Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File:                     4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier:          tdKogQEw9a3wxCvEBYK1mN0KBR1yFjhB1NAch4ryOfU=
Subject key identifier:   66:67:3E:B5:C3:FD:27:BD:23:C9:E2:3D:E0:31:AA:7A:3C:69:05:B2
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       0193572DB6D054F010DF676BA29383A4FE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number:          0E34
Signing time:             Sat 23 Nov 2024 04:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:33 +0000
Files and hashes:         1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: 0pc8bqN4mkHxo9pa1yIQjox+kGJXE4sQxCGf8DbaRKM=)
                          2: ttp1MCWff3zPnWFfjZQchea0FGQ.roa (hash: b/Mtq+7M0ce/ygc13FY7yW1j116aiFhPfQfw9PWKN8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:b6:d0:54:f0:10:df:67:6b:a2:93:83:a4:fe:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: Nov 23 04:00:33 2024 GMT
            Not After : Nov 24 04:00:33 2024 GMT
        Subject: CN=66673eb5c3fd27bd23c9e23de031aa7a3c6905b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:56:19:8d:9e:85:7e:bb:f8:6a:96:32:fa:
                    6d:94:1d:fa:cf:66:86:80:a7:26:a8:23:ab:4c:7c:
                    bd:72:72:d6:33:9c:d1:a8:9a:31:af:a4:72:d4:06:
                    cb:27:2a:f2:65:d2:af:eb:71:1c:aa:fc:37:c5:2e:
                    e8:ba:01:3b:34:8c:36:48:5e:8e:54:3e:91:e7:0c:
                    cd:09:14:b8:81:4d:be:ff:f2:42:c3:91:c7:d6:df:
                    12:22:86:33:c6:9c:42:c0:ff:61:bd:fd:20:5a:9e:
                    fc:bf:7b:3c:41:40:1b:9b:32:cc:7c:ee:af:be:c9:
                    09:ec:30:20:00:4f:89:0d:f3:3c:a8:30:c7:7d:a8:
                    f2:22:52:2a:b4:08:d7:1b:f8:0f:15:94:80:ea:12:
                    8f:58:c2:6e:5d:e8:58:15:02:1c:42:ba:32:cf:37:
                    be:6e:b9:81:0c:57:d2:7c:3f:c7:16:93:20:8a:1d:
                    30:57:68:4e:3f:a5:07:46:00:38:20:0f:4d:19:cf:
                    90:d6:ed:a9:65:f0:18:f1:ff:8d:2b:b7:ac:bf:d1:
                    8d:9e:16:bc:48:1d:b0:d9:13:52:4f:84:9a:97:1c:
                    61:a9:a1:f7:8e:71:fb:1a:69:96:dd:12:85:99:40:
                    c7:28:ab:3e:cf:a3:64:bd:50:b6:12:3d:ff:8b:44:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:67:3E:B5:C3:FD:27:BD:23:C9:E2:3D:E0:31:AA:7A:3C:69:05:B2
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:4b:63:c7:4d:cf:24:f9:fd:5f:5c:c3:c1:21:1e:d1:f6:
         d0:83:cd:6f:36:06:c6:0e:24:6e:8d:d4:00:88:e7:6d:df:66:
         e7:6b:be:5a:dc:f1:a3:73:9e:f6:6c:70:f9:59:9d:a6:45:fb:
         5f:69:87:87:8e:3f:8a:1f:4c:c2:ca:1b:6a:9a:ba:6d:53:f8:
         5f:a6:59:b9:7c:ac:c3:e0:a9:27:e2:30:fe:7f:dc:69:ae:8d:
         64:11:68:45:28:50:9e:f1:41:3b:dd:99:71:46:bf:9d:f7:2d:
         bf:f6:33:d3:3f:5a:7a:d4:75:45:1a:68:ad:55:12:70:4f:68:
         bb:5d:66:8f:cd:f9:08:11:ce:6f:18:f3:83:42:36:41:7c:2f:
         1e:c8:5c:4e:d6:0d:b4:28:9a:c7:06:99:dc:4e:35:b6:6b:d9:
         ec:6d:b7:96:98:49:3b:a0:d6:eb:96:70:7d:ee:02:c0:24:86:
         ab:3e:01:81:21:8e:67:f2:96:c8:7a:72:6f:8e:b9:08:c3:9e:
         3e:4e:17:44:8d:72:14:8f:9e:66:d1:c1:07:6a:e0:0c:31:fb:
         b3:bd:a9:2f:f6:9c:ce:e1:ae:22:65:49:fd:f3:8e:3e:b3:e0:
         26:f5:30:5f:82:b3:34:09:29:0e:fd:6c:5d:5b:07:04:90:e7:
         87:b6:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:25 2024 by rpki-client on console-ams.rpki-client.org