Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File:                     04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier:          jagfafIfTpZzRSt31nuA4IQg7jd0kbsAo3nZOVqHoXE=
Subject key identifier:   22:B3:91:84:E2:A2:53:B6:A9:42:9B:E4:8C:FF:C0:8B:CF:FA:90:E8
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer:       /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial:       01935764A705FACD762CED71AE62F1AB8D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number:          1082
Signing time:             Sat 23 Nov 2024 05:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:34 +0000
Files and hashes:         1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: wKuMGa4otDEDgbOw7yy49sUAptSOm+F7hYlisUnpCYQ=)
                          2: iFW1E7BiLEkQ7ss4xSoJMBpzwr8.roa (hash: SlCf5B1HPkLdQSZBSMYq1ZYDy52ZmutaLGpYVqTBITw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a7:05:fa:cd:76:2c:ed:71:ae:62:f1:ab:8d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
        Validity
            Not Before: Nov 23 05:00:34 2024 GMT
            Not After : Nov 24 05:00:34 2024 GMT
        Subject: CN=22b39184e2a253b6a9429be48cffc08bcffa90e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:8d:d1:b5:7d:8e:87:7a:eb:dc:d7:44:fd:
                    8a:df:d7:5d:1a:0c:5d:9b:5a:fd:d9:9d:0a:df:c8:
                    98:d1:6d:f6:6c:83:fd:37:f1:03:79:4e:32:05:46:
                    ee:2f:3c:96:98:e9:16:88:bb:54:f0:0f:33:77:e0:
                    15:b4:5c:ab:4d:d4:82:d0:ff:af:b4:77:db:b3:f7:
                    61:85:08:9e:77:a1:8c:a5:1b:25:95:3a:79:11:a4:
                    50:ae:00:8a:1f:e5:bd:f7:69:4d:f3:78:82:29:e0:
                    23:f2:f8:36:91:5a:e8:44:20:60:87:73:44:b2:58:
                    f4:4e:e3:a4:78:a6:13:df:6f:5a:38:b1:09:d1:74:
                    d6:b3:f9:7d:83:20:b6:ae:de:03:df:2e:a2:a5:c4:
                    11:0c:7f:97:5d:bf:c5:64:09:b6:ba:44:6c:0b:d5:
                    b8:84:ac:42:a8:ad:19:16:bb:7e:63:4d:80:4a:c0:
                    76:e7:f9:38:57:56:5a:50:c4:57:fb:af:c4:6e:a8:
                    f5:dc:8f:98:18:59:02:8d:7f:b9:00:6e:42:20:d8:
                    38:cd:a2:78:54:03:f6:e2:dc:32:14:7f:8d:1e:9a:
                    d0:a3:41:b3:96:0d:a7:3b:41:13:b7:bc:e4:ee:78:
                    34:86:da:94:ac:7a:da:13:c0:1b:a3:37:8a:f3:0b:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:91:84:E2:A2:53:B6:A9:42:9B:E4:8C:FF:C0:8B:CF:FA:90:E8
            X509v3 Authority Key Identifier:
                keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:68:4f:c2:57:e0:a5:65:87:d2:da:11:f5:c7:e8:8e:eb:
         91:b4:d5:4c:78:03:28:55:5d:7a:53:7d:48:8b:56:ed:7f:dd:
         f7:66:6e:3c:e0:f9:a3:b1:9a:f6:54:a7:ca:2b:4a:5a:6b:5a:
         d2:e6:e7:d9:e3:f3:41:2e:97:42:a0:50:8c:ab:17:c9:da:b3:
         a7:8e:97:ff:bc:b1:46:7e:f6:07:6c:83:02:a5:76:a9:f3:37:
         fa:65:3a:1c:d0:67:4d:6a:b5:4d:6a:ce:2b:8f:84:2a:2b:46:
         00:93:c4:f9:6c:b1:de:0e:fb:22:54:57:84:79:ce:46:dc:44:
         9a:30:0a:89:ca:91:61:8e:b6:d1:49:63:2b:c5:1d:e3:62:f3:
         4f:71:65:e8:c7:92:11:1d:04:ce:8f:48:95:7e:fb:93:39:3e:
         f3:07:72:af:19:49:8d:00:ee:9c:79:10:76:e7:86:b3:fe:f1:
         ae:e7:b8:0a:d2:57:98:74:83:63:64:a5:c1:e9:bc:2e:65:75:
         f7:f9:72:ae:09:4a:e9:b5:d6:12:6a:3d:7e:09:36:b2:bc:8b:
         15:2c:a4:a4:7c:ce:a6:74:3c:2e:e3:0d:bb:e2:1e:d3:d6:98:
         8c:40:15:22:41:42:98:e8:f5:09:fe:49:00:c6:da:3c:74:2e:
         37:8c:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:59 2024 by rpki-client on console-ams.rpki-client.org