Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier:          bMThx1vLPdSQBbFJWKaLif/y2/h3mGB5fZepQZ/xeAQ=
Subject key identifier:   E2:04:0F:72:51:48:A4:6D:00:A1:00:57:B9:39:A8:9B:E8:31:51:56
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer:       /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial:       019406EB1953630C6B998FB2A2F1736835E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number:          0FC4
Signing time:             Fri 27 Dec 2024 07:00:58 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:58 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:58 +0000
Files and hashes:         1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: YZRqtmUK7AQu49dC76Mm3VYJUZ3FYFyk+9fgvM28wiE=)
                          2: 86ixkR6LNf2SLqVf7QVYvBXAPqY.roa (hash: VJuceZf3N3+HRKLDBpxx4Asg8X/VD8bBZobeUNd+0Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:eb:19:53:63:0c:6b:99:8f:b2:a2:f1:73:68:35:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Validity
            Not Before: Dec 27 07:00:58 2024 GMT
            Not After : Dec 28 07:00:58 2024 GMT
        Subject: CN=e2040f725148a46d00a10057b939a89be8315156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:6a:3d:77:53:a0:3c:d5:27:03:f8:d8:e1:
                    28:e4:3d:fb:f7:76:cf:26:82:bf:4a:ec:62:f2:1a:
                    2f:b4:0d:c6:ad:4d:b2:60:84:19:9d:0c:25:20:53:
                    0f:5c:bf:57:93:9e:09:f9:f8:a5:7c:6f:47:e8:45:
                    5b:43:a9:c0:1d:76:7d:ff:b5:bc:02:5e:33:c6:4d:
                    2c:bf:1c:c0:68:a4:4d:9c:28:a2:3d:02:9d:59:c3:
                    e5:2b:57:2f:ac:ab:b7:39:47:c6:3b:80:52:44:67:
                    11:a2:5e:84:85:e3:45:29:0f:e9:49:8e:0f:2f:43:
                    d8:a5:af:7c:44:5b:89:98:7e:2f:f0:3b:0d:6c:5c:
                    6c:58:f3:7b:c5:6e:9f:8c:5f:d4:56:03:c2:09:1a:
                    07:5a:6d:fc:7d:7b:d9:76:4c:b8:15:c4:fe:0c:b5:
                    6a:3b:71:32:27:17:95:0f:50:04:2a:a7:51:28:55:
                    0f:a8:0e:71:f3:be:9c:16:fe:aa:4d:9a:8c:7b:38:
                    6d:ec:90:a3:c5:69:5e:cd:c2:b8:bb:de:ad:05:bf:
                    9a:5c:06:d2:c6:13:3a:93:51:08:9f:19:52:dc:9e:
                    c3:e5:c2:79:10:fa:e3:6c:90:12:7c:9c:16:c3:8e:
                    de:2f:22:dc:d9:35:ea:25:4f:ee:e1:28:bc:ed:f8:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:04:0F:72:51:48:A4:6D:00:A1:00:57:B9:39:A8:9B:E8:31:51:56
            X509v3 Authority Key Identifier:
                keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:71:e4:cd:bb:cb:d2:ed:50:47:29:c9:54:8e:a5:d2:35:
         5c:21:9e:8e:0f:a4:ad:ba:d6:e9:06:c7:5a:8d:74:62:18:1e:
         a4:19:f8:d7:80:e0:df:14:ed:37:e6:cc:17:f7:d5:cf:5d:d7:
         f7:b7:bd:8d:f7:45:5e:09:1e:74:61:ec:1e:04:4e:c2:c2:e9:
         ab:fa:fc:83:52:94:b5:50:8e:aa:10:f3:38:21:d5:cb:d3:97:
         c5:18:4a:fa:90:9f:b6:a9:7e:02:c6:7f:85:f9:f7:64:40:20:
         b3:71:35:a9:35:d8:82:98:d0:30:8a:ca:78:a6:89:43:ce:89:
         cd:2c:47:98:71:14:13:71:3f:c9:84:96:b3:84:40:54:9d:a7:
         60:0c:2a:15:e7:81:6a:61:e3:b2:d6:2e:f6:68:1d:5e:63:a3:
         93:4f:49:a2:4d:03:ec:ab:a3:2f:4d:48:ed:15:62:5d:95:68:
         ee:b9:f5:c0:4c:bd:96:bb:4b:30:cf:10:0e:7f:c3:fc:45:16:
         db:f7:2d:60:e0:d2:f5:48:35:06:8b:3f:f4:01:a4:a0:4c:7b:
         42:78:77:ed:99:86:de:6d:dd:43:e5:c9:0b:b7:a0:db:24:d6:
         a6:fa:c5:02:7f:d5:e4:ec:1e:80:6c:f5:29:fd:3c:a5:5b:97:
         67:f2:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:25 2024 by rpki-client on console-fra.rpki-client.org