Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File:                     TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier:          jGMxZOs1lsoP1PIOtKKcgV+0mJ0OVXDUnT16cUj+rzo=
Subject key identifier:   55:FD:EE:3C:CC:98:78:85:E4:11:A3:2D:F1:CF:A3:98:2B:D1:C7:59
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer:       /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial:       019356F7352C489E5E84F2B13811AB41B61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 03:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:01 +0000
Files and hashes:         1: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: /fB2g1WeZYcukAAlAhC6yefttm6jVUOiMGmrmujPLv4=)
                          2: txKsDbfpEY9_-loDXYPleoL78E4.roa (hash: nr7/91Si4/x3oCOM530wP1qNnyYqXG1mxgnvQ1eKjXo=)
                          3: wc-NkHYD5a-81ifWYDtT51kExuQ.roa (hash: 6NAeOjLYiqY6PrKpWteJCmHJpKDn9hQLKTr2GIlzdL8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:35:2c:48:9e:5e:84:f2:b1:38:11:ab:41:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
        Validity
            Not Before: Nov 23 03:01:01 2024 GMT
            Not After : Nov 24 03:01:01 2024 GMT
        Subject: CN=55fdee3ccc987885e411a32df1cfa3982bd1c759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:ce:79:34:98:41:a4:d3:7b:a5:e7:29:f3:
                    a9:86:b5:44:fe:f9:34:fb:9f:b4:66:ba:95:d4:17:
                    69:9b:80:82:0d:5f:32:b4:2a:e8:4c:d1:78:b2:d3:
                    ea:ec:d4:a6:df:0a:1c:ff:82:3f:25:92:46:c0:af:
                    ea:d9:cc:fe:65:47:fb:b8:5d:16:23:9a:cb:4b:de:
                    c3:57:60:41:81:f3:ac:a0:0b:8f:5f:6e:6d:52:bc:
                    95:ac:3b:60:18:22:08:51:0a:02:af:c4:3d:ec:86:
                    43:00:af:99:79:8e:d2:2c:f5:17:33:00:e1:4c:48:
                    e0:4b:39:82:27:f1:f0:18:be:5b:b3:65:e7:22:fe:
                    2d:cd:c2:3d:72:d9:50:a5:92:87:cf:a3:60:78:b4:
                    8e:ef:9d:75:55:1c:8b:5f:52:3b:61:17:9b:c4:4b:
                    d6:1d:09:fc:80:c5:e2:bc:fd:6d:e5:38:7c:87:b6:
                    eb:cb:c6:f0:f1:d3:1e:c5:13:df:85:93:70:f0:95:
                    0c:2b:d2:9c:b2:da:d3:2c:41:e6:a5:11:b2:0b:b0:
                    a1:08:05:90:29:f0:d8:b8:fa:5e:aa:c7:dc:23:6d:
                    ec:a1:04:64:df:5c:db:79:bf:49:02:24:ee:97:4a:
                    8b:73:b5:fe:84:dc:14:0c:ff:7a:15:f7:95:4c:3e:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:EE:3C:CC:98:78:85:E4:11:A3:2D:F1:CF:A3:98:2B:D1:C7:59
            X509v3 Authority Key Identifier:
                keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:8e:98:59:6f:6c:4d:c2:20:d3:52:dc:6e:ad:4c:8b:a1:
         79:e0:cf:de:e5:74:15:cb:6c:7d:5b:2f:ee:f1:60:80:a6:a6:
         ac:a8:85:2b:8e:7e:65:f6:20:46:03:87:65:c1:5d:9e:3c:84:
         9c:a5:86:f8:cf:f7:6c:37:c0:c2:fa:be:90:34:96:6d:76:29:
         d5:3d:45:f2:19:b7:5f:3f:17:3f:1f:c6:35:f0:c0:a9:0c:f4:
         2e:a4:90:7c:20:cd:3c:63:f1:67:93:ad:ea:45:71:ed:82:8b:
         55:d9:47:ff:aa:9f:59:80:49:32:4b:87:18:a9:e8:59:e3:b7:
         94:c0:83:f1:75:19:bc:2b:8b:78:97:f5:0e:0b:ea:f4:f5:42:
         23:02:e7:2a:ff:2f:32:64:3d:48:93:29:07:3c:fc:9d:55:14:
         13:31:fe:1b:6b:ba:dc:25:79:5f:a3:0a:20:b9:a0:cf:0c:05:
         ec:70:8c:28:9b:e0:55:13:b3:a1:89:9e:9d:d7:8a:a9:a4:5e:
         bc:7a:40:21:1a:02:21:80:cd:3d:df:68:fa:f7:8a:21:ac:fb:
         84:0e:2e:c8:1b:30:c4:f2:08:5d:bc:7a:4e:b4:56:13:72:da:
         61:fb:18:69:ca:7e:da:1f:b4:0d:14:76:6c:a3:4c:d8:43:84:
         c9:21:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:30 2024 by rpki-client on console-ams.rpki-client.org