Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File:                     4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier:          kNGly8uNVzsZaAzzYNUztY6EIbWbfS+uF4/Uu2Fmf2g=
Subject key identifier:   83:71:89:81:48:96:0D:2A:FC:72:47:51:B3:FA:16:C0:1D:C5:02:75
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer:       /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial:       019354D123CDF7E4287035D5D5B40E438151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number:          0325
Signing time:             Fri 22 Nov 2024 17:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:12 +0000
Files and hashes:         1: 1XronpqXFa8y1HWAdN_IA9jVZvQ.roa (hash: K1X3R4PmiMUchaQKywokIViDF8DeOrXRjVjKNVF+14Q=)
                          2: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: 5uzSQyICmE39ZTvcAn1WwOZUqeLI7fqct5ccCg4VQF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:23:cd:f7:e4:28:70:35:d5:d5:b4:0e:43:81:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
        Validity
            Not Before: Nov 22 17:00:12 2024 GMT
            Not After : Nov 23 17:00:12 2024 GMT
        Subject: CN=8371898148960d2afc724751b3fa16c01dc50275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0a:8e:ec:be:79:7d:2a:27:68:23:f2:37:96:
                    50:be:72:cd:d1:6b:0a:8d:16:df:c9:b0:ce:da:d2:
                    c0:f0:84:f5:41:2e:46:d2:ff:08:7e:48:e8:ea:3d:
                    50:d9:18:51:d0:4d:d8:82:3e:a1:95:40:b7:9e:af:
                    cf:bf:8b:d8:a7:1e:1a:fa:52:c3:02:1b:63:9b:ab:
                    81:55:af:88:8b:1f:b8:d4:ed:c1:13:b7:b7:6e:e7:
                    3c:1a:27:58:d2:8a:42:f0:fe:aa:52:ff:10:8c:aa:
                    16:77:ad:02:b9:1f:72:03:24:7c:fe:56:6c:51:c1:
                    2b:9b:03:cf:6b:37:32:83:03:03:32:66:cf:67:9f:
                    ab:86:43:a2:57:b2:0d:48:fe:92:ef:18:0d:b5:cc:
                    8b:d2:22:17:48:86:34:da:27:b0:22:71:88:20:ab:
                    07:bb:7d:49:63:28:8b:e3:e1:f4:e8:51:d2:97:01:
                    e0:a5:32:e3:e3:ab:28:9e:45:cb:33:70:e0:73:92:
                    88:eb:8c:ee:a8:49:e0:8d:a8:27:6c:14:be:59:51:
                    f5:3e:96:9d:6c:2f:bd:ce:e4:39:f4:6e:47:49:6f:
                    a4:03:64:9e:78:78:94:bd:37:0e:77:91:10:94:67:
                    9e:bc:5c:36:50:2c:73:3b:2f:e1:cb:d3:6e:7f:da:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:89:81:48:96:0D:2A:FC:72:47:51:B3:FA:16:C0:1D:C5:02:75
            X509v3 Authority Key Identifier:
                keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:62:b8:07:a3:59:15:96:26:5f:30:cc:3a:4d:73:23:1f:6d:
         18:0e:90:57:a8:44:3e:e6:89:da:d1:11:90:06:e4:13:cd:91:
         b7:ef:a1:f6:c6:ec:f8:82:35:71:a3:8e:09:35:e6:60:59:48:
         a7:1b:08:39:74:81:a9:b7:06:e4:65:e3:85:9c:bd:52:49:5c:
         b9:05:bb:49:e3:db:b7:9c:c4:0a:9a:1a:d7:a9:5f:0e:ae:17:
         73:b0:42:4c:93:cb:cf:45:31:97:1e:f4:fd:a4:d3:1d:d2:ed:
         b5:04:30:5e:ce:34:e5:ee:49:03:49:bf:82:5c:fe:c3:a8:d8:
         11:e8:45:be:1c:c4:eb:dc:06:4b:11:a6:84:ca:63:ab:42:41:
         e5:67:7c:b2:a2:83:a7:e2:10:1e:14:4a:8f:4f:23:b1:bd:3f:
         11:4c:c3:3b:46:e4:21:1b:0a:78:35:67:a0:b2:04:b4:05:a5:
         0d:c8:1b:3b:97:ed:b9:66:7b:a9:9b:86:7f:33:c9:9d:4b:5d:
         4c:bf:aa:82:81:fa:12:e6:df:99:ae:61:fd:c6:e2:40:7a:a7:
         c0:de:de:02:81:16:07:c5:98:fb:98:8c:a5:6f:af:3d:bd:58:
         6c:18:3b:a8:c0:04:47:9e:42:66:b2:84:23:55:97:7c:20:dc:
         b6:3c:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:32 2024 by rpki-client on console-fra.rpki-client.org