Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File:                     4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier:          DzFyHzByuyBD8B1Uq6ESnRuY7Oon8q0iGXy+NGGiyP4=
Subject key identifier:   4A:25:BE:79:9B:02:02:83:08:AB:41:DC:D4:81:2F:0F:52:21:1A:7D
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer:       /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial:       0193764B21F03BABBA8B2911D3A259D3235E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number:          0DE3
Signing time:             Fri 29 Nov 2024 05:00:55 +0000
Manifest this update:     Fri 29 Nov 2024 05:00:55 +0000
Manifest next update:     Sat 30 Nov 2024 05:00:55 +0000
Files and hashes:         1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: 5iLE5s7V7SCPZGnbbIBdbrTZJOKfV2KmwsYoqWfVuzo=)
                          2: L80iubnLrB6HYtoni9kSz1WqbDo.roa (hash: Pel1dW8qwtIoSRwoxsDO7tFtugoOBen1LdrGlhb+Pl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Nov 2024 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:76:4b:21:f0:3b:ab:ba:8b:29:11:d3:a2:59:d3:23:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
        Validity
            Not Before: Nov 29 05:00:55 2024 GMT
            Not After : Nov 30 05:00:55 2024 GMT
        Subject: CN=4a25be799b02028308ab41dcd4812f0f52211a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:e0:8a:dd:cd:cd:a3:55:9a:ce:9c:48:8a:
                    cf:7c:c7:09:30:c4:cb:de:dd:14:2c:b2:53:1e:38:
                    c3:ee:9b:75:05:50:b3:10:f5:86:ee:ef:50:a3:5a:
                    36:0e:a6:56:0c:58:08:85:6a:a8:85:10:f2:a7:b4:
                    5a:b2:d1:42:d7:38:c7:61:0e:c4:e5:e2:c9:7a:fb:
                    51:e3:a8:14:30:46:08:f1:3a:e6:d9:ea:8a:a6:95:
                    9f:13:31:17:fd:48:f4:08:05:27:70:04:3d:a4:f1:
                    3d:e1:f9:ae:4e:e9:f2:ba:7f:df:3c:d4:f4:c9:c4:
                    97:64:6e:45:bc:a9:7b:46:f4:a9:e7:f7:50:ee:f3:
                    b7:a9:1b:76:d7:99:e4:e6:a4:c4:94:2f:63:af:0a:
                    fc:24:58:41:64:ee:5e:ed:54:6f:69:de:f6:32:e4:
                    45:3d:3e:a0:99:97:d2:57:ff:10:3a:c8:a9:cf:34:
                    67:32:43:7c:17:e4:f0:5a:c9:3a:d1:fa:5a:2b:0c:
                    79:0c:84:a4:5f:25:37:72:48:f3:89:d5:bc:da:7a:
                    df:f6:05:3d:2b:35:47:11:3b:3d:bb:1d:0d:aa:ff:
                    01:6a:95:fd:b4:7d:2d:76:45:f2:97:26:7c:77:cd:
                    1e:e0:4c:37:eb:06:2e:e8:d6:d8:1d:30:1e:77:04:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:BE:79:9B:02:02:83:08:AB:41:DC:D4:81:2F:0F:52:21:1A:7D
            X509v3 Authority Key Identifier:
                keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:ed:37:17:26:9d:bb:fe:6f:bb:3e:c0:ec:06:e6:31:ce:
         f6:dc:8d:eb:f0:74:ea:ea:b8:9a:f0:8c:04:7f:44:b5:ce:12:
         11:fd:69:9c:a0:fe:02:14:61:de:2b:8f:7f:80:f6:eb:e1:a8:
         8b:f2:e3:c7:76:96:93:2f:06:87:65:c1:c4:23:fa:9e:e1:be:
         0c:26:d1:3d:7b:8b:66:59:43:48:9e:a6:ff:3d:62:0b:ba:cf:
         18:e1:4c:0c:83:b8:e3:68:c7:5e:0a:0c:7a:6e:44:cb:c5:31:
         ab:fc:23:81:3e:76:56:25:4e:55:e8:68:b5:ee:e1:3e:0a:d8:
         82:ea:6a:74:cc:81:82:19:9d:0e:4d:ef:85:cb:0c:00:3a:01:
         c2:0c:c6:9c:7f:fd:1e:89:ab:c3:e5:5e:d0:32:62:f5:e4:d2:
         bd:28:11:5d:33:e1:e7:d8:e9:75:ec:48:6f:0a:7b:16:54:36:
         25:87:10:2b:76:f2:db:66:4d:3e:64:31:8f:62:8d:07:7d:ae:
         28:29:2b:46:e4:03:6a:6d:b8:51:a9:71:6d:2d:94:d3:17:fa:
         7f:f3:24:61:aa:88:db:fd:87:15:aa:a6:a0:fb:11:cd:10:13:
         0d:23:10:aa:23:bf:eb:92:d8:88:3e:c2:ce:33:54:d1:2e:96:
         cf:81:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:36:58 2024 by rpki-client on console-fra.rpki-client.org