Manifest

$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File:                     ripe-ncc-ta.mft (raw, json)
Hash identifier:          mGAR27YZ1lhE7lYtP5axckJb6uSxKsimXd7fYhrFL0M=
Subject key identifier:   39:A7:5E:D9:06:A0:2D:59:26:28:97:94:9E:76:4D:47:EF:7A:EE:6B
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer:       /CN=ripe-ncc-ta
Certificate serial:       010B
Authority info access:    rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access:      rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number:          4C
Signing time:             Thu 22 Feb 2024 14:13:59 +0000
Manifest this update:     Thu 22 Feb 2024 14:13:59 +0000
Manifest next update:     Wed 22 May 2024 14:13:59 +0000
Files and hashes:         1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: fO9mz2BC7ZQOTkhQDH+R9WjNViy5XNP9gfP1bk7VzzU=)
                          2: ripe-ncc-ta.crl (hash: nR1AuXY/+MBsJhZcLdCKMlUW61xIChnPND0KRec/g5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Feb 22 14:13:59 2024 GMT
            Not After : May 22 14:13:59 2024 GMT
        Subject: CN=39a75ed906a02d59262897949e764d47ef7aee6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:6b:95:22:f9:6c:ec:d5:ec:cd:f2:18:ba:
                    59:0b:9a:4d:71:60:2c:66:d5:d8:9f:97:37:bf:1c:
                    3b:33:fc:e6:80:6e:4e:39:66:b4:94:23:4f:1d:a9:
                    c6:b0:bf:ba:30:a1:49:05:2b:3f:bb:a9:5a:b9:2e:
                    7a:43:f9:46:7c:0e:55:73:8c:ba:52:bd:63:12:d0:
                    cb:19:3f:70:3c:1f:9f:a0:08:8b:b0:f4:ef:5a:15:
                    3e:82:1c:dd:32:c1:b8:5c:61:ae:79:ae:e3:9e:12:
                    5d:92:55:6a:70:23:29:87:70:ac:d7:ce:06:8a:f3:
                    f1:d5:ab:44:18:e4:17:b8:c1:dc:93:88:2d:0c:c1:
                    f3:0f:4f:b1:c6:3d:7c:a7:49:2d:f7:42:51:5e:23:
                    35:cc:d0:9d:f9:d5:a2:08:68:84:74:cf:32:df:8d:
                    84:7b:80:5c:7a:f1:67:84:bd:98:b7:16:0a:a2:33:
                    78:5f:7c:bc:ae:cf:0a:3f:ae:89:9c:ad:bf:5c:96:
                    2b:54:8d:56:7c:42:a6:84:a7:23:13:b7:5b:47:97:
                    f9:1e:79:f7:a2:78:25:9a:4d:70:5c:27:4f:1d:e6:
                    c7:b3:11:52:b4:d5:19:90:64:8b:61:f8:82:13:35:
                    23:b9:e9:e1:be:ec:6d:d9:2a:3e:85:ce:6a:9e:ff:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A7:5E:D9:06:A0:2D:59:26:28:97:94:9E:76:4D:47:EF:7A:EE:6B
            X509v3 Authority Key Identifier:
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:4c:6b:b2:ab:70:1d:81:87:c2:d7:8c:22:0b:9a:f9:87:
         d0:9d:c0:da:28:6f:f2:f7:93:be:2c:2b:96:e7:63:37:11:61:
         f6:a4:8f:19:2d:dc:59:c1:52:43:51:25:d3:4a:05:bd:4f:cd:
         da:4a:43:3a:df:83:46:54:54:12:9a:c2:05:78:7f:12:87:be:
         76:1b:09:08:d9:e5:e4:c2:17:e4:5a:77:6f:b4:69:33:4d:5c:
         c8:2c:a6:c2:da:39:05:5b:57:66:79:b4:7b:b9:aa:58:6d:f8:
         59:2e:8a:17:ad:36:79:9d:12:1c:ef:b0:07:f2:86:e7:30:8a:
         05:51:64:c8:f2:76:16:dc:66:ce:14:60:e1:24:c5:6e:fb:00:
         d4:69:61:ae:7b:38:9e:bf:e2:8c:86:54:9f:ef:ed:d7:87:f0:
         01:cd:0c:d1:58:dc:e8:61:13:b2:e6:78:fd:eb:fd:4b:83:42:
         9d:46:b6:f7:d3:13:cf:df:e2:95:c6:cb:c0:28:98:88:55:d5:
         e9:fe:6c:22:2f:02:75:9c:56:66:81:89:47:c4:7b:6a:ad:e0:
         5a:aa:cf:4d:d2:7c:37:12:c5:0a:fd:13:e2:25:ea:35:ae:d0:
         25:a0:65:29:42:c4:97:a5:b6:87:35:27:00:5c:77:14:df:9a:
         b6:c5:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:03:29 2024 by rpki-client on console-fra.rpki-client.org