Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier:          DWa1hPSUXjOlrw1fwxJ8ChwcbM03O8XDdJ7vo/IXZaQ=
Subject key identifier:   50:CF:6F:51:A2:DB:B5:0F:FC:4E:3C:04:BE:26:9C:2B:82:63:B3:88
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer:       /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial:       01935382EFC21171675FFDE8C0E7D89BD4D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number:          04C6
Signing time:             Fri 22 Nov 2024 10:55:10 +0000
Manifest this update:     Fri 22 Nov 2024 10:55:10 +0000
Manifest next update:     Sat 23 Nov 2024 10:55:10 +0000
Files and hashes:         1: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: uyKz4VHAGWzAw/C5YOQymtXhpZUCp2u3osNF1KIHTkc=)
                          2: 65W0hMH5imwR6YS4mShKkxbZjFo.roa (hash: kU7X0b0mkJB1n4o3bpZPOzLKa+6EO4Bcl+yuLyPTrrk=)
                          3: 7ktsksHJ883dTe10CVIKhpoSlkg.roa (hash: g2LakS3hnRqW7gzs+Q9/qzmeX2ZZit14sXZkBAVQkBM=)
                          4: NV60B8QJEoizW7nRjhAGRTyQrT0.roa (hash: epWMWKQghgSj94Xf3vM8wAeYulPn2VqXH4Np6d7ksXY=)
                          5: fqzdX37aYnO2SV1F9xqD_VioVyk.roa (hash: 9ps6eXC7/+a8ez/lv2CHZd5lkkd8E+VDpsZlRCrlf38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:82:ef:c2:11:71:67:5f:fd:e8:c0:e7:d8:9b:d4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Validity
            Not Before: Nov 22 10:55:10 2024 GMT
            Not After : Nov 23 10:55:10 2024 GMT
        Subject: CN=50cf6f51a2dbb50ffc4e3c04be269c2b8263b388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:8d:bb:b4:74:fa:8f:f6:b0:54:4e:19:aa:
                    83:b3:fe:9b:ca:4e:6a:9d:c1:95:37:d4:fa:4e:ae:
                    87:6b:59:15:9c:84:17:31:76:9a:62:5a:c3:02:ef:
                    06:3a:cd:ab:e9:fa:e9:62:2d:b5:88:25:d2:84:81:
                    60:ca:ab:b6:38:2f:96:e5:db:a2:b8:f5:bc:f9:40:
                    be:d2:78:42:2d:3c:5b:50:64:67:cb:f2:a1:27:56:
                    24:81:d5:92:4e:b7:4f:97:a4:3c:3f:cb:72:fe:43:
                    5f:77:08:30:6e:ba:70:0e:aa:76:b2:1e:47:e2:74:
                    d5:a1:71:de:e4:3b:98:27:3f:48:db:ef:fa:f3:7b:
                    eb:66:33:2c:03:4e:13:62:69:a4:bc:4d:8c:8b:10:
                    ce:e4:13:fe:65:62:a2:72:ce:3c:86:a5:dc:2e:94:
                    f0:a9:85:3f:88:41:66:1e:9e:3b:38:3e:d1:ad:d4:
                    f5:4b:95:5f:d5:fd:e3:e3:82:47:b2:b7:61:06:1f:
                    ea:3b:ff:c6:3e:4e:25:92:d1:89:05:80:aa:31:4c:
                    39:23:c7:6b:5b:dd:0a:17:e3:03:d2:ba:e5:c4:73:
                    a9:df:b0:f0:b0:e2:f4:58:1e:16:83:19:76:55:53:
                    75:0f:52:74:f8:7b:d5:bd:5a:a7:26:66:c0:20:c9:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CF:6F:51:A2:DB:B5:0F:FC:4E:3C:04:BE:26:9C:2B:82:63:B3:88
            X509v3 Authority Key Identifier:
                keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:35:e8:8f:1c:9e:37:9b:93:50:04:47:ea:27:a8:d9:9c:
         c0:15:01:37:8a:ab:d6:cf:51:d2:fe:a1:b2:26:ef:a7:4a:01:
         cb:02:98:79:b9:83:2a:64:40:df:ad:02:32:ec:39:06:46:c0:
         5f:74:3e:92:23:ec:b8:96:99:51:50:6a:12:c7:fc:62:79:2b:
         82:d9:d6:a3:8e:c4:6a:18:a9:ba:af:19:14:f4:32:d7:b3:32:
         f8:90:43:f0:4a:cc:df:c9:8c:77:b8:bc:4a:27:ed:7e:e2:32:
         79:aa:85:8a:62:43:6d:60:89:27:6d:2b:8a:21:7c:a4:f2:b5:
         c3:66:65:4f:04:d6:e7:d3:10:4f:d0:87:14:9e:b0:56:f6:5e:
         ca:c9:99:66:b2:64:fd:7b:ff:ea:2c:de:7f:b8:d5:30:da:07:
         ce:c5:24:e2:5a:2f:24:c8:09:08:ab:03:c1:d3:7e:8d:6c:f7:
         46:86:eb:64:7b:c5:83:46:59:ea:80:0a:3c:54:9f:8f:91:74:
         5b:6a:09:49:88:cf:b0:57:6b:10:40:cc:34:4d:f0:fb:b5:a2:
         91:b8:3c:96:62:a5:fb:4f:f3:a8:75:2d:34:c1:76:5e:28:4e:
         d4:53:af:d4:29:7a:e3:25:7a:15:b9:9d:38:5e:92:08:72:c4:
         48:93:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:28 2024 by rpki-client on console-fra.rpki-client.org