Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File:                     4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier:          1DJjJhfwDyTzkR2OifGopD7HK0ijaAnjmDOU8bNdYsM=
Subject key identifier:   0D:12:10:60:72:8F:20:81:00:53:78:0A:24:C0:7D:90:66:43:0C:93
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer:       /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial:       0193572E12A08129FFA2C7B53971B4AFD54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number:          1141
Signing time:             Sat 23 Nov 2024 04:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:57 +0000
Files and hashes:         1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: 4V0P9i/vH0L1HdJMComY8fUf+rH/kTrP4qBIwdg9FWM=)
                          2: OtmHe6wlStTf3BdewEyLhVuegNE.roa (hash: osEsDYToZ8XY4cFAOnPSIAA1CNPHAj9gRtgNnrlKWMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:12:a0:81:29:ff:a2:c7:b5:39:71:b4:af:d5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
        Validity
            Not Before: Nov 23 04:00:57 2024 GMT
            Not After : Nov 24 04:00:57 2024 GMT
        Subject: CN=0d121060728f20810053780a24c07d9066430c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:e4:59:e4:c8:50:7c:54:f1:83:a2:40:0c:
                    5e:18:f3:94:9d:79:19:8f:d2:b8:68:9c:21:57:97:
                    ec:46:16:3e:00:ae:44:bb:be:33:40:ee:da:e0:9e:
                    70:c4:83:9e:14:77:46:27:a5:76:a7:9e:8f:b6:3b:
                    30:78:69:3b:d1:1e:80:0d:f5:e3:89:64:20:c1:48:
                    4e:23:61:9f:5a:61:c2:d4:a0:e5:25:4e:81:ee:a0:
                    18:83:bf:3d:ef:c9:6e:d7:e1:b2:ad:6d:75:48:4f:
                    a4:59:78:ba:1f:06:9a:3b:22:ec:ce:c5:3d:0c:77:
                    ff:5e:29:ac:cf:7d:d3:07:d6:29:c1:df:48:fb:2b:
                    92:76:1d:a4:6f:61:34:b8:a1:c3:1c:60:fa:29:df:
                    2d:0d:2b:e4:a1:48:f3:8d:ff:ff:c8:3a:c3:e6:70:
                    24:df:ec:a3:a7:95:0d:47:1a:bf:31:3a:67:df:f2:
                    36:65:6b:9f:69:1d:16:16:34:7f:00:ef:d7:93:79:
                    25:04:6b:88:b5:b0:68:69:98:ec:b1:3f:68:32:8f:
                    66:f0:9b:b8:e5:f6:7c:b9:4a:1b:3a:53:87:92:4a:
                    31:be:52:3e:96:a6:31:4b:23:a8:23:f0:1d:41:7a:
                    9d:71:28:1f:16:4e:b8:d4:3f:8b:28:4b:60:86:13:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:12:10:60:72:8F:20:81:00:53:78:0A:24:C0:7D:90:66:43:0C:93
            X509v3 Authority Key Identifier:
                keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:40:85:56:c6:ee:35:7f:d2:98:90:06:e8:bf:c7:69:f5:ec:
         b6:cd:be:37:6b:cd:7a:fa:9b:25:30:ee:21:c4:47:4d:cf:8c:
         3c:6e:a7:f9:95:7d:8d:99:6f:b7:02:15:20:dd:e9:23:2e:e0:
         58:d7:22:d2:a2:87:3b:f1:63:2b:79:cb:64:47:97:36:8c:ca:
         b8:4f:71:d6:9e:82:42:a5:67:2c:2b:2d:e6:65:93:db:a2:eb:
         7f:18:cc:59:9e:99:fa:c7:22:f1:96:25:96:02:0e:f6:ea:bb:
         65:0a:7e:f3:58:d1:60:aa:50:b6:2e:3d:b0:d4:05:50:1e:a6:
         71:7c:58:e6:db:74:74:ef:f3:76:0b:e3:46:29:e4:49:2e:a6:
         b1:8e:92:f6:46:7d:ef:70:86:2c:72:d7:77:8f:63:98:a2:06:
         50:14:60:77:d4:52:27:b5:b8:1a:fb:55:54:46:86:42:d6:33:
         6a:53:aa:50:57:fa:e4:af:b9:06:31:ab:06:d2:04:86:4e:e7:
         4e:17:5e:85:f2:3c:f7:05:fb:8f:17:fd:3e:36:99:80:e9:7f:
         71:5e:1b:c3:2e:6f:18:11:05:67:43:ba:47:f4:e1:99:2a:89:
         70:6d:6a:9f:06:6a:d3:c6:24:06:eb:3e:34:76:6d:35:bc:3f:
         06:16:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:47 2024 by rpki-client on console-ams.rpki-client.org