Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
File:                     TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft (raw, json)
Hash identifier:          xvQGq0l8f9JA72rAUApA6Usz4GBSFsv+j+lh5jYPJb8=
Subject key identifier:   86:FB:60:23:85:A2:2D:C9:7E:3C:18:48:B7:20:1A:30:08:9A:D4:46
Authority key identifier: 4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
Certificate issuer:       /CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Certificate serial:       019357D245444ACD2633FB08AEE25FABC0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
Manifest number:          055D
Signing time:             Sat 23 Nov 2024 07:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:18 +0000
Files and hashes:         1: Ta4_LCDdK8p_Ntm4P5Frsh18UWc.roa (hash: qhYXNRlFr+AmPAm/8z/5zwnK1BPK3L/McBQxIef2Elo=)
                          2: TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl (hash: UJu0xKzVikVAvYCQSHN+Y4TVFrTS791hBI2P9UNeGjU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:45:44:4a:cd:26:33:fb:08:ae:e2:5f:ab:c0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de43a56cbf6afe4356896e0dff529c1796944b4
        Validity
            Not Before: Nov 23 07:00:18 2024 GMT
            Not After : Nov 24 07:00:18 2024 GMT
        Subject: CN=86fb602385a22dc97e3c1848b7201a30089ad446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:b4:82:dd:e2:d7:6a:56:9d:89:fc:05:91:
                    d3:d4:f2:4b:5d:82:5b:61:aa:0d:a6:b5:9e:fd:ad:
                    38:8b:a9:a3:59:16:9a:3c:ff:ec:26:b7:85:87:cc:
                    5a:84:47:d5:a1:a9:b8:f2:42:f7:c7:84:f7:fd:de:
                    61:db:d0:99:88:f5:d7:34:01:4a:b9:18:28:18:7d:
                    e0:1c:e2:73:0e:2d:2a:a0:0f:6a:75:8b:aa:15:5a:
                    1c:e4:6e:a7:91:92:8a:25:b5:d4:06:13:7e:67:d7:
                    00:af:1f:c5:4a:b5:d1:80:73:e5:ba:d0:fd:eb:f5:
                    d0:ea:bd:19:7b:30:77:8e:8b:0d:30:55:6e:38:26:
                    03:30:18:17:00:f5:a6:20:7f:50:31:7a:84:f1:d0:
                    69:dc:12:50:e0:6c:33:60:92:0f:bb:80:f1:bb:fc:
                    15:6c:60:90:52:d8:fb:3b:46:b8:0e:a3:7b:30:da:
                    16:7d:90:b0:09:0a:a8:ef:d2:51:68:44:29:56:6e:
                    03:28:26:ed:d2:33:fe:ce:f0:14:3f:c0:fc:16:74:
                    5e:91:88:b8:80:b7:6f:1b:48:0a:5a:23:d1:6e:b1:
                    77:75:bf:56:3b:c3:98:20:04:fe:fe:2c:09:d4:51:
                    d1:5f:a8:d0:4e:d0:57:a4:9e:99:a7:db:99:9c:7a:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:60:23:85:A2:2D:C9:7E:3C:18:48:B7:20:1A:30:08:9A:D4:46
            X509v3 Authority Key Identifier:
                keyid:4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:30:62:1c:c6:78:44:50:38:af:ef:2e:f8:0e:a6:00:bf:
         ae:cf:9a:16:31:e1:2c:1d:15:5e:7a:d9:b1:ed:6a:8a:29:7e:
         af:20:7f:50:63:8c:aa:12:09:d3:9e:e9:5f:7a:94:15:9b:73:
         af:12:e2:49:94:fe:91:89:ea:fd:93:4b:15:77:f9:1a:6a:90:
         ac:e1:12:3f:6a:86:61:c6:13:91:c3:5b:fa:30:88:6f:a6:a6:
         d2:73:45:cb:51:0c:b9:17:b3:ac:6c:5b:90:76:69:30:f8:87:
         23:1c:a4:37:13:92:3f:55:e3:4b:6e:34:cb:82:50:e0:bd:ec:
         a8:0a:a7:d8:a3:6d:7f:d6:c3:ca:8f:24:38:14:9a:3b:27:9c:
         5b:bd:21:2f:58:ae:3e:ab:54:99:81:82:14:e3:17:5a:e9:89:
         d7:6d:6d:ac:fe:61:08:80:b6:e3:a1:70:ca:b2:56:af:88:b4:
         65:56:5c:46:aa:a3:70:5d:a0:71:66:4e:8c:6b:53:7b:be:b5:
         f4:e0:6b:56:fe:2f:26:cb:77:ad:0f:c9:a4:3d:f9:08:eb:be:
         71:51:59:90:50:a4:05:1e:ca:8d:b7:8a:1b:63:cc:86:70:82:
         68:a2:00:ca:94:40:44:d9:19:3f:be:f5:5d:dc:f4:ad:20:26:
         8b:71:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:04 2024 by rpki-client on console-fra.rpki-client.org