Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File:                     1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier:          x4NjfcdTM2zoC7qqB6Tojttrb5YtFHFm65ijNSM0R+U=
Subject key identifier:   C9:21:CA:7E:39:A0:5C:11:8C:3B:1C:17:8D:88:14:6B:50:1E:07:DF
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer:       /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial:       01940646BE4997910C206BF6D4E1877E1606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number:          0433
Signing time:             Fri 27 Dec 2024 04:01:26 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:26 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:26 +0000
Files and hashes:         1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: JXob2oCf5V35LRMfiAS7tIJFeKk4+wKgwUtc4ozgVN4=)
                          2: 9j_l78SHZjVaIszTnE7Ivn1YQgo.roa (hash: Y90m4XlKUp3WKSUvj+NB6fPe1MXMLvtdPzctNq6u4/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:be:49:97:91:0c:20:6b:f6:d4:e1:87:7e:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
        Validity
            Not Before: Dec 27 04:01:26 2024 GMT
            Not After : Dec 28 04:01:26 2024 GMT
        Subject: CN=c921ca7e39a05c118c3b1c178d88146b501e07df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:23:b1:4a:fd:91:a0:29:ce:12:13:78:a6:
                    06:09:57:29:f3:2b:00:1a:21:78:b8:38:8d:9e:d2:
                    a8:d2:64:5f:43:1b:a8:21:3a:3c:41:ae:b8:df:bc:
                    e2:f6:fd:f3:07:d6:28:46:49:4f:c6:9c:c4:45:88:
                    a9:2b:f9:0b:87:37:76:7c:f1:29:8b:d5:e5:10:6e:
                    2a:9e:29:ab:b1:56:e6:33:27:fc:cb:09:ff:31:ce:
                    ab:16:9c:72:d2:12:85:79:b3:d8:d6:d2:f1:9d:96:
                    4d:e9:38:1d:52:a8:0b:92:86:da:55:e2:f4:3a:c6:
                    79:4f:ec:a2:67:de:bb:f4:8a:6a:87:c4:63:ce:b0:
                    67:88:ba:76:b1:71:c0:2e:e0:9f:6b:d9:90:6a:60:
                    e5:e4:75:7e:68:ab:f3:4e:70:ea:b3:da:3b:3f:b8:
                    d8:c3:56:c6:54:d4:26:1b:a7:30:66:f1:5c:87:90:
                    a5:b1:da:13:07:98:b0:49:e2:fd:2e:38:ff:88:c7:
                    a1:71:ca:78:99:7c:b4:a5:9f:8a:34:ce:9d:ad:c7:
                    50:be:1d:18:50:a7:21:18:ea:8e:59:6c:23:4b:53:
                    c4:cf:33:65:bd:13:83:77:bd:b9:9c:69:66:7f:bf:
                    0d:26:dc:3f:93:07:a7:c0:d8:22:b0:4f:80:c0:e2:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:CA:7E:39:A0:5C:11:8C:3B:1C:17:8D:88:14:6B:50:1E:07:DF
            X509v3 Authority Key Identifier:
                keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:59:62:c4:f5:35:e7:a7:c4:7b:06:06:5f:62:85:46:f8:
         e1:62:2f:e5:db:c6:ca:cc:53:ab:4a:23:84:da:ec:ad:6a:2d:
         4e:84:00:32:11:42:e3:37:e0:2c:27:e7:6f:40:a6:0f:88:d5:
         5c:d7:49:a8:58:98:1f:1d:64:e5:f5:cf:de:a4:6e:3a:68:8b:
         a0:c7:ad:7b:94:80:a5:70:6c:9c:ed:f7:ff:86:07:89:57:94:
         0d:71:06:d6:1c:ff:86:80:c4:f9:ec:69:d3:ce:48:19:91:e1:
         77:d4:ec:a4:73:0e:6e:83:39:99:ff:00:51:ff:c5:6d:3a:9c:
         61:73:d1:41:05:d2:ec:78:0e:14:71:50:66:24:5a:ab:8f:b0:
         20:3a:fa:13:f3:72:67:f5:96:af:ab:90:31:56:95:31:bb:66:
         1d:98:db:d9:ab:41:5d:96:4d:4e:f6:31:b6:0e:55:df:fe:0a:
         97:56:c5:cd:0b:5c:6e:a5:53:ba:2a:7b:cb:7f:ea:e3:53:09:
         97:0f:a5:41:49:b6:25:8b:49:2d:aa:43:f4:31:bc:8d:4a:26:
         c9:6e:d8:6e:62:6b:c2:1d:a2:89:6d:e1:25:95:4a:4c:79:33:
         4b:f5:00:23:dc:09:ca:2a:e3:07:37:01:8b:40:c0:0d:61:b0:
         32:7d:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:18 2024 by rpki-client on console-fra.rpki-client.org