Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File:                     4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier:          a/K4nxdnrH44b8qx7JLPrDQxOrpbqWeoUQffHxlMP4I=
Subject key identifier:   E8:6C:81:93:7A:12:87:3D:A2:D0:5F:44:40:69:E5:E7:27:C6:EA:A7
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer:       /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial:       019357644AC250DAC4027D50A3B808B498E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number:          0C4A
Signing time:             Sat 23 Nov 2024 05:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:10 +0000
Files and hashes:         1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: neCaBbAJ0aTH5IBClbKNp1MYJq3vOoARue1DqGgqj/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:4a:c2:50:da:c4:02:7d:50:a3:b8:08:b4:98:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
        Validity
            Not Before: Nov 23 05:00:10 2024 GMT
            Not After : Nov 24 05:00:10 2024 GMT
        Subject: CN=e86c81937a12873da2d05f444069e5e727c6eaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:2c:85:50:86:b0:dc:04:19:ac:b1:7e:a5:
                    cf:22:61:1b:05:e2:88:ea:0f:43:5e:c2:a6:54:29:
                    a0:7b:37:70:c1:68:27:67:ae:52:0d:33:09:94:4c:
                    d9:7e:e7:27:be:3f:05:99:9a:a5:d1:d3:8a:3a:ee:
                    77:91:b6:d9:76:3f:9b:15:8d:af:53:29:9b:a3:4f:
                    ca:16:85:ef:2f:21:07:35:07:2b:19:b2:c3:c9:f2:
                    b8:f1:55:e8:25:56:1c:9b:25:63:fd:4c:ee:62:13:
                    ed:55:3e:50:3b:70:bc:98:4d:cd:10:03:9c:7a:35:
                    72:cf:13:c3:41:ac:bc:ad:f8:a2:62:35:ef:fa:6a:
                    3b:65:6c:50:44:5d:2e:18:a6:66:00:27:fe:98:ef:
                    f9:27:9d:5c:58:0e:61:52:a6:1c:4d:fe:73:ee:2e:
                    cd:61:5d:bb:12:7f:f8:2a:62:c8:8b:9e:f7:7f:56:
                    be:28:ff:03:dc:ac:0f:21:21:b0:8a:62:4a:3b:81:
                    31:39:08:62:f3:e7:e2:b8:af:e2:4d:3f:33:51:ca:
                    a6:b7:d7:98:f2:10:42:79:1b:04:8e:74:ed:32:3f:
                    ea:90:dd:b4:f9:18:90:21:df:d8:e3:2f:e3:76:07:
                    7e:12:11:ba:a0:e5:f1:df:24:d0:c2:9f:d2:7b:b1:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:81:93:7A:12:87:3D:A2:D0:5F:44:40:69:E5:E7:27:C6:EA:A7
            X509v3 Authority Key Identifier:
                keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:12:76:d4:9a:f1:82:49:ef:b1:c0:a8:c4:e7:e2:8e:f3:
         bb:fa:57:8d:14:35:a7:11:85:bb:5f:a3:7f:85:3f:67:b1:ac:
         4e:7d:b3:21:7c:b7:d8:3d:98:9c:be:47:79:1d:b1:a6:1e:67:
         c3:4c:6a:73:b5:3d:4f:cb:8d:e4:35:e6:c9:7b:c0:cd:ad:55:
         85:90:f6:40:b7:97:a8:82:d6:81:07:c0:c6:d3:ff:e1:d5:57:
         8c:a1:e4:26:03:c3:ac:47:ac:8e:a9:5d:aa:67:f8:bd:83:14:
         dd:74:9d:fd:c4:d5:bd:a2:38:d9:de:71:aa:21:a7:34:bf:24:
         09:bb:d9:30:e8:51:20:83:68:ff:e9:16:d8:4e:43:57:35:6d:
         ca:31:bc:97:f9:fe:9f:3e:c0:80:ff:5f:74:5f:72:55:fe:53:
         5d:6a:63:18:57:c6:46:b5:72:bb:92:40:cb:3b:da:f9:f2:9d:
         11:b5:71:7f:e6:60:80:a8:f1:97:21:ec:3d:bb:00:6d:d0:e3:
         46:88:73:0c:ba:28:b0:4a:be:76:5f:82:a9:96:ec:fe:6a:cd:
         8e:d5:8a:88:03:03:36:99:63:56:5f:a4:6d:cd:d2:37:6d:42:
         6e:33:33:ba:d1:bd:ea:13:cb:a7:e5:b3:cc:f4:42:e9:b5:90:
         2d:1e:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:57 2024 by rpki-client on console-fra.rpki-client.org