Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File:                     4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier:          4fhQ55FAo+DZEFc11cFAG8FXvNFkEXzIRrs3Pvr3Wx4=
Subject key identifier:   FA:79:CB:29:D0:3D:BB:D8:81:17:40:4B:C5:29:CD:16:9A:68:60:F5
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer:       /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial:       0193572D80D0C3835C91EF105B970817CA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number:          032C
Signing time:             Sat 23 Nov 2024 04:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:20 +0000
Files and hashes:         1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: 8hUktvleb0b+XIMlxovlfGJjT461qgu11y8rzr8+1UE=)
                          2: i6RJzi5RYIdzCgbxYjv1ygRY83E.roa (hash: xwJxH1GMl268ht7XqFvH/n3Qts5RSLF6hPoQSdpuekw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:80:d0:c3:83:5c:91:ef:10:5b:97:08:17:ca:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
        Validity
            Not Before: Nov 23 04:00:20 2024 GMT
            Not After : Nov 24 04:00:20 2024 GMT
        Subject: CN=fa79cb29d03dbbd88117404bc529cd169a6860f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:37:03:13:56:ee:33:ce:ee:d4:53:32:37:
                    52:d2:d5:86:97:e7:b1:c6:b0:7c:b5:33:28:8f:d3:
                    12:0e:46:31:20:f0:7d:72:65:d9:c6:16:e3:28:8e:
                    39:a1:cc:07:df:90:cc:0d:82:3b:4b:a1:16:fb:66:
                    fd:49:81:cf:a4:4e:97:10:7e:18:77:66:51:23:c2:
                    75:47:68:5d:7c:c2:de:19:b2:2e:38:46:dc:31:a4:
                    41:7f:d4:6f:35:d3:5c:54:b1:60:1b:52:f8:5f:b9:
                    67:bd:90:8e:fb:8d:6b:06:ea:aa:5f:64:eb:9c:70:
                    4e:c9:4d:f6:ad:0e:05:6b:11:9c:d1:3b:83:34:84:
                    e6:21:17:f0:7c:2d:aa:92:f6:6e:17:33:41:62:73:
                    c2:52:30:4f:9d:24:43:2b:15:a9:d6:44:2c:3d:25:
                    2b:ca:a3:89:1e:88:1a:d6:81:73:97:9b:a4:a1:21:
                    d8:26:f8:31:e5:23:0b:a9:f2:34:67:ff:58:84:5a:
                    d1:fc:f9:6e:20:7d:83:53:51:eb:e8:01:15:be:07:
                    2b:98:53:4e:17:50:58:d4:0a:b6:a2:95:0f:f8:4f:
                    c6:4b:53:12:f3:7b:51:c7:a4:6e:56:2f:3b:7b:f9:
                    14:49:ae:3a:c0:dd:63:5c:bf:d4:53:2a:74:17:4e:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:CB:29:D0:3D:BB:D8:81:17:40:4B:C5:29:CD:16:9A:68:60:F5
            X509v3 Authority Key Identifier:
                keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:40:95:ef:65:e8:ab:d5:b6:39:e8:c8:92:db:5d:4b:f2:32:
         01:b8:ca:e0:89:24:c5:5a:59:d1:df:c2:c7:94:33:02:9c:2b:
         7a:1f:af:83:ff:b9:c4:62:7a:24:7f:fc:64:ee:ba:b2:7e:72:
         f3:9b:ee:b9:3a:b0:e3:6c:4d:20:e5:7a:25:cf:5f:73:fd:7f:
         48:13:54:e7:bb:8e:23:b2:6e:d7:30:e5:a6:de:98:3e:ad:e4:
         73:b7:9c:c7:9f:ec:6d:4d:49:2c:c4:ab:61:e9:23:89:e5:c2:
         7f:09:73:77:28:29:8c:d0:7f:4d:33:0f:77:e7:ae:0d:28:d8:
         06:f0:6e:dc:01:fd:b3:c4:1e:f5:64:35:9a:95:c9:f7:47:59:
         76:86:d5:bb:99:2a:7d:26:7d:25:4d:a9:01:aa:05:89:d7:7f:
         e6:c8:50:8b:21:67:76:2a:43:40:d7:be:40:ff:b6:4c:fc:69:
         e7:6c:c8:6a:e2:92:46:dc:4b:22:e1:6b:ae:92:ed:a8:b8:8b:
         2b:ab:4d:5e:e2:cc:c5:4a:d8:68:75:e5:02:41:5e:89:eb:13:
         64:96:2e:b4:89:80:d6:21:4e:57:ee:d8:cb:ed:5f:bc:aa:12:
         0f:1b:20:e0:3e:c6:a5:83:83:a1:a3:aa:3c:8e:b6:8e:58:8d:
         81:e5:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:05 2024 by rpki-client on console-fra.rpki-client.org