Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File:                     4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier:          CjXclpSvbPL0zIOir6A62mPg0I1r8XFbi5KlLJk7yn8=
Subject key identifier:   04:02:92:0D:BD:CB:42:34:BC:B0:E6:1F:61:8B:2D:52:86:34:36:E2
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer:       /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial:       019358773ED66A4A8B56787342DFDE3EE74C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number:          0437
Signing time:             Sat 23 Nov 2024 10:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:29 +0000
Files and hashes:         1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: IP+d0n8qe4LBGSYmn7HHo4tLsha/bLbKix4na8HSXis=)
                          2: 7wgZniSfbaf8ORoZQpX3HIo4n_w.roa (hash: jgqVyJavCyt4WrnxMTnoCPDvTKF3MnH3ATcmUzns+Sw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:3e:d6:6a:4a:8b:56:78:73:42:df:de:3e:e7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
        Validity
            Not Before: Nov 23 10:00:29 2024 GMT
            Not After : Nov 24 10:00:29 2024 GMT
        Subject: CN=0402920dbdcb4234bcb0e61f618b2d52863436e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:83:e0:38:d8:9f:2f:d6:9a:8f:ce:52:23:
                    03:a9:81:c9:8f:d6:a0:69:87:bb:42:c3:b8:85:01:
                    02:cb:95:8b:c1:e3:61:a5:76:3f:43:87:41:2b:c6:
                    d0:b2:ba:29:7e:ac:90:a0:83:65:84:ba:c1:31:93:
                    f3:65:9b:1c:55:c8:e2:3b:9a:cf:8f:8e:19:44:fa:
                    fd:df:b2:90:cd:e2:ea:e5:4c:fc:26:87:87:44:35:
                    c5:4c:16:01:e2:bb:31:d1:6c:9a:27:04:19:1f:c1:
                    a0:c6:6b:cd:19:c3:7e:9a:35:ea:00:89:c9:6a:1e:
                    bc:cb:98:ef:0f:cc:a4:bc:4e:1b:77:51:c6:98:ca:
                    d5:3d:68:04:ab:ae:46:be:6b:37:0a:80:0d:7d:4b:
                    0c:d9:f4:50:13:a9:05:db:70:e7:86:2a:61:ad:69:
                    d4:42:8d:60:69:12:24:73:c5:64:8f:be:8c:43:d3:
                    91:55:97:60:18:dd:d7:b0:1d:1d:b7:1d:18:19:91:
                    62:2a:ab:6c:ec:09:92:54:cb:5e:34:8c:21:3d:28:
                    82:a3:6c:1f:fe:58:9d:f3:8c:7d:b0:58:ce:22:9b:
                    87:82:94:4d:f0:75:c1:a4:80:37:96:f7:4b:e4:c8:
                    df:5b:94:73:6d:f3:9b:4a:0c:5c:24:8a:04:5e:4b:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:92:0D:BD:CB:42:34:BC:B0:E6:1F:61:8B:2D:52:86:34:36:E2
            X509v3 Authority Key Identifier:
                keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:40:93:11:fb:0f:42:9b:93:55:75:cc:7c:7d:03:86:a8:
         52:c3:c9:42:c9:71:f8:8e:ca:50:51:89:5e:38:29:5d:c4:87:
         db:f0:2b:c0:6e:a9:4b:8f:20:cb:3f:9f:9a:a6:0a:75:84:c9:
         2b:77:6a:75:d8:a9:d8:65:55:79:21:d1:4a:ec:03:b8:4b:d1:
         f4:df:06:05:c6:89:8c:18:21:59:22:d7:54:ca:4b:f1:c3:66:
         1b:3f:7d:b7:e9:c0:d3:32:3a:b2:44:bc:aa:bf:17:c8:95:f9:
         78:d4:f6:97:6d:40:25:69:48:62:4b:a8:28:a3:eb:b6:50:6d:
         a3:73:e0:a7:8a:f6:28:89:2f:00:ab:c7:eb:81:71:67:00:d5:
         a2:c5:72:33:52:c2:f3:ef:9e:eb:3e:9b:8e:78:43:f3:11:c2:
         19:f7:d0:ea:41:57:c1:e2:e8:94:07:5d:25:f5:ef:59:70:fe:
         e3:48:0a:be:7a:7b:5a:4b:c6:1b:b9:7d:8e:bf:ed:d9:e5:4e:
         be:f0:1a:81:93:d8:98:a1:6f:2c:8d:43:70:95:f3:82:97:9e:
         5e:66:34:9e:af:5f:63:b7:79:d0:d8:39:b3:e4:73:bc:17:a2:
         df:a4:a0:3a:9e:61:2c:d2:a2:18:62:35:ed:c3:2f:a8:e7:ba:
         61:1a:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:55 2024 by rpki-client on console-ams.rpki-client.org