Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier:          PGz60woXf3KExxhQdlqzvqIjtsEgJAqhFRIDbqID82o=
Subject key identifier:   1C:1D:71:CE:22:B7:76:C3:39:62:2C:E3:6C:E5:32:CE:EA:C0:0A:2C
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer:       /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial:       0193576484435A783FCB0B38FFBB355F278A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 05:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:25 +0000
Files and hashes:         1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: wPaY1o6uCwDnmZ9DWQMdqOamEjvdzyL8rD6mMD6s590=)
                          2: Hb1Dq0GWuCsDbCi9yzVtD2qReSQ.roa (hash: /lDBikgy51SO5TJiFnhYMRCjG3ci9zvqedRWLLH+HrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:84:43:5a:78:3f:cb:0b:38:ff:bb:35:5f:27:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Validity
            Not Before: Nov 23 05:00:25 2024 GMT
            Not After : Nov 24 05:00:25 2024 GMT
        Subject: CN=1c1d71ce22b776c339622ce36ce532ceeac00a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:23:7e:01:a3:49:c9:65:4b:a8:11:87:36:
                    cb:67:3d:96:98:40:57:91:bb:5f:fd:93:74:08:10:
                    e4:b7:7b:43:7d:44:ba:3f:e7:d8:c0:cf:c6:e8:c3:
                    9f:9f:21:f5:3e:7b:5b:3c:e7:4a:f5:de:31:ce:6d:
                    59:a0:3b:d7:9d:d7:28:c2:a6:d6:77:95:2f:ee:1e:
                    c5:3e:66:6d:82:09:26:a5:32:8b:97:99:d2:60:98:
                    c8:74:76:b0:9b:bf:28:92:9c:6e:b4:6d:bf:0e:15:
                    95:a0:59:4d:77:3f:06:c5:94:1f:b7:78:8e:a0:3b:
                    7b:44:60:25:66:50:73:2a:63:a5:e5:f3:19:e1:90:
                    13:8a:75:da:fb:a5:90:48:fd:8e:ac:09:e8:f3:81:
                    b3:1c:b9:54:cc:5e:58:68:57:47:57:d8:f3:bd:45:
                    a7:d1:ab:1b:cd:6d:d4:a4:31:70:81:0e:5d:54:c4:
                    01:2f:48:f4:74:12:9f:46:b9:fc:d9:3b:19:fa:e6:
                    bf:88:9f:8d:ec:73:7f:b9:63:60:f5:bc:f0:24:7e:
                    8d:3a:d0:ed:91:09:a5:ae:c9:a3:df:53:2a:8f:c5:
                    f0:7a:dc:29:b1:4d:c6:bd:7b:0e:91:52:c1:3b:7b:
                    37:9d:0d:95:54:e5:e6:f0:dd:d2:ba:9b:78:92:db:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1D:71:CE:22:B7:76:C3:39:62:2C:E3:6C:E5:32:CE:EA:C0:0A:2C
            X509v3 Authority Key Identifier:
                keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:68:1a:37:e9:16:08:57:36:5c:67:62:fe:fe:35:17:1a:0f:
         ba:c8:89:17:4f:08:83:f0:91:9e:2e:3f:49:ca:74:43:40:f8:
         83:8e:8c:c0:51:dd:96:fd:97:ad:8f:ac:df:c6:88:9b:fb:43:
         89:95:d4:a4:dd:f4:0f:1f:c1:54:bd:0c:80:6d:60:32:1a:d0:
         07:bb:3e:69:00:f0:72:02:cf:e3:64:0e:66:f6:70:51:1d:89:
         2d:5c:4a:48:62:2d:48:0b:55:be:9b:2f:7d:95:d7:ed:cf:6a:
         4e:9a:9a:ec:a2:f3:42:e7:cb:1c:4e:6c:23:dd:31:cc:b3:97:
         c6:a4:fb:34:64:0e:ed:b0:84:9c:b3:2d:b7:33:19:a2:3e:93:
         94:3c:07:04:13:77:04:2d:62:6b:a6:bb:56:f6:db:80:bd:82:
         c5:06:b5:0e:ea:02:ea:65:ad:9f:4d:54:4d:6e:2f:c8:b8:c6:
         a7:2e:55:82:03:14:70:0e:ad:cc:63:68:1d:e1:53:1e:ba:95:
         ee:05:59:60:d5:5d:12:2b:ad:c0:ea:a4:f9:fb:32:a0:94:7f:
         4b:d9:47:0a:90:8c:ce:ab:8d:09:23:5b:78:25:18:a9:8f:9d:
         df:3d:b4:7d:d3:aa:97:ab:35:0d:6b:25:0c:07:1f:2a:93:e9:
         9d:56:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:50 2024 by rpki-client on console-fra.rpki-client.org