Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
File:                     R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft (raw, json)
Hash identifier:          JXaObA6uvmEdiEmfdELyXA7aZ5F5lW/yNgog87Cocvc=
Subject key identifier:   9A:AD:1F:49:B1:2B:74:8A:0E:4E:E2:6A:EF:D7:6A:3B:F5:41:76:C4
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Certificate issuer:       /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial:       019356F6EA59209655B9486A14943F78D3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 03:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:42 +0000
Files and hashes:         1: R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl (hash: qxaVm+rXn4pCFJ4nMEbnLCiPysWdp69xBsJk7KW6HO4=)
                          2: w70-irwlmtkwUlByTVe5liAbK3U.roa (hash: fR40o96A0orLFs55MffgefSijGg0MpJwsaZjzpvSIl4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ea:59:20:96:55:b9:48:6a:14:94:3f:78:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
        Validity
            Not Before: Nov 23 03:00:42 2024 GMT
            Not After : Nov 24 03:00:42 2024 GMT
        Subject: CN=9aad1f49b12b748a0e4ee26aefd76a3bf54176c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:f8:74:1d:79:55:4d:6b:8f:25:80:3b:4e:
                    8c:d5:76:e3:ba:71:03:e9:48:77:ab:f3:30:b7:da:
                    4a:02:73:06:70:fc:9b:87:e4:e1:85:21:c8:71:8d:
                    36:9f:f6:5e:03:57:7b:0b:fc:f3:1a:c3:f8:73:3f:
                    04:78:8b:9e:23:c6:ea:fb:7c:14:cf:ce:80:7b:27:
                    0b:d2:74:6b:01:80:6c:6c:37:36:5d:aa:d2:6c:12:
                    33:28:a7:b2:fb:c6:02:ae:49:f7:c9:16:b6:5a:ea:
                    5f:64:9a:10:7e:16:8d:dc:25:93:b9:7e:bf:1a:87:
                    87:7f:67:07:a3:ef:60:ae:a9:9f:c6:35:9f:56:54:
                    af:40:12:ac:61:b0:8c:69:fc:93:51:c5:78:07:38:
                    78:fa:8b:0c:bf:a9:3c:d5:37:d7:be:50:ae:b7:54:
                    aa:48:ef:fc:5b:2b:f7:15:12:ba:f8:63:be:ec:87:
                    1c:62:da:7b:40:2f:a0:8e:97:c1:83:0e:b8:45:86:
                    e8:13:a0:3e:36:bb:01:9c:b7:fe:15:d2:b0:bf:26:
                    8c:07:2c:db:48:df:d8:aa:19:d9:ef:53:3d:1e:1f:
                    63:1a:bd:5f:15:c1:4e:ad:a5:c7:9d:31:f7:f7:9f:
                    08:2e:df:37:63:22:67:2a:e3:d1:81:7e:78:50:da:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:1F:49:B1:2B:74:8A:0E:4E:E2:6A:EF:D7:6A:3B:F5:41:76:C4
            X509v3 Authority Key Identifier:
                keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:11:91:23:ad:71:0c:db:c7:f6:23:30:a4:4a:80:6c:23:b6:
         95:56:7a:ab:f1:e2:bc:9c:75:e3:42:1e:32:f3:fa:22:52:9c:
         1b:4d:3d:de:ce:56:fd:db:6c:a0:b3:80:6d:01:13:09:3c:2e:
         d0:b9:a0:3c:7c:67:1f:c1:a0:b2:f6:38:22:f3:26:92:a5:65:
         e8:c6:03:65:f0:86:ea:e4:6b:18:d8:7c:10:84:f6:1b:19:71:
         27:50:dd:ac:d8:57:22:61:03:fe:71:40:47:56:86:7f:99:d1:
         a2:58:2b:c2:ec:92:f9:c5:20:b9:fd:50:25:a3:c9:2f:4e:b5:
         fa:49:80:ab:c9:31:85:8f:d2:c9:1d:1e:b3:10:34:9d:e9:ff:
         a0:ce:34:7d:c4:04:0a:02:53:dd:76:38:0e:c0:f8:19:ad:8d:
         6e:ae:ee:48:d8:08:f4:8e:8b:79:e1:79:d7:07:1a:d8:31:c2:
         06:2d:c7:0b:8b:81:a3:2f:6c:0a:71:a0:7c:30:ad:9f:aa:55:
         f3:19:12:6d:4b:7a:75:ae:f0:f7:9a:69:21:69:37:76:0c:1a:
         22:c4:fa:2d:3a:d4:c0:c0:6f:ab:39:39:50:b7:3e:85:b9:6b:
         51:ef:c2:6b:cb:f0:e7:a9:16:a3:de:df:9b:16:82:d8:ae:ff:
         0e:b8:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:13 2024 by rpki-client on console-ams.rpki-client.org