Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File:                     tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier:          Mi3Np2krXd2KoBO02FU51LZv2vxz/SKjahYK7Z4m6T4=
Subject key identifier:   55:A6:DA:A1:31:32:41:5E:38:CE:44:6F:4B:9B:03:E5:B0:83:73:68
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer:       /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial:       019357D290E258060E6B648CB47EB3FD34F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: QIgkonbYLvtZRLlFpSZzUhjokKY.roa (hash: D441YNc8p0FXzRIy7y83NRdv4AekmEtu4a1SEnoE1X8=)
                          2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: UTebUYGw3+Ckvf2r/l6qsYmSd9dsLFvus7DP59RNb24=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:90:e2:58:06:0e:6b:64:8c:b4:7e:b3:fd:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=55a6daa13132415e38ce446f4b9b03e5b0837368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:6e:eb:d2:8d:8d:70:44:21:7b:77:3b:ef:
                    96:5b:ab:53:30:f7:bc:5a:a2:69:7f:50:08:04:65:
                    ca:c0:8a:90:ad:5b:59:93:14:6f:35:5d:66:36:61:
                    b6:4f:03:83:b9:71:76:a0:11:8b:78:3d:23:29:25:
                    91:63:4c:2d:37:55:91:4c:b8:c8:f9:37:90:44:79:
                    73:50:69:fa:10:74:12:a8:70:41:14:71:6c:2a:06:
                    13:b8:f2:a5:83:23:8a:78:17:aa:49:df:b2:45:0c:
                    9f:05:03:d4:63:32:a8:a7:7b:4e:b6:e7:66:1a:04:
                    d9:13:73:d5:ed:4b:0c:ab:e2:dc:d2:7a:72:f6:22:
                    36:e6:63:f1:75:66:1c:5f:48:50:d3:a1:57:21:43:
                    1f:bb:b3:43:3d:38:66:12:bd:39:16:40:af:ea:80:
                    e6:dc:87:56:83:18:39:d0:aa:6b:c9:8e:5c:93:72:
                    f3:70:68:7d:c3:07:59:6e:eb:0e:90:d0:37:ab:11:
                    76:08:3e:2c:70:68:59:f7:35:4b:87:21:d3:2d:e2:
                    9e:8f:be:ee:a0:e3:bd:3b:a6:5b:e0:1f:4c:ab:d7:
                    6e:ca:d3:3b:55:81:15:7d:56:c9:2a:07:e3:75:9d:
                    00:64:15:89:49:77:5f:4e:e4:fe:eb:69:4b:cf:60:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A6:DA:A1:31:32:41:5E:38:CE:44:6F:4B:9B:03:E5:B0:83:73:68
            X509v3 Authority Key Identifier:
                keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:40:68:92:4b:3c:67:82:eb:74:9e:ba:e3:de:fe:e9:c9:49:
         54:9f:cf:f6:00:d2:e0:86:5e:39:8c:b7:24:b1:84:9d:db:34:
         d8:76:71:a3:03:d2:b9:6f:1b:1e:8a:d9:83:12:13:bc:48:7a:
         d6:67:66:6b:59:d9:a5:20:02:e0:4b:6a:09:df:e9:b0:91:ef:
         cd:ac:b7:2e:7b:60:b6:83:19:b2:7f:e1:25:bf:1a:59:06:1b:
         8b:69:c3:2f:9a:1f:87:c5:c8:7d:04:37:8d:22:07:39:87:44:
         12:cc:77:ef:8d:c1:cf:a4:dd:69:90:f0:26:39:1d:ab:46:16:
         c6:3d:3c:30:b3:cf:c6:06:81:a5:b1:ca:34:60:19:43:25:6c:
         d2:9f:a5:c0:4d:8a:1c:5e:f9:0a:ea:fe:d5:4e:05:d6:ce:5f:
         7a:d6:23:2f:53:d8:f8:74:98:32:d5:4f:da:ce:76:f6:87:bc:
         81:28:80:d6:e9:ea:4e:04:47:3e:ad:4c:1a:b7:34:fe:e9:ef:
         27:b7:a5:3e:62:1c:a1:84:5b:13:52:ca:77:d7:df:f1:ff:56:
         8e:2e:b8:ec:40:16:51:b7:cd:6d:36:bc:d6:1b:35:1a:96:3e:
         b8:01:88:47:dc:42:bc:64:11:3b:31:9f:92:be:ef:4e:03:9c:
         d0:e9:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:31 2024 by rpki-client on console-fra.rpki-client.org