Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File:                     e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier:          bpOcCbj6TdcDFlcDWhiFyigcAePKLnwsABRXSjAc62s=
Subject key identifier:   3A:C1:03:70:EE:AF:79:D2:58:48:4C:8B:95:22:03:C1:AB:82:89:0C
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer:       /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial:       019359C14744C3B8657CD103E7B064F534EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 16:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:59 +0000
Files and hashes:         1: Z-2yti5r6OwLCOpxNJNwlZBM0j4.roa (hash: p0Oh20FDPmNgJU0ly8q4Dg3A4OWqnOH6AIVm3iaQ47Y=)
                          2: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: otrjFdzLs3g+zH2mcguYwFOR22WienCyRcHsrXzH0eQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:47:44:c3:b8:65:7c:d1:03:e7:b0:64:f5:34:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
        Validity
            Not Before: Nov 23 16:00:59 2024 GMT
            Not After : Nov 24 16:00:59 2024 GMT
        Subject: CN=3ac10370eeaf79d258484c8b952203c1ab82890c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:c0:d2:4c:c5:58:49:78:4b:86:78:98:1d:
                    0f:de:5d:e8:87:15:c8:3c:d7:8b:56:bb:68:27:cc:
                    72:5b:cc:68:9c:e4:26:0c:18:f2:db:9b:84:e1:f5:
                    88:9c:a8:45:f8:6c:e0:03:5c:fa:a2:c6:b4:3d:98:
                    5d:a9:ef:5e:53:c2:f1:67:c6:da:bd:cc:10:e3:ba:
                    95:33:74:c8:d3:8f:d9:f6:3b:1f:b4:48:b5:4c:45:
                    f9:2d:d4:94:0e:23:be:4c:e8:9e:d6:0b:fe:80:0b:
                    d7:b4:10:ca:5c:76:09:b9:16:43:c0:52:85:26:4b:
                    d6:9f:2f:1d:b4:a2:05:c2:f2:0b:68:7b:51:ad:04:
                    32:23:76:d1:63:bf:d5:cc:30:c7:1b:98:1e:32:c8:
                    55:34:4f:0c:f6:f7:95:20:73:51:13:8f:4a:27:b9:
                    d1:d1:25:95:60:a1:af:00:97:e7:4e:bc:16:58:16:
                    94:eb:c5:15:af:4f:28:06:91:a3:6d:0b:25:fe:da:
                    01:b2:27:fc:9c:c3:7f:d1:bb:15:39:de:75:c0:62:
                    82:92:c9:9c:72:d6:93:b8:75:1a:0c:54:b6:a1:e8:
                    70:b4:a8:72:fa:cc:fa:dc:b6:b5:8b:e1:df:6d:b4:
                    ea:eb:89:e9:a4:4e:c4:36:d1:ab:ea:00:10:50:0a:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C1:03:70:EE:AF:79:D2:58:48:4C:8B:95:22:03:C1:AB:82:89:0C
            X509v3 Authority Key Identifier:
                keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:93:7d:44:fc:db:43:b0:64:59:e6:f0:9a:92:02:fc:52:e4:
         b5:2d:da:a1:9e:83:59:e0:c2:5d:b1:53:79:0f:08:3a:b7:3b:
         ed:70:77:de:29:84:38:43:5b:1e:59:3e:be:a3:91:a9:3b:8c:
         bd:11:08:0a:e3:8f:fc:a6:dd:fb:b6:22:c1:7a:43:ac:62:a1:
         e9:54:f0:aa:46:49:7d:02:a2:3c:5e:41:25:e1:fc:d8:1f:ef:
         7d:47:f1:45:54:e2:6a:6c:99:69:8c:49:cb:91:d2:70:17:e8:
         21:14:40:77:e4:d5:96:71:d9:7e:83:7d:78:3b:c7:cb:0f:96:
         ac:43:52:48:09:22:65:64:cb:35:fb:61:85:1b:ce:17:63:be:
         78:f3:1d:3f:c3:88:a6:d1:3c:15:d1:ae:4e:fd:5c:e0:b6:84:
         a4:70:a7:1a:5e:d6:0c:d5:72:52:c3:4b:dd:e0:6e:81:fe:ae:
         cd:1f:86:b4:8b:91:87:eb:8e:28:88:f8:b8:57:3d:8b:2e:19:
         41:53:ec:2c:83:8e:e3:ae:b0:63:1b:b3:7b:f9:ba:1f:2c:b8:
         e5:e3:6d:3f:ad:b1:29:47:1b:38:11:ee:82:88:3a:b7:52:f1:
         11:0c:3b:de:8a:5c:3f:9b:57:a0:9a:68:d7:43:6a:1f:c4:14:
         bc:18:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:28:10 2024 by rpki-client on console-ams.rpki-client.org