Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          JWuNx1ffbFCqfxGZJoJouFCRlQQLlyiMPRLynqCG0Ys=
Subject key identifier:   11:7D:5E:60:4B:AA:B0:CA:F4:F5:EB:E3:1E:9D:75:B9:FB:A4:EE:16
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       01940721CA73C0941FFAF107C13DD7242AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0651
Signing time:             Fri 27 Dec 2024 08:00:42 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:42 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:42 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: m4mvMcGN10oTos+OmSRMbIIOfueLoNF38j8WiX62jPI=)
                          2: WCdk-7sk4Vr_ewQEt3sB5GPErRw.roa (hash: e1PSftINUGEG8ingWZnN85IoFw9gxagSidbbKnno+2M=)
                          3: uk7fPwzqEPns2LVq3eLCXIhMLPg.roa (hash: Tc/cW9pglq8GU21OWqpjW1taibQTU+bJXxrSRthYk44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:ca:73:c0:94:1f:fa:f1:07:c1:3d:d7:24:2a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Dec 27 08:00:42 2024 GMT
            Not After : Dec 28 08:00:42 2024 GMT
        Subject: CN=117d5e604baab0caf4f5ebe31e9d75b9fba4ee16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:4b:27:21:4c:87:09:52:8c:50:d5:11:ea:
                    70:80:11:e2:5c:8d:88:4d:38:a0:36:e3:c6:88:08:
                    94:36:36:fa:63:9f:b8:79:75:85:30:47:ee:41:c8:
                    ff:78:35:02:ea:c1:cb:e1:0d:bb:fc:ae:b5:05:0f:
                    9b:aa:cc:bf:b2:d7:a9:22:52:1c:6d:d2:47:03:3e:
                    80:89:60:e3:72:09:e7:5e:e1:aa:4e:83:c1:83:88:
                    14:fc:a4:52:50:7d:5d:33:df:a0:e4:d8:7c:97:2e:
                    4f:81:cd:53:4e:5a:8c:28:3b:cc:c5:7d:70:b0:8f:
                    9e:52:66:a0:2e:19:28:a5:9a:ef:34:56:8d:3f:ed:
                    a5:8a:c4:d4:dc:5f:ea:71:69:ee:ca:b6:c9:c7:e8:
                    a3:44:d8:1d:99:0d:0e:3d:e5:c3:79:5d:0d:08:a8:
                    10:e3:2b:94:a7:79:1c:7d:9e:aa:71:d5:e3:e8:47:
                    96:70:ea:ef:4e:30:24:84:d7:4e:72:f3:a1:01:70:
                    55:c1:74:be:0b:76:0a:2a:9a:5a:32:41:fc:ef:86:
                    09:8d:c9:1f:95:54:68:96:c2:6a:81:24:b4:ad:5b:
                    1c:a8:2d:c0:1b:26:02:3d:ae:ff:49:8a:b2:fa:37:
                    a4:7d:6f:52:b7:d6:19:a6:44:06:e0:e3:fa:e6:4b:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:5E:60:4B:AA:B0:CA:F4:F5:EB:E3:1E:9D:75:B9:FB:A4:EE:16
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:6c:e6:cb:ea:16:f4:1a:4c:b9:31:a9:97:6c:0f:07:d9:
         45:af:dd:15:c1:8e:43:2d:f7:af:91:76:ca:12:e7:c5:90:e3:
         74:17:5f:83:9b:d5:d7:df:12:c1:72:24:24:ba:78:3c:5f:d9:
         d1:9a:16:e9:12:9e:4b:3d:38:19:e7:bc:e4:9d:3d:a7:a3:e2:
         67:e2:b6:cb:4c:7c:ea:99:f6:69:bc:34:cc:35:8a:58:a3:b8:
         86:c2:62:79:c0:bf:84:f5:15:ca:ad:ad:b6:cd:79:1a:f4:56:
         63:53:57:c2:45:8d:a5:f0:e4:d0:22:5c:29:e5:3a:3e:c7:d6:
         da:0f:b3:6a:84:f7:e5:68:5c:36:7b:f5:3a:c3:af:f3:80:c1:
         b5:9c:f6:a3:13:52:d9:fb:39:b4:07:e6:53:37:5c:81:1a:f9:
         24:02:ef:90:21:d8:f1:63:2c:6a:5e:64:5f:ce:95:97:da:6c:
         c1:c7:85:17:95:f3:12:68:a5:a0:ae:a9:31:cc:b2:8a:8a:38:
         5e:22:f2:87:b1:03:c7:e2:88:5f:fd:9c:7f:35:70:3a:7b:e5:
         7d:07:b6:f4:ef:8a:be:a6:4e:4c:0b:58:1e:5f:bd:1d:63:74:
         53:40:11:38:82:4f:ae:9c:ff:8a:99:8b:4b:aa:6d:b6:4a:79:
         e3:7b:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:06 2024 by rpki-client on console-fra.rpki-client.org