024 GMT
        Subject: CN=d3447c6c9142923f4eea6fc1f648ea8f904476ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:7b:e3:ee:ed:2f:86:c5:33:03:5e:94:55:
                    61:e1:89:fe:c6:38:0e:15:78:68:97:80:1b:a5:18:
                    54:0e:15:46:46:34:ab:ba:2e:3e:50:51:5b:04:f2:
                    4f:0c:09:9b:57:6b:a5:8e:59:b8:d4:3d:52:dd:e2:
                    14:96:41:22:4d:fb:5a:f9:c3:3d:18:4e:8d:41:35:
                    c1:b3:62:f4:9e:74:32:3f:48:4c:29:94:83:93:0e:
                    91:02:f4:e2:f2:ce:f9:2b:7c:1e:5f:48:b0:7c:28:
                    19:39:38:95:55:dd:6b:09:4c:6d:f8:35:c4:99:aa:
                    77:c4:cf:72:f7:bb:fa:1f:6e:26:7f:4c:9f:bd:9e:
                    ff:10:a5:f2:4b:bc:2d:da:82:86:d9:6b:ec:1c:d3:
                    4d:71:55:24:71:ab:99:a0:46:c7:7b:d4:3d:47:36:
                    bd:29:1a:c4:2e:ce:6d:2f:a0:f3:0a:06:ac:f1:76:
                    f7:fb:ae:fc:f4:a5:8d:5f:ca:79:af:a4:11:89:7e:
                    25:b3:5a:a8:a7:d3:ef:7b:6b:07:00:97:f1:cf:de:
                    1b:86:e5:55:77:d0:a5:a0:34:c9:8e:d4:e5:87:91:
                    e7:59:b7:f0:52:b8:d1:ba:ea:0f:87:3a:dc:85:54:
                    22:f0:6a:de:d6:27:3a:2b:21:4d:28:b4:69:4e:ec:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:7C:6C:91:42:92:3F:4E:EA:6F:C1:F6:48:EA:8F:90:44:76:AE
            X509v3 Authority Key Identifier:
                keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:0b:9f:8c:81:0c:d4:20:51:a9:e2:8d:55:d0:54:00:c1:
         85:8f:e3:67:be:27:09:81:70:16:2f:b7:2d:18:94:ea:b7:be:
         ee:2b:bb:3b:e1:e0:3d:ce:e1:0c:68:e5:ce:11:c6:93:28:bd:
         c6:be:cf:ac:b5:e1:bf:e8:82:21:4d:f6:da:9f:a0:af:dd:46:
         13:00:2d:32:5b:88:44:be:9c:21:79:61:67:df:49:cc:aa:e5:
         06:1c:82:ca:76:cc:fb:25:95:e8:11:d0:28:82:b8:94:a3:61:
         be:0f:24:4d:3e:84:70:0d:c8:e2:0e:9e:5c:b4:a5:aa:c3:93:
         5e:dc:34:4f:75:f9:8b:d9:52:de:e8:5e:f0:7d:ef:d9:e8:99:
         44:ea:43:14:49:e2:fb:0c:03:a5:e3:1c:e9:16:f9:0a:97:7f:
         ab:c8:ed:f5:bd:f8:e7:ad:f1:69:02:6e:b9:c3:d9:64:1d:87:
         0b:9f:ec:bc:7e:3d:59:3d:a5:4f:31:e4:f2:2a:de:d5:95:2b:
         2b:6f:24:3d:ba:3b:43:69:7b:84:6c:97:29:eb:a3:0b:e3:bb:
         16:80:ec:09:4e:50:5e:06:d5:ed:c9:65:bc:d3:86:0c:29:9e:
         6b:74:f6:b7:76:62:31:13:5a:38:22:24:db:d9:45:ae:99:c7:
         52:6c:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:24 2024 by rpki-client on console-ams.rpki-client.org