Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          XBaKzNN/hh+afWP6gSf51MwIBK8wEdIDTJeGL3yf4gQ=
Subject key identifier:   4C:85:10:E5:FC:5B:BC:BD:9D:D2:CB:AE:3E:94:33:F7:89:6B:2D:38
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       0193549AE61F2A36835A0FF04E57AA26186E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:57 +0000
Files and hashes:         1: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: 8ryA982jnMN8s8+S+djYe+uut90bMd1pi7qQtDC28ag=)
                          2: b0t0WtgMUlfKTwDF7CtC75pawmI.roa (hash: BQP9rfEkM3KqvBpyKOFGaw+hPDT/hI+iUV1NEB/D8eo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:e6:1f:2a:36:83:5a:0f:f0:4e:57:aa:26:18:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: Nov 22 16:00:57 2024 GMT
            Not After : Nov 23 16:00:57 2024 GMT
        Subject: CN=4c8510e5fc5bbcbd9dd2cbae3e9433f7896b2d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:a7:f3:83:82:ad:a4:bf:32:6f:4b:e4:0b:
                    2f:23:6b:cd:34:e6:08:01:50:37:2e:d1:c9:75:47:
                    84:0d:d2:be:3a:62:ca:45:43:68:43:a1:52:d1:2f:
                    83:4f:7a:0b:0a:bb:d4:a6:36:72:68:ed:19:6b:7e:
                    72:13:4c:aa:c2:27:4d:e4:67:c2:99:2f:5a:44:fd:
                    e6:c1:76:12:06:3c:0d:8c:f5:19:f0:58:11:36:51:
                    a3:ee:6c:6f:e8:17:4c:1d:27:1d:1c:5c:cb:18:1e:
                    86:3e:2a:dd:21:ff:b0:b3:82:85:45:7c:0a:a9:01:
                    71:e4:75:87:3d:1f:70:19:70:cd:23:26:b9:14:84:
                    79:14:bd:47:de:dc:c4:46:b9:0c:bf:2a:9c:33:73:
                    b7:cf:53:a9:f0:2a:d0:d6:a5:9e:71:a2:0e:37:a2:
                    fc:68:ab:2d:32:e5:cb:ee:32:35:d9:35:0a:83:f0:
                    9a:de:25:df:93:86:3c:99:8a:39:c4:5e:34:41:e9:
                    90:d8:4f:b7:5c:73:18:04:f8:df:2f:d5:be:ee:93:
                    6c:96:f9:a9:b7:48:8b:da:35:0d:28:65:f3:81:8e:
                    1b:ad:e4:95:59:e8:4d:4f:74:77:95:3d:d9:03:75:
                    81:82:24:4c:fc:76:ab:15:be:2b:d4:ce:4f:87:c2:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:10:E5:FC:5B:BC:BD:9D:D2:CB:AE:3E:94:33:F7:89:6B:2D:38
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:8f:69:99:21:b0:23:f2:09:ce:ad:5d:84:7b:44:de:02:a2:
         b2:0f:71:4e:81:33:3b:4a:c1:e5:7f:07:c5:5f:0b:92:a8:14:
         27:6c:ac:d2:6a:82:a0:42:95:72:79:01:f6:ac:08:72:af:7d:
         46:54:51:87:26:5a:06:17:88:92:22:d4:09:f7:53:a2:33:bb:
         99:9f:e6:ab:56:0b:24:7d:d1:83:ef:00:84:23:ac:d4:09:0e:
         fb:c0:00:a7:4c:b3:33:58:42:01:4d:1c:2c:86:63:f4:d8:0d:
         32:aa:89:f7:2a:cf:dc:c0:22:db:4b:d3:73:11:a1:3d:c3:a1:
         dc:e4:81:ca:6b:8f:ad:bc:07:40:81:5a:06:c5:73:a5:54:7d:
         cb:e8:48:15:5e:e7:b3:c5:41:ef:20:1b:ee:9b:49:10:a2:7c:
         82:63:a9:a6:d8:54:51:6a:3b:90:88:bb:de:c2:1d:30:dd:27:
         44:a6:b5:75:0e:db:d6:ab:ec:a6:c6:de:65:39:f1:70:f8:b1:
         22:93:7a:fb:12:ad:04:a5:31:c5:e4:34:cd:d9:0e:6c:b2:1e:
         a8:24:7c:d0:8c:9e:4d:12:12:60:9f:d3:29:ea:a6:15:d3:5a:
         29:f9:19:2d:23:0b:55:7a:0b:db:d7:d2:38:b3:bd:99:3d:35:
         1e:f6:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:14 2024 by rpki-client on console-ams.rpki-client.org