Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier:          13ZZi4HLsUBLwUieZCswerzKVgMmniqdVHobyVD3q0U=
Subject key identifier:   29:81:EB:60:E7:D8:95:DB:01:C9:7A:50:B8:53:3F:22:90:69:DD:BE
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       01938E8B66CDD96C681FD827093016CDE53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number:          0D88
Signing time:             Tue 03 Dec 2024 22:02:00 +0000
Manifest this update:     Tue 03 Dec 2024 22:02:00 +0000
Manifest next update:     Wed 04 Dec 2024 22:02:00 +0000
Files and hashes:         1: rzL5GDiJdNOm_48OFwInY03YG-o.roa (hash: TdoKqMM+gOyuw0Lel2vhf46zaccqXp+qiDi+WWxNnTk=)
                          2: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: FIRT0LOv76NgEVZrxEa7hJZPKRA/69Ppps2mjkrMQ7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8e:8b:66:cd:d9:6c:68:1f:d8:27:09:30:16:cd:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Dec  3 22:02:00 2024 GMT
            Not After : Dec  4 22:02:00 2024 GMT
        Subject: CN=2981eb60e7d895db01c97a50b8533f229069ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:e6:e6:43:b5:8e:ac:fb:e6:0e:82:c1:c7:
                    8a:c4:55:36:65:16:31:b1:73:73:c0:03:04:2d:ba:
                    0e:5d:7e:c8:61:d0:62:7a:c0:42:5c:a1:71:c2:3d:
                    5e:c2:21:af:06:4d:59:27:20:75:e6:17:3a:4b:bf:
                    f5:d2:69:19:b5:c5:1a:23:03:a7:99:b6:37:e6:0e:
                    e2:0e:a5:8c:69:e6:3f:0f:45:a2:9b:62:83:12:51:
                    0a:f4:24:50:1e:d4:b2:6b:16:04:de:91:d5:c5:78:
                    76:80:0d:eb:ba:29:bb:2d:ae:4c:fb:4a:03:bb:ab:
                    b2:23:49:2e:8d:a4:f2:d4:30:ec:a7:85:fb:36:86:
                    89:57:bb:cb:1a:00:0a:fb:c2:e6:f4:60:ca:6a:d6:
                    07:23:ca:ea:9e:cc:52:ab:86:05:08:ea:18:ec:36:
                    a4:a7:aa:38:22:19:9f:46:6b:71:2c:10:1a:b8:3c:
                    4c:2b:e3:34:09:cf:25:9b:3c:4a:ad:3f:8e:3a:b3:
                    3a:35:93:e3:b6:98:85:6e:22:40:41:93:d3:45:8d:
                    14:70:9a:4d:e7:89:46:9e:fc:04:69:0b:42:52:31:
                    1a:7e:01:ac:61:0c:d4:b7:90:a6:26:d0:e1:28:a1:
                    41:0e:e2:64:e4:55:c9:3f:4f:c0:18:42:44:89:3e:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:EB:60:E7:D8:95:DB:01:C9:7A:50:B8:53:3F:22:90:69:DD:BE
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:95:63:53:50:77:81:6c:60:f2:2c:bd:cf:1a:c2:96:c0:21:
         2e:a2:f0:ad:62:08:bc:45:94:c3:13:cd:91:67:de:1b:b5:e2:
         5b:0d:71:b2:cd:e8:03:54:0d:d2:9f:46:a0:1a:f6:33:eb:01:
         c6:fe:60:86:31:a7:a6:98:f5:e7:2e:fe:fb:1d:2c:c4:82:1e:
         01:e6:52:7c:10:6f:06:34:9f:f3:47:bb:df:11:ef:50:1d:88:
         5c:b6:73:15:a3:31:43:83:c7:7a:88:99:fd:a7:a9:6d:e6:2e:
         ed:9c:21:ce:8c:53:0c:9c:8c:de:b4:e6:99:e1:0e:06:a5:0a:
         8d:de:04:19:20:13:01:34:d3:e4:c7:e0:5a:2e:45:c6:68:ae:
         ae:0c:03:ed:c6:22:50:cc:c9:dc:e4:e8:ab:1d:0f:06:dc:87:
         47:08:16:4b:3b:48:e5:a9:6f:e3:83:60:be:b4:22:27:82:1c:
         fa:6e:14:94:d5:63:f7:ff:ef:7d:fc:ac:aa:3f:6e:da:15:33:
         22:89:f9:0a:fb:93:d0:8a:77:82:2b:48:73:64:12:0e:af:92:
         c2:1c:cc:b1:d9:2b:0b:fe:ed:b2:bb:0d:eb:75:64:86:0c:bd:
         e8:e8:e5:7e:76:1c:a3:ff:70:64:e9:9b:81:ea:ba:b2:44:7e:
         d5:8e:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 07:19:04 2024 by rpki-client on console-fra.rpki-client.org