Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File:                     4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier:          pP/y07+eEJby0q25+pnRUeRwXlSxWBtLvQwMfjRD0Zs=
Subject key identifier:   B0:0F:EF:37:98:BD:17:76:7A:D1:A2:5F:80:44:85:5D:FF:EE:C1:0B
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer:       /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial:       019355E489C40D370774577E71D506FC43A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 22:01:01 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:01 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:01 +0000
Files and hashes:         1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: hHivnnaWv0H3y4Skm0VII6HvsXDX9t8Xcrr1bmhmTzg=)
                          2: Lfqi2MybHHcxNp1u3Cq7LTdY9-I.roa (hash: qgV4c4wlnvjkIvX1RKI+Yi/+fQkzx06X+sAUww1eesU=)
                          3: NDbYPOpUJCl8mW2QMtd1UqFSNrs.roa (hash: NAEHHhrUrRJOowMKAO5ZZXJRQ49sRLRO9wyfmRpEsEA=)
                          4: draUA7cJWxml56_41HFEOeWgKwo.roa (hash: hH3qjGPGdpe639DGMC06i4ooFRBVGXV/5BfstTFrbj8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:89:c4:0d:37:07:74:57:7e:71:d5:06:fc:43:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
        Validity
            Not Before: Nov 22 22:01:01 2024 GMT
            Not After : Nov 23 22:01:01 2024 GMT
        Subject: CN=b00fef3798bd17767ad1a25f8044855dffeec10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:41:c4:2b:0c:11:cb:1b:a8:b5:30:63:3f:
                    1e:40:9f:f3:84:ca:6b:11:aa:ba:df:85:d3:87:0b:
                    8a:4a:77:5d:4b:7d:53:cd:c3:50:95:ca:7e:ce:ab:
                    94:17:f5:4e:05:ef:87:ee:17:98:3a:3a:4c:0a:b4:
                    4e:ed:ea:43:10:d2:7e:99:04:8b:c7:0b:05:40:e0:
                    79:0c:60:c4:58:2b:c7:a9:c7:df:12:4c:8a:e1:00:
                    21:08:cb:67:fe:89:3f:b2:68:5e:c9:e8:6e:87:08:
                    99:8b:95:92:3b:72:35:d5:d4:40:40:19:00:d3:ec:
                    f1:3d:ac:97:5e:85:2a:e8:54:40:dc:8e:3c:53:91:
                    36:49:14:7d:b9:6b:81:3b:69:06:a9:10:68:50:46:
                    a8:79:8a:df:1d:68:63:c9:9f:7a:39:60:e6:8d:3a:
                    df:e7:68:bf:b9:c5:c6:9f:e7:a9:22:a6:fb:b2:20:
                    e2:22:61:a2:b2:75:c8:16:37:76:a0:84:b2:d9:a1:
                    98:4f:1b:3f:94:5d:df:32:82:c9:90:ef:47:b8:c5:
                    55:bc:35:a5:55:44:ca:81:a8:8f:3f:31:61:23:08:
                    07:c9:cf:85:37:15:13:07:1b:b1:49:5b:d9:d9:b9:
                    f1:bb:ee:50:0f:bd:aa:ce:50:12:18:da:ea:56:e6:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0F:EF:37:98:BD:17:76:7A:D1:A2:5F:80:44:85:5D:FF:EE:C1:0B
            X509v3 Authority Key Identifier:
                keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:c6:c3:90:b2:02:02:e6:b4:f0:92:97:88:6c:7b:71:3a:
         14:f5:31:ea:bf:55:f9:8f:fb:5c:4d:1e:3e:9b:eb:db:49:35:
         59:7e:1a:7e:78:4d:5e:e8:94:df:1e:ed:84:3d:82:e9:80:45:
         78:bb:d3:b7:9f:a3:04:c6:d5:25:80:38:30:fd:7f:90:4b:fa:
         02:c7:19:b9:4c:2d:c1:b9:1c:df:f8:23:ed:97:34:5e:16:51:
         5e:37:a4:cb:87:ee:9c:e4:bb:f8:de:22:7a:7a:2a:89:1a:91:
         9f:34:43:af:d7:ff:24:89:df:9e:73:16:00:69:f1:43:c8:f6:
         f8:2f:15:10:e9:c2:c8:74:e8:eb:13:4a:37:3c:f9:de:f3:b9:
         a0:44:98:fd:63:cf:51:16:56:dc:81:ac:05:5c:b8:b3:53:bb:
         8a:9d:c3:3c:9d:2e:33:ed:4e:22:da:7d:16:b9:24:68:57:4f:
         62:ad:47:70:76:6c:dc:84:2f:66:a8:bf:6c:69:7e:24:8d:90:
         34:e4:11:8e:5e:92:78:9f:78:91:0b:97:21:91:5f:29:ff:79:
         3f:c8:1d:c0:69:8e:18:4b:ce:84:cd:ea:d2:ec:f3:45:f3:15:
         b1:66:56:51:68:40:5e:d1:8c:f3:b0:b4:83:f4:7e:6a:be:15:
         6a:9e:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:53 2024 by rpki-client on console-fra.rpki-client.org