Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
File:                     c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft (raw, json)
Hash identifier:          pAaRW635/TXnBkwJjjedEM6K+JvZPjks7QdSAxa8QsY=
Subject key identifier:   BE:9D:DA:03:E3:A3:D8:E8:B9:31:43:E0:8D:E5:06:01:D4:50:82:28
Authority key identifier: 73:82:12:3E:8E:64:50:4A:BB:A8:10:39:B6:C7:41:8F:6A:AB:56:5D
Certificate issuer:       /CN=7382123e8e64504abba81039b6c7418f6aab565d
Certificate serial:       0193576489E8CD9C17F4340B4E68A07527C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
Manifest number:          082B
Signing time:             Sat 23 Nov 2024 05:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:26 +0000
Files and hashes:         1: c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl (hash: 28ts1YAajvXnEn5L36rEgDU43X+eKqtuztFC6MKMrjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:89:e8:cd:9c:17:f4:34:0b:4e:68:a0:75:27:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7382123e8e64504abba81039b6c7418f6aab565d
        Validity
            Not Before: Nov 23 05:00:26 2024 GMT
            Not After : Nov 24 05:00:26 2024 GMT
        Subject: CN=be9dda03e3a3d8e8b93143e08de50601d4508228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:63:d1:da:d7:87:aa:66:f0:81:68:7e:03:
                    e5:bb:ae:c8:4c:99:cd:49:a8:28:ea:00:8f:cf:71:
                    26:48:9f:bb:37:1d:2e:77:09:25:f6:14:1f:58:6d:
                    1e:ca:20:ec:79:01:4a:39:95:86:90:b1:2a:75:00:
                    5d:05:a9:57:f6:09:77:01:28:5e:17:d3:02:18:9a:
                    63:76:45:0d:06:ca:dd:d9:d4:f4:e3:9c:b0:6b:ab:
                    4b:04:39:1f:87:3b:9e:35:66:a9:88:bc:01:53:b7:
                    3f:f5:1b:8c:88:3a:0d:53:48:ba:b5:38:1e:62:f4:
                    5c:24:14:67:78:14:56:c5:9b:b6:e6:60:31:42:aa:
                    5e:ce:39:47:08:8f:c4:1d:95:86:92:b5:0b:9d:4a:
                    50:d6:a8:ca:13:b7:79:56:16:9c:1c:db:a0:7a:e7:
                    1e:cf:7d:36:32:ad:47:91:45:63:6e:a5:ff:c3:eb:
                    11:22:73:6d:52:89:27:70:55:13:26:dd:2c:e1:ac:
                    bf:a8:4d:48:7f:34:da:c4:4e:41:0f:46:32:ef:77:
                    d4:b8:da:fb:75:a8:59:87:63:03:c7:54:ca:ad:4f:
                    a9:6b:bc:e8:48:54:90:3c:54:cf:b5:05:1d:b6:8a:
                    3c:0a:84:7a:ae:fb:00:ac:51:69:cb:72:e3:f0:74:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9D:DA:03:E3:A3:D8:E8:B9:31:43:E0:8D:E5:06:01:D4:50:82:28
            X509v3 Authority Key Identifier:
                keyid:73:82:12:3E:8E:64:50:4A:BB:A8:10:39:B6:C7:41:8F:6A:AB:56:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:29:63:e1:7c:49:f2:dc:bc:a6:0e:20:0d:e9:b2:df:06:6b:
         00:20:25:26:8e:5f:1c:bb:e7:67:85:42:8b:ee:1d:5c:d8:55:
         43:8b:c8:ac:3a:c4:42:b8:2d:53:21:18:d2:e4:f4:3a:69:88:
         eb:99:83:c4:d2:25:e4:cb:bc:b7:13:95:ef:e5:d0:43:66:44:
         e1:79:3c:c3:65:33:28:a7:3a:c1:07:01:e4:f2:90:2d:8f:24:
         7c:17:58:67:34:d5:8d:6a:d8:5f:fc:f2:64:94:70:51:2e:82:
         54:e8:59:3a:0c:3e:9f:0a:2f:0e:c8:f5:5e:6a:29:cb:9d:44:
         78:61:43:c9:44:82:61:5c:cf:61:55:01:97:0f:93:3d:9c:d0:
         01:cf:9e:0e:f2:e0:5c:44:f5:ed:b7:5e:18:cc:98:c3:b9:c4:
         19:23:2b:54:90:31:11:bb:6a:e4:ee:8c:3a:88:99:ab:b9:f4:
         e7:14:d4:d0:d0:d4:54:38:b6:7a:28:bb:f2:8c:a5:fb:b9:09:
         ca:5f:0b:e4:4d:ac:e9:13:5c:dc:a4:0c:9a:cd:8a:49:f2:3b:
         69:70:07:31:71:2a:c8:c5:91:69:c3:8d:95:91:9e:96:14:c8:
         99:15:d6:da:4b:cd:13:43:fe:33:22:ca:a7:40:45:27:30:75:
         88:c7:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:42 2024 by rpki-client on console-ams.rpki-client.org