Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File:                     CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier:          fz1hCgrGefCtyK41UdMzNZpDdmvFqFfRNG0U+DAq1ss=
Subject key identifier:   BA:18:64:D4:B4:AF:3E:15:C6:DF:48:CB:67:FC:E0:2F:F7:67:84:5A
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer:       /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial:       01935689C21BB4520741A2936E4C2EAEC48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number:          0EBA
Signing time:             Sat 23 Nov 2024 01:01:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:28 +0000
Files and hashes:         1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: nW9r+Nr2js43amlbp4fYVZSEN3DiTc7p6rzjbvAgxxQ=)
                          2: gGe0nYIlD7jJjayzwKOJVt7klS8.roa (hash: BmV0J5rcQhabjfmYGR4QzsetfQFlQxcgd+4BQKeuJ7s=)
                          3: pwDAzNcHMV_I_oqD1tgh6fFX8SM.roa (hash: jPr+1uwvxqwwGvYG31GyAoJ9FMAEt+s771XPKXdMFNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c2:1b:b4:52:07:41:a2:93:6e:4c:2e:ae:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
        Validity
            Not Before: Nov 23 01:01:28 2024 GMT
            Not After : Nov 24 01:01:28 2024 GMT
        Subject: CN=ba1864d4b4af3e15c6df48cb67fce02ff767845a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:96:d3:b1:5e:0d:c0:3e:42:a1:1f:73:d2:
                    3a:89:d3:88:61:37:33:c4:eb:a8:46:5d:fd:39:8e:
                    6b:ed:94:2b:20:d4:6f:6f:b7:94:c0:ed:61:71:bb:
                    73:6a:f7:a9:55:03:bb:f4:8d:06:f5:f1:90:b4:2c:
                    db:b6:0c:c2:9d:5e:65:01:48:57:b5:9a:26:3c:5b:
                    7b:e3:e5:6e:f3:55:4d:fa:6c:4c:37:a8:42:dd:d3:
                    90:f2:82:d1:4d:b6:82:26:ca:ee:6d:1a:2f:9e:85:
                    d9:f3:24:2d:28:4d:16:e0:20:47:1e:02:fe:b3:f2:
                    28:36:8b:78:f0:17:8b:5c:c5:70:8c:55:72:77:72:
                    80:a5:5e:fd:19:51:15:6c:21:f1:4a:f9:25:17:04:
                    27:83:66:6c:78:2e:41:0e:62:d4:8b:25:97:fa:8c:
                    af:a0:c8:29:97:80:30:12:92:15:2f:d8:8a:26:c7:
                    08:18:14:d1:62:33:77:55:d2:ac:8a:80:1f:3a:be:
                    f6:80:a1:e4:37:24:ff:98:a4:cf:65:a7:cc:f5:01:
                    ae:90:62:d8:21:64:a9:a1:1d:00:2c:e4:52:5c:18:
                    eb:13:69:bf:5f:c2:05:2a:38:c2:73:64:ec:a7:43:
                    7f:c0:08:86:f9:84:38:79:57:35:82:17:45:fa:62:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:18:64:D4:B4:AF:3E:15:C6:DF:48:CB:67:FC:E0:2F:F7:67:84:5A
            X509v3 Authority Key Identifier:
                keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:00:bd:e3:84:d4:fe:4d:2a:37:d2:89:8d:2d:f7:bb:1b:07:
         54:e7:6e:ee:b2:34:eb:62:64:ee:12:91:45:4b:e9:2c:ee:99:
         89:70:0c:8e:36:76:6e:b2:07:98:b6:33:ff:54:f5:24:4f:f0:
         14:8c:c8:13:10:7f:04:50:59:79:20:06:a3:3e:aa:f9:3b:32:
         71:27:1a:4f:46:3b:09:92:f9:0d:9f:29:8c:43:ba:02:69:f2:
         53:c7:69:7e:0a:5b:8e:ec:48:52:25:ea:73:ac:96:92:75:03:
         0f:81:be:dd:51:40:3d:52:16:f6:7f:d8:84:5b:4d:e1:32:5a:
         fa:a9:7c:a2:e3:b7:f4:32:ba:76:c2:5f:4c:b2:c2:58:b1:9c:
         5f:45:71:f8:68:1a:3b:87:99:97:33:ef:f4:ae:9d:3c:73:0a:
         0f:d7:cb:ec:cd:b7:6d:78:80:cc:8d:cc:f6:05:76:e6:33:32:
         e5:99:cc:07:02:7b:2f:06:c1:e3:9b:6a:05:7e:e3:cc:ab:74:
         f5:cd:31:ec:9c:3d:ff:99:be:b9:d3:93:c3:fd:b3:51:fb:a5:
         d5:f9:7b:5c:23:a9:01:73:ed:2e:b7:7e:cc:03:b7:df:c1:f6:
         33:1c:7a:3e:90:32:30:c4:d8:cb:bc:23:c6:b6:a8:f1:7c:35:
         3d:18:f6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:19 2024 by rpki-client on console-ams.rpki-client.org