Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File:                     S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier:          9rzYUUiBHYCxCCkdUn+9+yfOxG71r/eZlVwy10kbJ6w=
Subject key identifier:   E2:05:FC:32:52:AE:40:70:B8:53:33:85:5E:61:92:B1:5A:10:97:ED
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer:       /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial:       0193572D843961C3F14923DD98E83524FD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number:          0BE1
Signing time:             Sat 23 Nov 2024 04:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:20 +0000
Files and hashes:         1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: HoJ3GLQrrhZNBpoiy4kGexzh4bJuwMWECQakPiAtUc8=)
                          2: dkCsepCLSMKb-yKd1G0gwui3o9k.roa (hash: ZQ4F7a3W8zCtf8ywCaHG79xixjm4YX/0j+SnvTq3BBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:84:39:61:c3:f1:49:23:dd:98:e8:35:24:fd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
        Validity
            Not Before: Nov 23 04:00:20 2024 GMT
            Not After : Nov 24 04:00:20 2024 GMT
        Subject: CN=e205fc3252ae4070b85333855e6192b15a1097ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:57:3f:40:cf:1e:25:07:29:01:06:c7:81:
                    d5:55:15:e7:58:ee:cb:0f:0e:29:53:21:3d:92:ac:
                    1e:66:6d:03:19:99:b0:61:58:ec:b8:63:74:e3:be:
                    1b:3a:2c:28:ce:f5:00:2c:49:73:8b:37:24:1b:31:
                    bc:80:70:83:e1:82:13:f6:3b:b0:4f:10:1b:d4:ad:
                    68:36:d8:54:22:5d:ae:86:34:11:87:d8:84:70:79:
                    43:df:52:4b:5e:25:4d:cd:e5:12:b7:77:76:b9:89:
                    cd:db:39:ef:79:76:96:23:85:8d:57:f3:41:a5:e8:
                    3e:70:50:db:78:9e:90:d3:b3:ac:11:33:ac:a7:11:
                    6b:14:cb:43:02:b2:a7:6c:ed:6c:54:65:2d:93:d3:
                    02:68:cc:a2:3d:5e:d2:3a:86:77:a3:f0:1a:21:ed:
                    82:fb:2b:a2:95:b3:a8:be:5e:cf:ee:e4:45:1f:be:
                    2d:6d:b0:f1:a6:2a:06:d1:82:6f:04:f5:a2:e7:91:
                    27:b3:e6:10:e8:c0:83:ca:a3:32:9c:cd:93:10:b3:
                    a9:df:a9:97:2f:03:64:a1:f3:22:4a:3c:7b:4a:b8:
                    36:db:cf:6e:06:2c:e2:53:6a:ab:77:d7:8c:65:b8:
                    d8:ae:85:68:d1:73:1b:0b:56:9b:83:c3:ab:eb:3d:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:FC:32:52:AE:40:70:B8:53:33:85:5E:61:92:B1:5A:10:97:ED
            X509v3 Authority Key Identifier:
                keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:4c:36:83:62:ac:5f:9d:ff:f7:89:71:a5:7a:00:ab:5e:
         09:6d:64:35:37:bb:cb:3f:e8:76:a3:5c:57:66:96:87:c0:cd:
         43:18:13:d1:91:5c:e5:20:df:b3:46:15:56:10:fd:9b:c1:a7:
         0c:54:8d:6b:b5:51:51:1b:93:6c:71:df:d3:a7:4e:19:76:28:
         b0:08:02:24:af:e1:1f:15:b0:ec:49:80:a4:1d:45:3a:9c:a4:
         ff:eb:5f:63:f2:db:f5:dc:ff:1a:a4:bb:83:1c:aa:40:5c:e8:
         d3:02:0f:0d:4b:48:4c:74:43:03:1e:69:70:7b:1e:e9:e6:82:
         ca:3d:24:cc:3f:db:13:e1:f5:19:f3:72:fc:dc:b6:f7:c8:67:
         f7:ee:8d:dd:41:c1:7a:59:e9:52:4a:db:55:ed:b8:dc:36:0e:
         40:d6:f7:32:8c:bc:88:77:b8:d3:ed:20:60:b9:05:f1:67:a2:
         ad:38:42:cb:9c:95:f2:e2:c5:1d:17:ee:ca:57:2b:d6:2c:63:
         8a:2c:70:e6:87:f4:52:af:91:5c:c9:0c:60:7d:4d:6c:c6:81:
         91:19:53:01:fd:25:51:8d:28:fe:ba:21:da:9d:54:95:51:87:
         72:ce:87:b1:65:b9:ac:fb:89:50:da:cb:f5:ca:b0:82:ed:b2:
         4e:fa:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:48 2024 by rpki-client on console-fra.rpki-client.org