Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
File:                     tHaMo_cbExcnlBIa2nizWaNrhVo.mft (raw, json)
Hash identifier:          TWr+/sq6uWdxWSQwnUtm+6+2FgGtVo+4k3zkXY9XZDk=
Subject key identifier:   B0:73:EB:82:C5:C9:B3:FA:0A:71:2A:56:72:07:BD:B8:61:84:F8:06
Authority key identifier: B4:76:8C:A3:F7:1B:13:17:27:94:12:1A:DA:78:B3:59:A3:6B:85:5A
Certificate issuer:       /CN=b4768ca3f71b13172794121ada78b359a36b855a
Certificate serial:       019369DB073CEA09280B30AAC17E046E3B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
Manifest number:          12D8
Signing time:             Tue 26 Nov 2024 19:03:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:02 +0000
Files and hashes:         1: tHaMo_cbExcnlBIa2nizWaNrhVo.crl (hash: HRyyvl35/eE0SHDEtVoh1HDM5/OkGkkXXMnmHNYznZ4=)
                          2: wQzyjAnS4CSbJAzrZzUwXOaG6Lk.roa (hash: /2SQAfHwxixzIJD38ZGTF9bcOvjJhsFk/RP2IpmCvk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:07:3c:ea:09:28:0b:30:aa:c1:7e:04:6e:3b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4768ca3f71b13172794121ada78b359a36b855a
        Validity
            Not Before: Nov 26 19:03:02 2024 GMT
            Not After : Nov 27 19:03:02 2024 GMT
        Subject: CN=b073eb82c5c9b3fa0a712a567207bdb86184f806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:57:62:11:a9:74:19:46:c1:a4:82:6f:53:
                    5f:67:c5:28:a2:87:60:c0:15:11:2f:d7:a8:af:e7:
                    d9:d6:b4:94:27:0f:59:5e:73:00:3e:21:be:d2:55:
                    39:f1:4f:a0:e8:9a:7c:42:5d:d5:b0:23:4f:d6:2a:
                    8d:bc:93:e2:b3:94:2b:79:b3:bc:2b:be:31:4b:32:
                    fc:46:c2:c7:c4:a8:97:3f:93:bb:1c:d4:f0:c4:2c:
                    38:42:3b:dc:89:35:09:f1:f3:d4:08:90:fb:d7:38:
                    ef:b1:e2:4c:23:dc:c7:1a:bb:e4:2c:e0:6f:93:d8:
                    5e:47:52:b3:4c:ac:e9:bd:80:1a:81:83:18:85:b1:
                    6c:62:26:f0:5c:16:a0:61:74:c6:8f:1e:30:1f:3e:
                    30:7a:72:1b:6a:c6:0e:2c:4c:cc:ca:9a:5d:93:3c:
                    90:46:d3:d9:98:6a:5f:37:7f:56:db:0a:70:05:d6:
                    cb:1a:db:1d:ed:81:fa:31:de:12:f4:3c:28:a0:c1:
                    99:c5:12:02:6f:0e:a2:69:ee:3a:1e:85:b1:4a:fa:
                    32:86:e2:a6:bf:1d:4f:b3:80:60:20:5b:9f:ce:f4:
                    e4:b1:02:b2:08:13:b4:90:39:cc:35:de:52:c5:0c:
                    20:38:5e:19:2a:61:95:fe:1d:e0:26:48:8e:9e:d9:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:73:EB:82:C5:C9:B3:FA:0A:71:2A:56:72:07:BD:B8:61:84:F8:06
            X509v3 Authority Key Identifier:
                keyid:B4:76:8C:A3:F7:1B:13:17:27:94:12:1A:DA:78:B3:59:A3:6B:85:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:36:ff:b4:3f:da:73:2b:bb:f8:34:4f:7f:dd:7a:30:bc:c4:
         00:6c:a8:e6:79:fb:39:ad:3a:c2:6b:56:ad:58:18:34:3c:3c:
         bf:f1:3e:c7:8a:16:4b:72:65:d1:6b:8e:5e:54:37:ee:60:bb:
         df:a9:67:3d:2f:26:34:d4:a3:87:3b:21:28:82:e6:07:54:42:
         bf:ea:c5:b1:31:db:08:09:9c:3f:48:8d:a4:0e:e5:a6:57:52:
         19:45:8a:48:e4:f4:8d:9a:d7:0a:30:08:22:12:22:b8:8e:8d:
         ed:8a:e7:75:c6:3e:e0:40:e1:f3:53:fd:17:e5:85:80:24:d3:
         ec:7b:79:65:2e:c2:e6:32:f7:6a:cd:a3:56:51:2a:4c:2f:df:
         3c:f6:55:f0:3b:1f:eb:08:70:3b:d0:bd:04:3a:3a:68:6c:b6:
         cd:a5:33:45:b4:85:16:32:f5:55:6d:e1:55:7a:c0:3f:f6:0f:
         4e:f6:1e:7f:ee:0a:82:aa:9d:6c:a8:c8:da:a2:3d:97:c4:99:
         77:03:48:fa:c4:dc:61:0d:0f:7c:03:bd:88:10:c5:54:94:5c:
         61:66:cd:ac:87:b3:73:5e:b2:93:24:6d:32:99:88:13:89:36:
         5c:a2:1e:17:80:00:38:a8:1b:1c:6c:e9:84:01:1c:8b:94:45:
         7a:6d:2e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:46 2024 by rpki-client on console-ams.rpki-client.org