Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File:                     4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier:          LTX+HFbfggqaLF31f3+I6LhV/KF8BLL3gd22CExUhbA=
Subject key identifier:   78:02:F1:BE:C1:B7:15:3E:DB:AA:FB:4F:E2:86:A9:4D:03:38:05:75
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer:       /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial:       019356894C09BC70C8E45237B22BAA82DF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number:          0647
Signing time:             Sat 23 Nov 2024 01:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:58 +0000
Files and hashes:         1: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: bwe/V8g+0QDLgmxoRG1CTrNMYEf/7T/2oIH0hmz0RJw=)
                          2: rr6MOgfgm6jxCSsqi6vyOdAkgNA.roa (hash: jkLxqL00wzO8s2W1T28K9fKGPBLkNAuo09m7+y1HvRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:4c:09:bc:70:c8:e4:52:37:b2:2b:aa:82:df:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
        Validity
            Not Before: Nov 23 01:00:58 2024 GMT
            Not After : Nov 24 01:00:58 2024 GMT
        Subject: CN=7802f1bec1b7153edbaafb4fe286a94d03380575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:e8:fb:df:a5:83:f9:f1:c1:c7:d4:d2:23:
                    01:c2:7b:9e:f5:74:79:33:95:aa:f5:70:e1:0e:55:
                    cb:c8:82:a0:ac:9a:a8:95:37:27:e6:10:68:a0:54:
                    f9:9b:f0:cf:69:e1:df:59:7f:c5:76:22:9a:a6:8e:
                    78:ac:fe:ba:6b:36:f7:5c:89:fe:7d:4b:ab:df:98:
                    b8:ee:a3:ce:99:8b:f9:cf:86:66:a2:cf:4a:ef:b6:
                    4d:7f:bb:91:60:1e:db:78:2a:e4:cf:7b:cb:f0:df:
                    d3:60:36:49:79:d2:52:64:d9:46:13:b9:6f:4a:ec:
                    4e:d4:9c:f7:0b:78:3b:18:19:38:3d:34:ce:0c:3f:
                    3e:ed:3e:f0:7b:53:67:e4:90:d7:76:0f:7f:de:03:
                    cf:5b:ab:58:2f:12:dc:71:cd:1e:c8:f5:f7:e7:43:
                    f1:31:af:fe:78:c8:f7:d1:53:7f:31:1c:7b:09:5e:
                    b1:d1:da:31:00:85:9c:24:3a:71:39:4f:bd:e4:42:
                    3e:eb:e2:69:b2:61:58:21:c4:76:66:7a:57:14:6c:
                    2f:42:d0:14:ae:65:6a:84:59:90:41:55:38:7f:9b:
                    b7:e9:fb:53:bd:5b:95:e5:ba:8f:03:0e:3f:8d:86:
                    6e:7c:0b:49:7a:3e:42:ca:f4:21:79:ea:8b:b0:01:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:F1:BE:C1:B7:15:3E:DB:AA:FB:4F:E2:86:A9:4D:03:38:05:75
            X509v3 Authority Key Identifier:
                keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c0:f5:e6:4a:34:20:35:80:3a:36:50:50:f0:de:e9:93:e3:
         9a:d9:e4:54:96:df:5a:78:fc:90:d2:7b:4b:e6:c0:a3:b5:c5:
         08:17:a4:67:50:bf:47:fe:58:05:14:47:67:68:72:94:2a:b9:
         75:e0:ff:6b:36:cc:f7:4c:44:fa:2b:99:a7:f6:1e:d7:49:3f:
         c0:08:a8:0b:a8:35:05:51:45:87:39:11:12:82:04:d5:56:c3:
         02:a6:79:9a:bc:90:a8:b8:1b:5a:b3:16:7c:0c:2a:9e:c2:e7:
         3d:5d:3a:b5:8f:a7:b8:16:3c:e2:60:02:99:11:a2:e1:35:79:
         36:d8:5d:bb:76:8f:db:e1:4f:79:5a:be:f0:b4:38:b5:7c:e6:
         72:5c:19:07:86:40:ea:81:77:72:cb:0b:1c:57:b3:19:23:eb:
         78:2a:22:8d:5e:cc:6b:6d:33:1d:71:5a:cb:a9:c9:20:01:e9:
         e9:fe:6a:70:7f:78:dc:be:e4:52:31:34:9d:a5:cc:ed:67:a1:
         be:c2:23:df:4f:75:a2:52:0d:06:ed:ff:e8:ea:20:95:92:c5:
         0d:64:34:65:78:da:a8:22:89:11:33:8a:20:dd:9f:d1:31:6b:
         d7:ea:07:de:5b:bf:8a:18:4e:c5:d0:48:f0:56:b9:e9:1f:64:
         c6:08:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:55 2024 by rpki-client on console-ams.rpki-client.org