Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File:                     0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier:          Cri0syzpURLGLoH0oKvoYdM0dZQb1rQ5J+QZ5a5S+LM=
Subject key identifier:   0E:D3:DE:F7:3F:0F:A8:16:2F:4D:B9:DC:86:6A:BD:A1:83:E8:50:17
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer:       /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial:       0193327C287827460A6E1C9938B12EC4C18C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number:          135E
Signing time:             Sat 16 Nov 2024 01:00:17 +0000
Manifest this update:     Sat 16 Nov 2024 01:00:17 +0000
Manifest next update:     Sun 17 Nov 2024 01:00:17 +0000
Files and hashes:         1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: Twh/EvIp4n7hojRcqSTObJa5u6B4yKR64mvqA2+jqGk=)
                          2: DJdOcFHDcDoZRiuDm5v8P8YdPe0.roa (hash: sRqhWg9gO8tC2x86ayT3L7E/pqRT6KjNdDe2d6gaWno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:32:7c:28:78:27:46:0a:6e:1c:99:38:b1:2e:c4:c1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
        Validity
            Not Before: Nov 16 01:00:17 2024 GMT
            Not After : Nov 17 01:00:17 2024 GMT
        Subject: CN=0ed3def73f0fa8162f4db9dc866abda183e85017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:75:09:ca:81:ea:c5:47:7d:6d:f0:50:59:
                    29:7e:72:36:cc:60:39:36:60:0b:61:50:0e:fe:2d:
                    b7:04:c8:6d:aa:51:1a:ad:d4:9e:05:39:21:69:46:
                    db:ec:06:19:5d:08:73:f7:f8:cf:49:e7:8c:ac:62:
                    2e:8e:e2:c3:31:44:b1:9a:73:bb:32:b2:f1:78:0f:
                    71:70:af:cc:07:38:eb:12:65:8b:65:5f:95:2f:4c:
                    95:01:f7:67:0d:30:41:92:c7:dd:3d:f6:ba:87:51:
                    43:c0:31:e7:63:87:aa:74:99:58:c4:8f:e2:88:ea:
                    c9:2a:28:b2:f3:de:5b:29:90:55:b3:79:60:a4:d5:
                    a9:2d:35:59:7b:a4:84:2b:c2:f1:af:14:39:e0:d9:
                    04:c8:e8:20:da:9c:72:88:b1:a9:53:9e:14:1c:ee:
                    8f:d6:2f:89:bc:55:32:ff:52:75:34:ad:45:33:11:
                    cb:4e:16:47:de:47:c1:b1:23:37:5d:10:db:c2:93:
                    01:b7:ec:89:81:bc:c9:af:4a:0f:ee:83:d5:2f:f2:
                    7f:9c:97:ff:03:93:6f:5e:1f:3d:bd:b9:82:92:88:
                    cf:7f:22:e0:4b:3f:29:dc:c4:f3:52:18:c7:a9:b6:
                    74:06:4b:5a:10:3e:e0:80:66:93:c8:e9:2b:b7:09:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:DE:F7:3F:0F:A8:16:2F:4D:B9:DC:86:6A:BD:A1:83:E8:50:17
            X509v3 Authority Key Identifier:
                keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:3d:5e:21:76:92:45:f1:80:5d:88:35:47:45:81:86:fe:
         49:f9:f3:69:76:fe:ae:dd:a5:24:dc:cb:8a:c5:b8:81:d7:92:
         c8:b8:16:41:eb:e1:2f:1e:e3:49:a4:c0:3b:df:a6:b9:64:ac:
         98:45:09:09:74:b6:9a:ee:2f:4f:b7:75:a1:f4:71:f2:65:bd:
         03:1d:b9:30:0d:a9:fe:6e:fd:f6:00:51:41:7d:33:86:11:0e:
         2b:26:2c:2a:fb:dc:75:4d:f6:e4:fa:aa:e9:c7:d6:cd:f1:4e:
         a8:b6:cd:3d:c6:e4:bc:47:27:a5:dc:5f:57:44:fb:17:81:d3:
         c1:eb:71:72:c4:cf:e3:f2:39:38:65:18:24:ca:a7:bc:da:95:
         c5:9e:c6:38:79:7f:10:6a:33:21:48:f3:13:5a:7f:d5:be:c9:
         1b:56:89:13:fb:73:42:a6:99:b7:94:f8:89:fc:15:c1:29:56:
         d9:fa:0f:7d:fa:55:63:c4:f5:c6:8c:fb:e3:34:a3:e8:de:81:
         f1:ab:56:43:50:93:c1:b6:a0:7f:ec:8b:89:ba:01:3d:77:5c:
         88:52:cf:cc:b9:fc:b9:53:35:36:c1:1a:3d:a5:07:90:ce:ee:
         37:5b:eb:a9:c4:6f:9a:e3:fa:19:18:57:7f:d4:7e:d4:cd:b6:
         c6:ef:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 03:07:22 2024 by rpki-client on console-fra.rpki-client.org