Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File:                     4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier:          EdIOHqu31j9utstJ3ljAUbMBPAB4Kkgd8h5FACCF4wk=
Subject key identifier:   92:F4:FA:97:B5:6C:46:B2:64:94:12:B0:06:E2:3D:74:6F:94:B7:A8
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer:       /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial:       0193549B59482F30473E1F8B91D77FCEDADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number:          0FF5
Signing time:             Fri 22 Nov 2024 16:01:27 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:27 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:27 +0000
Files and hashes:         1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: U+qscRr9lLo30MWGXJORz3JYI/nO8kZVPqsn6Viry7E=)
                          2: IW-TGfri_dG_RNekiIHn5eFtDGc.roa (hash: fVaLb48sN2XlE68xvOgdEJuU6nOCuSKE8OIkXluQaXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:59:48:2f:30:47:3e:1f:8b:91:d7:7f:ce:da:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
        Validity
            Not Before: Nov 22 16:01:27 2024 GMT
            Not After : Nov 23 16:01:27 2024 GMT
        Subject: CN=92f4fa97b56c46b2649412b006e23d746f94b7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:d9:0b:ce:c1:b7:99:7e:2b:3c:a7:23:19:
                    1b:aa:1c:fa:78:08:c1:dc:ff:d5:5b:2b:23:65:ee:
                    b8:7c:a9:81:54:84:be:21:31:5b:1d:1b:e3:9e:4e:
                    07:51:44:cc:78:5a:51:ad:5b:f4:cc:b3:0b:3b:8d:
                    9c:d6:ef:d4:93:6c:92:39:f3:b9:36:a5:e3:f3:3d:
                    3c:c8:3b:08:32:02:96:01:30:98:91:72:66:66:f8:
                    82:7b:67:ad:7f:df:65:67:c1:d0:ce:e4:83:50:52:
                    54:54:d4:07:3f:0c:e3:40:b3:c6:5d:9b:50:7c:62:
                    f9:f4:d4:58:b8:de:ba:19:a6:47:fc:09:e7:5d:14:
                    3e:56:55:2e:09:9c:47:fa:40:a5:cc:3c:fd:12:ce:
                    9f:0f:f3:62:7e:32:e3:1f:7e:ee:6d:ed:e7:d8:6c:
                    61:d6:67:f1:cc:cc:32:ef:b7:86:0f:5d:41:4d:32:
                    40:0e:fa:97:43:81:7d:84:56:40:2d:ee:13:0a:a8:
                    85:50:af:53:c0:e1:49:28:85:6e:23:5a:d5:1b:f7:
                    16:77:b4:ed:0a:be:39:fe:35:c5:f1:72:eb:b3:98:
                    c2:54:62:e1:fc:d2:8a:26:3e:60:7b:b6:eb:d1:72:
                    9c:f4:e1:c3:be:60:ce:3e:3c:92:d5:17:e4:70:db:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F4:FA:97:B5:6C:46:B2:64:94:12:B0:06:E2:3D:74:6F:94:B7:A8
            X509v3 Authority Key Identifier:
                keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:9b:21:99:69:3f:23:70:08:90:5f:ec:ea:3b:b7:e9:62:
         23:e6:a5:47:f2:e6:86:b1:4c:7f:10:83:33:69:e3:d6:5e:4b:
         f5:7b:8a:fd:41:23:67:5f:7a:3f:35:0a:65:29:0c:75:bf:44:
         42:f8:35:ca:fe:43:30:91:db:60:6d:b9:85:5d:b0:e3:97:fa:
         00:29:7c:70:00:92:f4:eb:7f:c8:ac:12:91:94:12:7a:a5:3a:
         50:b4:be:41:18:f0:92:49:4d:16:f7:da:ab:f9:c5:ae:a6:83:
         03:d2:8a:85:db:7a:e8:57:ed:aa:c4:6c:a3:28:4e:5f:cd:4d:
         7e:29:ed:4a:15:80:4a:6e:a3:20:ec:66:56:df:3f:8a:73:88:
         bf:32:c5:53:c0:2e:60:8f:5f:b7:c5:00:aa:dc:04:08:8d:83:
         81:3c:f0:e3:2b:ea:16:a2:e3:f0:22:35:c4:2f:10:e8:1e:5b:
         d0:c2:7c:fe:6f:af:dc:fe:7b:a4:85:f4:af:4b:bf:68:e4:23:
         56:ca:3f:bc:40:b1:32:4e:30:59:d9:20:c7:10:a0:84:e6:10:
         4b:35:eb:c2:7b:2c:ab:c8:a8:bb:9e:12:e9:23:c8:cd:41:99:
         17:b6:bf:c3:52:99:c0:16:36:89:79:a0:b1:fd:de:fe:bc:c5:
         48:e4:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:42 2024 by rpki-client on console-fra.rpki-client.org