Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File:                     4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier:          Poqc7SabElpBt4GPLIPbnF/IWL8NoWkGC9xalQ/hYwg=
Subject key identifier:   6A:2B:E0:76:D8:85:49:97:E9:3B:CA:0D:0B:D1:4C:E2:BF:FE:D8:00
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer:       /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial:       019406B3CC114AA40C21554A8D78B4C3B514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number:          4B
Signing time:             Fri 27 Dec 2024 06:00:33 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:33 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:33 +0000
Files and hashes:         1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: yY+8zwF/4tm9iQqvQf9WG1KJ/i+S7uAZG063JfYjuTg=)
                          2: PEdNoNJ4WAHoC-h-EcqQR8UY72w.roa (hash: AaaksH6VMD+eM1JIyxLGete60yeJ1PAMKyDbBPXvw+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:cc:11:4a:a4:0c:21:55:4a:8d:78:b4:c3:b5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
        Validity
            Not Before: Dec 27 06:00:33 2024 GMT
            Not After : Dec 28 06:00:33 2024 GMT
        Subject: CN=6a2be076d8854997e93bca0d0bd14ce2bffed800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:7e:63:8e:dc:92:36:6c:af:11:65:a9:ba:
                    e0:6b:8b:14:93:b7:8c:ff:44:3b:96:b8:27:5b:ab:
                    7e:de:54:10:25:fe:0c:60:da:e9:3d:ab:54:f7:47:
                    8a:6d:9b:eb:44:db:51:e3:3a:d5:e6:11:f7:63:63:
                    dd:eb:09:38:05:66:db:4b:44:29:cb:e5:45:0a:0e:
                    dd:7d:76:c8:4b:e1:92:d8:d3:99:be:95:d7:66:7a:
                    12:29:35:10:91:73:18:71:31:52:d9:93:1b:f7:93:
                    d9:2d:b2:0c:47:d9:37:47:47:f3:95:f8:13:7e:2e:
                    43:45:f0:fe:a5:b4:dc:54:16:de:77:5a:df:13:0c:
                    6a:79:88:67:87:31:e3:6e:17:da:d1:f3:86:84:b0:
                    17:f5:9a:67:10:71:31:3f:73:40:71:dd:22:6b:d9:
                    33:f3:3b:7b:3d:45:a7:1d:68:e4:27:bb:06:69:6b:
                    0a:ed:2d:64:ae:5b:e1:b1:a4:93:45:7f:77:d7:32:
                    7d:cb:dd:c5:0d:1a:87:5b:07:9a:02:1b:40:8d:a1:
                    07:11:a5:ec:c8:90:46:34:f7:fe:cd:75:8a:e8:dc:
                    03:1a:01:e1:0f:6c:ad:27:6d:60:dd:23:a3:1b:7e:
                    e5:a8:5f:4a:6c:f8:be:3b:04:db:5c:c7:18:25:67:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:E0:76:D8:85:49:97:E9:3B:CA:0D:0B:D1:4C:E2:BF:FE:D8:00
            X509v3 Authority Key Identifier:
                keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:cc:b9:8c:c3:3e:a4:45:af:24:94:0f:21:29:17:40:56:
         19:8a:29:0c:99:90:40:fa:58:6e:4a:64:8c:3e:95:76:4a:af:
         e7:11:81:3f:a1:b4:fc:47:7a:eb:9c:e5:63:d5:37:5f:0d:b8:
         57:28:70:2b:46:72:e3:15:ee:6d:e6:21:c1:a0:0a:bb:43:f0:
         75:68:50:a7:15:53:0f:7a:04:6b:31:c3:f4:d4:3e:43:a5:4d:
         43:82:29:88:e9:78:b2:84:55:8e:0a:29:72:01:f7:f2:44:37:
         4c:c2:90:8d:7a:86:db:da:10:01:7d:fd:6c:49:54:76:10:60:
         e0:ea:b0:1b:43:e5:a0:d6:23:b5:e6:71:e0:07:40:c2:2b:9f:
         2f:9d:14:79:9c:c0:3e:5c:1c:13:a6:75:e5:34:87:eb:cf:74:
         c0:af:f7:d5:60:fd:c3:da:42:82:f5:41:e2:30:80:d8:5c:92:
         ed:83:d1:c9:8d:9c:a0:a6:1b:e5:8d:0f:90:40:ae:d2:21:92:
         96:28:42:c6:54:f5:2a:6f:43:53:e9:15:ca:85:1a:87:c8:c7:
         9e:6d:f6:d7:da:47:04:61:54:00:e6:36:46:c1:38:7f:fd:63:
         45:f8:d5:17:29:ba:59:ce:7a:c9:c7:28:ed:e9:73:2e:fb:f3:
         d1:4b:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:46 2024 by rpki-client on console-ams.rpki-client.org