Manifest

$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File:                     ripe-ncc-ta.mft (download)
Hash identifier:          dVvyhyoCqPkGuuN4NIu1O+v2CXhiX4wvACwBIE9XecY=
Subject key identifier:   58:87:0C:76:D5:0B:D1:44:E5:23:0C:C5:19:68:3B:DE:77:FA:B5:E8
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer:       /CN=ripe-ncc-ta
Certificate serial:       FD
Authority info access:    rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access:      rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest Number:          45
Manifest valid since:     Tue 24 Jan 2023 12:18:28 +0000
Manifest valid until:     Mon 24 Apr 2023 12:18:28 +0000
Files and hashes:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash YjArAwnoAB+x34i2vu5uUW9U4imdtYFvB2pumKkDfbU=
    2: ripe-ncc-ta.crl
	hash 3e16cC2JPUqt9lUyMKRyDusfqonU3c4HyXKTRTLlF90=

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Jan 24 12:18:28 2023 GMT
            Not After : Apr 24 12:18:28 2023 GMT
        Subject: CN=58870c76d50bd144e5230cc519683bde77fab5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:f5:4d:a9:bf:75:06:8e:ee:69:d0:0c:5a:
                    0c:2b:4a:74:79:93:a8:23:97:e6:7d:85:fa:93:03:
                    a5:33:38:39:c7:0a:86:fb:46:95:62:30:14:1d:5c:
                    a2:ac:d5:f7:70:44:e7:0b:6c:56:8d:80:4f:c2:39:
                    90:25:39:6c:04:1b:15:db:7d:1a:53:4c:14:e1:e1:
                    ee:95:1e:fe:b7:d6:14:c1:7e:fa:db:a4:e6:5b:2a:
                    b8:d5:7d:9c:1b:ec:5a:6a:12:9c:46:72:59:dd:41:
                    3a:d6:7a:64:9c:6a:33:82:78:4e:c5:ff:23:5b:e9:
                    dd:8a:27:67:dc:79:9c:68:88:09:c4:db:88:97:91:
                    09:be:64:b7:72:ea:01:ea:79:ab:ac:27:0d:99:e7:
                    43:be:1e:38:02:47:01:0d:29:d3:24:8c:11:3b:b3:
                    a1:7e:b9:d7:89:78:54:a5:45:6d:39:ed:dc:eb:69:
                    ef:79:1f:33:d9:3d:44:92:b2:b2:c6:a0:52:63:da:
                    ba:8d:1a:be:ea:72:f4:9d:54:41:ef:5c:d0:44:36:
                    8a:8c:34:c6:e4:d5:47:28:fa:34:88:f3:4b:5b:da:
                    43:3a:e6:10:21:7b:ae:1d:85:b0:9c:f3:1b:c8:49:
                    71:dd:27:e2:0e:55:0b:48:36:84:64:26:6e:e1:11:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:87:0C:76:D5:0B:D1:44:E5:23:0C:C5:19:68:3B:DE:77:FA:B5:E8
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:12:6f:f3:25:5c:42:8e:03:9b:90:25:d9:18:4a:13:cf:
         1f:b7:6c:9e:e3:81:5a:4a:bd:4d:a2:d2:79:22:cf:e3:15:60:
         04:ea:8d:62:bc:c6:32:87:2f:eb:1e:b3:df:96:5a:66:6f:79:
         b6:fe:4a:6a:c4:65:4a:33:a0:5b:2f:d3:c9:47:f2:e9:d4:10:
         84:07:24:77:90:22:0e:68:c5:d9:53:cc:92:00:ce:d9:9c:f9:
         95:95:98:f6:7e:b2:c2:74:6a:5b:14:39:92:f3:f0:7b:ee:62:
         f4:cf:e9:ee:bd:98:80:ac:83:32:c7:58:a0:2f:63:a6:93:99:
         9e:19:a7:c7:89:0a:5d:7a:41:c2:aa:71:41:2c:9e:4c:66:f2:
         74:90:2b:f6:67:32:00:b9:c9:7d:43:70:7a:d2:98:ff:15:72:
         87:9e:63:5c:71:30:9e:f4:78:40:66:04:0d:e0:64:4b:b8:9b:
         14:65:a6:30:a9:6e:16:12:12:31:34:07:61:ba:5f:10:8f:44:
         1f:b1:da:40:59:e6:cd:99:15:5f:8b:34:6a:99:3d:92:85:39:
         e7:38:a0:15:81:f9:ac:f8:fc:24:c5:63:96:14:19:22:24:74:
         61:08:cc:6a:29:35:e5:8a:bd:61:dc:f6:e9:3e:55:83:ae:0c:
         50:e3:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----