
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File:                     TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier:          KjOOBllcP+a7MZg9KEPRiOPzTLzEdg0iWithvLsTglw=
Subject key identifier:   9E:65:68:C1:49:D0:85:9C:5E:F6:C0:A0:9C:6F:BC:40:91:19:EE:B5
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer:       /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial:       0194BABB2B563847369706EDCDC208E8F954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number:          0671
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: rnB+bME4JtVMDj6vAgiuw1JOIppYqJu1tm/VNaUcEzs=)
                          2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:2b:56:38:47:36:97:06:ed:cd:c2:08:e8:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=9e6568c149d0859c5ef6c0a09c6fbc409119eeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:66:76:c5:33:7f:00:05:70:fc:54:0a:83:
                    58:d6:27:2e:42:76:b1:04:13:93:44:8a:2f:29:0a:
                    aa:3c:c8:b4:5e:50:c6:39:6b:61:87:1b:f1:cf:1a:
                    f3:7b:74:1c:e5:67:04:7e:ea:79:6d:2e:18:77:43:
                    9a:02:8b:45:b4:97:41:97:c7:f7:cd:43:d2:dd:f2:
                    a1:1d:db:e0:36:d0:99:7f:f7:c0:9e:d2:f3:c9:69:
                    d0:63:1b:19:34:32:01:5c:1a:e9:35:cf:8f:20:5f:
                    72:bb:ba:88:7e:87:ea:86:18:17:b9:2f:6b:c1:ea:
                    77:90:5e:4b:cb:5a:bb:15:60:48:cd:0a:cc:f8:c0:
                    88:07:1d:12:d7:69:66:b0:72:92:ad:ec:87:ab:bd:
                    57:cf:a3:9f:1e:42:e4:0c:21:e3:e6:a9:4d:b1:17:
                    70:43:f5:6a:19:38:08:4c:dd:d4:15:3d:72:ca:3b:
                    1b:f5:d0:3a:d4:21:31:06:e4:48:b8:19:bb:04:16:
                    f0:91:ef:4a:ce:be:95:d9:3f:df:25:fa:1e:30:ab:
                    72:35:aa:1f:ab:cf:38:20:5f:65:27:6a:a8:46:4c:
                    12:52:3c:99:e5:26:5d:56:65:f6:20:1b:8d:45:a9:
                    02:e6:02:1e:f2:a1:c2:75:9e:bf:c6:06:92:30:f4:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:68:C1:49:D0:85:9C:5E:F6:C0:A0:9C:6F:BC:40:91:19:EE:B5
            X509v3 Authority Key Identifier:
                keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         38:55:00:7b:33:cf:0f:e6:cc:2c:be:bf:8c:58:71:43:ed:e6:
         ee:7b:fa:6c:47:61:d3:88:3e:61:4b:84:a0:b3:90:e1:32:0c:
         fd:15:18:55:53:db:c0:f5:89:cd:2b:94:ee:f3:f4:f4:8b:ca:
         c3:f0:e8:88:80:60:5e:eb:8c:da:62:60:68:0b:1d:c5:9b:08:
         84:b2:1c:bb:5d:42:7f:cd:ca:9d:e3:ef:bb:3e:6d:2c:e3:20:
         3c:70:93:dc:97:bd:03:0f:6d:92:03:87:95:c0:b0:09:79:ba:
         03:44:6c:46:bf:66:86:34:b0:02:13:0b:17:df:55:29:a3:70:
         37:8b:53:66:e7:57:1e:6f:72:fc:1d:c4:99:5d:2b:42:93:a3:
         a2:10:3e:a8:a4:d3:95:4a:06:f4:a5:72:a5:ac:9f:f8:c8:41:
         b0:37:f6:9d:4b:f5:18:3a:9f:6f:eb:2d:76:4b:86:38:f9:25:
         f4:e1:d1:a7:6e:67:79:c1:89:03:e8:0e:ee:8d:d0:bd:0d:57:
         5c:e2:9a:04:be:f3:d7:5a:02:38:2c:7c:d2:b7:6c:4d:38:0a:
         db:3f:49:10:f8:2e:f0:c6:90:53:d6:d8:4f:17:3e:42:f9:84:
         a6:cf:bb:16:d8:02:e0:59:30:f0:c5:c6:da:9c:08:cd:17:be:
         0f:84:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:08 2025 by rpki-client on console-fra.rpki-client.org