Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File:                     A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier:          epsg6FH1axX1DwsFjQJRkxiTp63DDydn7tdFbXw/wl8=
Subject key identifier:   7C:50:E0:27:EA:8B:92:1E:A7:B4:F1:98:71:73:89:BF:51:D3:D2:27
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer:       /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial:       0193652064A5E083D40B43007656689A745D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number:          0AFF
Signing time:             Mon 25 Nov 2024 21:00:41 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:41 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:41 +0000
Files and hashes:         1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: FVI04c8nzwatt6bRxjrnWlygjUBSJzcRVaOy5Maifbk=)
                          2: nqGPJ3KOHuG6vTy-l1jmx1ni0Dw.roa (hash: tovGSS/dJ0UP45b0338Un3zlrMaBzhV46AkI2eD2Bjc=)
                          3: o5cStNsLTTFzaVWhI4boa6SLtX4.roa (hash: SeimYrls3m4EGtBEol0YV7g69oL6k6bgo882cSvS69U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:64:a5:e0:83:d4:0b:43:00:76:56:68:9a:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038af86795417a3584d616375209a72efee2462b
        Validity
            Not Before: Nov 25 21:00:41 2024 GMT
            Not After : Nov 26 21:00:41 2024 GMT
        Subject: CN=7c50e027ea8b921ea7b4f198717389bf51d3d227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:76:af:da:95:b8:4e:37:d9:af:32:bc:b2:
                    5c:4a:72:b5:3c:21:7d:2b:ab:48:12:f9:ff:75:97:
                    8b:40:e9:06:1d:af:d4:d1:36:97:23:48:cf:91:96:
                    f2:1a:73:12:66:b3:08:fa:a3:b6:74:d6:3b:9e:41:
                    22:12:58:e2:e7:2c:0b:77:5f:28:eb:4a:eb:32:84:
                    4e:e7:dd:01:f6:2e:9b:3b:05:0a:db:1a:5e:bf:12:
                    36:67:d7:d7:ac:0b:62:3e:1c:62:66:8f:18:ba:fe:
                    73:8b:e9:bf:1a:2a:52:56:82:e0:1e:fe:8b:ef:42:
                    8a:e7:6f:26:57:10:0b:60:27:71:0f:2b:54:e0:6c:
                    8b:04:d5:f9:23:5e:61:2c:3d:1c:92:cc:23:9d:23:
                    eb:4a:46:b3:15:3e:c9:19:7d:0a:8c:5e:e6:72:39:
                    4c:34:d5:ac:93:ad:55:91:0f:ac:8c:4e:9a:2f:f1:
                    c9:c5:8e:74:a8:cb:a4:bb:fe:6b:d8:34:58:79:6b:
                    2d:14:28:c8:5b:37:7f:71:5a:91:25:71:55:ac:d9:
                    68:7d:21:59:03:62:19:24:3c:8d:29:f6:68:e8:b0:
                    e6:36:8c:bb:40:fe:7f:10:92:56:03:23:11:50:2e:
                    eb:27:1a:45:f1:1c:72:88:9e:ea:eb:53:3d:98:0c:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:50:E0:27:EA:8B:92:1E:A7:B4:F1:98:71:73:89:BF:51:D3:D2:27
            X509v3 Authority Key Identifier:
                keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:e8:df:48:e1:d2:f2:46:35:83:b8:f6:61:73:f6:43:13:
         91:76:9e:53:28:40:a9:5b:aa:1c:e3:95:41:e8:de:f8:45:54:
         d6:c6:c1:fe:7e:cc:c7:5e:fd:2e:29:19:7b:e5:02:9b:08:23:
         73:62:6a:2f:42:fd:15:53:ff:95:36:d1:04:c2:50:2a:96:b8:
         92:8d:30:29:3d:fd:11:61:92:3f:09:d8:68:71:5e:e8:b2:6c:
         46:b6:30:c5:b9:6b:42:f0:a1:ad:bd:3a:6e:65:1a:71:be:1c:
         8e:68:e2:ae:60:be:03:d6:4b:18:42:85:49:61:5f:d1:03:b9:
         32:a5:86:59:de:0f:b7:c3:6e:56:db:2f:ff:d4:3e:07:2b:55:
         b4:a0:b4:ca:c7:34:a5:b1:5e:ed:f7:3b:6e:1a:59:27:01:79:
         4d:00:fc:b8:f7:8e:e7:92:35:ed:e8:41:90:8b:72:e5:59:30:
         39:a4:de:99:ff:72:37:af:da:9d:59:06:f7:50:13:ad:90:d3:
         de:66:a7:a4:5c:19:99:aa:7c:d8:52:71:93:c0:f1:28:9d:75:
         d5:b6:38:e5:0e:e9:fa:78:c8:5f:60:8f:d4:f7:4a:c8:a7:f4:
         29:87:94:53:39:0f:7d:87:6d:47:08:23:a6:34:60:e9:e0:06:
         1c:c9:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:01:05 2024 by rpki-client on console-fra.rpki-client.org