Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File:                     4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier:          ZctUym+znkz7Cv8AMmiSMXaqCI1mwOHYQK7QO2m835A=
Subject key identifier:   DE:78:F3:79:92:21:37:1F:BF:70:7D:3C:FC:13:75:C4:F1:2B:7C:8E
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer:       /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial:       019356F66E9F49FFEEB15206EC61BF34B3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number:          8B
Signing time:             Sat 23 Nov 2024 03:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:10 +0000
Files and hashes:         1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: kdJf8NmRPYPzqanuTML2sFRLG6YbzfoOf2bEK1bhjGI=)
                          2: s8qlNDOgy0d0ExZTNAx5CUH-z5w.roa (hash: /sbBdJ3pm7s86I+HTIiYXhVSt6a1mN6oqfq+SDcOUo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:6e:9f:49:ff:ee:b1:52:06:ec:61:bf:34:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
        Validity
            Not Before: Nov 23 03:00:10 2024 GMT
            Not After : Nov 24 03:00:10 2024 GMT
        Subject: CN=de78f3799221371fbf707d3cfc1375c4f12b7c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:0b:78:8d:65:31:0f:e4:88:97:d9:b8:4d:
                    73:b1:92:58:db:a7:de:52:1f:57:a2:9e:ca:00:82:
                    65:66:1b:e5:48:2a:cd:2b:7d:51:15:0b:99:61:e6:
                    4c:f5:82:67:14:ff:4c:92:d3:da:9f:d0:6c:ef:81:
                    47:9d:5a:0c:4f:15:20:f4:96:97:d7:f1:ab:4e:65:
                    ce:ef:15:2b:6b:ed:a7:30:28:8f:c2:47:ad:52:9b:
                    65:91:12:42:da:c7:1d:8c:2c:84:e6:89:5e:37:ba:
                    91:11:9a:6b:ce:e1:bb:fc:e1:60:6e:c1:57:a3:9a:
                    69:81:e0:23:6c:0c:1b:7e:16:63:60:2c:02:71:1c:
                    03:d1:d3:39:31:d9:b9:31:29:6b:69:9f:65:c4:4e:
                    67:5f:40:d5:f9:f5:d6:30:7f:4d:ce:ed:94:57:90:
                    27:53:53:28:80:81:bf:9e:d2:04:4d:33:e9:8a:24:
                    eb:95:0f:23:45:ab:f8:4a:a3:8d:b9:ce:e0:e7:1a:
                    f5:02:20:50:fd:d2:ba:29:da:cb:64:7d:df:6d:4a:
                    15:2e:3c:91:8e:0c:f0:d5:83:4d:a1:2c:81:25:d8:
                    3e:55:aa:ec:d1:ef:7f:03:43:78:22:68:09:41:1e:
                    60:5e:fb:f9:2c:e3:68:9e:f2:f9:32:de:63:a4:24:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:F3:79:92:21:37:1F:BF:70:7D:3C:FC:13:75:C4:F1:2B:7C:8E
            X509v3 Authority Key Identifier:
                keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:75:8e:dc:01:21:fd:c5:cb:ef:09:f0:cc:86:93:6e:10:3b:
         06:93:3f:e5:bb:26:3a:53:6e:c9:eb:55:c1:1f:92:20:cc:0f:
         a0:97:2c:a8:5d:ec:ae:f9:ad:ce:68:94:6d:b1:52:f8:f9:f2:
         ab:30:5a:5d:4b:60:e2:a2:d9:a1:02:f2:d4:3e:80:eb:88:a8:
         35:14:e9:24:02:05:21:3b:14:ad:d0:b5:9d:cd:fb:3a:41:f5:
         69:dc:98:a5:aa:57:b9:e6:69:d8:b9:2f:03:e1:8e:48:f7:06:
         85:38:93:67:71:ff:41:31:6a:bf:43:78:6f:b8:40:20:e3:30:
         0b:2b:83:e7:cf:be:58:15:02:70:0b:9a:e3:fa:b1:24:fd:9b:
         b3:f5:ee:2c:b3:db:cc:48:fd:0a:f9:dd:52:90:2b:bd:32:83:
         89:db:96:d9:60:ec:05:b9:1d:50:18:f6:36:54:06:f0:81:74:
         80:55:c2:b6:30:d9:f8:64:85:a7:ed:34:f5:75:8f:b3:d5:b9:
         55:cc:aa:f0:c4:b8:78:ef:72:8b:51:f1:80:bd:eb:91:c3:d7:
         da:18:63:2f:7e:b0:60:c8:98:59:d4:85:52:c3:e2:89:a9:1b:
         4f:0a:4a:79:3f:85:67:6c:b8:a6:fb:dd:9d:c0:5a:d9:05:39:
         8b:3a:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:57 2024 by rpki-client on console-ams.rpki-client.org