Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          79W1gj5RfXYpvZRNU5YYLcfAkXakLlSRZlq0ZjqZL/g=
Subject key identifier:   71:FE:ED:A9:94:C8:65:E7:75:9E:71:EB:CD:7B:65:26:13:7D:86:61
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       019357D2C37F4928447D23442C1ED6110B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:50 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: oml6CxLWFjyWqp/iCz3w50ko5TB4sDmAWvBWecAhX7k=)
                          2: HYIm1daCUpk7vhu5P57SMDIdm24.roa (hash: 20SsFTDAe3meatPDuag2i8G27/zvHBb7ZUqo/lzAWi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:c3:7f:49:28:44:7d:23:44:2c:1e:d6:11:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Nov 23 07:00:50 2024 GMT
            Not After : Nov 24 07:00:50 2024 GMT
        Subject: CN=71feeda994c865e7759e71ebcd7b6526137d8661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:d8:bc:3a:2a:a6:d0:53:d0:f3:18:62:44:
                    7e:cf:f4:74:4c:f8:00:65:b1:a7:61:16:f7:74:79:
                    44:af:e5:65:05:db:68:a0:72:56:d0:f3:7c:19:45:
                    bf:5e:86:e5:6e:97:f9:07:89:83:0b:8f:3c:f4:3d:
                    1a:a4:8e:f2:2f:ea:e2:7b:7c:1d:44:34:c0:d0:5a:
                    1a:fe:6c:99:5c:7b:d1:5c:74:c2:37:55:3b:36:8a:
                    e1:5b:77:49:09:5b:54:7a:34:93:a0:e0:aa:0d:4e:
                    f8:48:58:a0:6d:4c:78:3b:b5:20:61:14:5d:61:30:
                    8b:40:47:9d:ee:f5:0b:c9:bd:3d:11:3c:18:80:d9:
                    a7:5e:3d:95:b0:36:82:f7:54:6e:2a:b4:4a:a1:57:
                    16:68:27:28:c2:c4:6f:d7:21:51:f9:98:c8:c1:1d:
                    d8:f3:0b:4a:be:d0:f7:b4:b1:4b:43:db:1f:b1:db:
                    e4:8f:e6:4a:dd:45:4a:9b:cf:11:c8:9a:2e:ca:29:
                    ce:cc:1d:38:2a:7f:c4:31:93:e9:37:58:dd:93:fd:
                    e3:1f:fc:b5:79:09:61:20:9b:50:84:4d:c3:35:55:
                    0a:e0:b3:05:0d:b1:14:61:71:41:71:f5:5b:28:5d:
                    1e:b2:cd:65:2f:72:d9:81:96:29:e3:61:49:81:49:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:ED:A9:94:C8:65:E7:75:9E:71:EB:CD:7B:65:26:13:7D:86:61
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:4b:69:f9:22:fc:f7:ae:4e:11:d0:b4:3b:c9:67:ec:06:
         70:2a:4b:ff:ca:c6:0e:87:77:32:6f:5a:a0:b7:9a:59:8c:12:
         d5:04:f5:f9:a1:a9:81:75:15:96:5e:40:d4:93:b7:9f:93:c1:
         69:02:db:b8:df:39:56:ab:22:81:5d:27:be:9b:02:0b:cd:cc:
         c6:a7:70:e4:f6:b2:79:c7:f3:08:fb:dd:37:3c:10:fb:da:c4:
         18:31:71:9d:f2:11:c9:a7:14:d7:9a:a2:d5:1a:35:0f:7a:eb:
         19:4f:30:bf:da:92:ba:89:b7:5f:41:2f:16:d4:c1:d6:4f:be:
         78:c8:70:f8:ba:c3:c6:6d:ed:5b:d1:f3:0d:db:53:11:3a:17:
         ee:f6:c6:f2:af:38:a7:7d:92:53:a7:e7:86:3d:59:98:99:1e:
         3c:9f:eb:1a:df:b8:ea:8d:7e:0a:a8:a5:a8:74:9f:98:e8:31:
         ab:de:1c:69:75:01:94:73:b1:2c:3a:c1:7b:e2:1a:15:59:3b:
         82:c3:40:16:ee:5d:0f:b5:69:63:33:a3:1d:87:83:01:2b:d5:
         41:17:01:5e:0d:f1:35:f2:ec:68:ae:1f:a7:e4:e5:d3:64:d1:
         34:0b:90:07:88:77:c2:b3:16:7d:10:0a:43:26:e8:9d:c0:af:
         0d:9c:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:16 2024 by rpki-client on console-fra.rpki-client.org