Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File:                     4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier:          N3/qkW1mmAY9/HfGdXQFFmsxZuXXnNKUz34gDx0ssu8=
Subject key identifier:   91:08:57:31:4B:AB:A0:B2:B2:3A:BF:29:DF:AC:2F:18:8C:A9:97:8E
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer:       /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial:       019369A17BAB7B8FD8CFE7F73D6164AAF1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number:          0165
Signing time:             Tue 26 Nov 2024 18:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:10 +0000
Files and hashes:         1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: vQCsl/QMleJzU56qRYF/ImbLUTTUakAW7tJ3xabXF0Y=)
                          2: U_zJ2ohl8pwluFdM2POLYKyQkR8.roa (hash: Nw/I8usu+doC+nJyBJ1Uj6K2Gh4ZnH4SZOGP5Qt3pBc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:7b:ab:7b:8f:d8:cf:e7:f7:3d:61:64:aa:f1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
        Validity
            Not Before: Nov 26 18:00:10 2024 GMT
            Not After : Nov 27 18:00:10 2024 GMT
        Subject: CN=910857314baba0b2b23abf29dfac2f188ca9978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:8c:0c:98:7c:88:4c:cc:a2:43:36:d2:02:
                    ae:2c:7c:00:cb:02:0d:ae:45:ff:a8:71:23:ef:de:
                    0c:94:13:b9:71:7d:2e:bc:a0:6b:29:db:c1:6f:c7:
                    52:b8:d6:19:09:02:20:66:d1:3c:da:e4:8d:57:9e:
                    37:49:2b:00:ec:61:5b:4b:37:96:8f:fb:15:e5:35:
                    37:ef:49:50:4d:3b:e9:6b:1e:c5:b3:ef:98:11:16:
                    06:4f:b2:15:4e:83:1c:0e:9e:8a:4f:38:9d:0f:89:
                    f9:9a:a8:dc:3e:50:1b:37:2f:81:a2:b0:f0:8c:6d:
                    19:e3:91:90:ea:11:51:92:44:73:66:49:f1:80:e7:
                    7a:12:ed:e8:1d:99:42:8f:aa:94:b9:1e:9f:b7:25:
                    22:2f:8a:63:22:f4:07:ae:86:30:33:3a:43:00:55:
                    b9:4f:b3:da:89:bd:e5:ff:d5:16:bb:d1:3a:77:56:
                    bf:f4:be:43:bc:e7:16:1a:42:03:b6:6f:9b:44:93:
                    83:af:06:1d:59:73:b6:e0:60:24:9b:a0:04:be:bc:
                    cf:21:45:e3:95:3d:62:22:c3:88:65:b4:f3:ef:a6:
                    0c:db:19:db:0f:3f:67:08:b2:0e:66:f1:76:32:94:
                    db:85:87:82:66:20:42:c4:64:85:f3:7a:08:34:e4:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:08:57:31:4B:AB:A0:B2:B2:3A:BF:29:DF:AC:2F:18:8C:A9:97:8E
            X509v3 Authority Key Identifier:
                keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:df:29:be:2c:b7:f4:55:d1:ef:e2:55:73:37:0d:df:ab:
         dc:ed:d0:23:30:27:77:ea:bf:2a:e3:85:ff:9d:3b:76:84:20:
         0f:68:da:db:96:ab:29:8d:78:25:9d:5b:9f:78:14:4f:d1:45:
         12:15:7f:95:24:da:4b:9b:28:81:91:fc:5d:cb:22:ae:10:ed:
         dd:89:6b:0d:aa:9c:83:22:55:c4:a9:59:57:e7:1a:53:4b:84:
         6e:52:4e:dd:7b:e3:a9:a4:3b:4a:b1:d7:3a:29:b3:07:6b:6c:
         44:1f:e9:29:08:2b:de:6b:93:5e:34:c0:4c:d3:d4:7e:4e:7a:
         da:1c:bd:e2:72:af:31:22:c3:7a:87:c4:44:07:c6:a2:5b:51:
         f7:7d:af:ac:f8:59:66:ad:85:c1:82:b1:ed:27:2e:b3:ce:70:
         51:d5:98:b1:77:22:9e:1c:41:96:25:e1:40:41:4b:ec:ca:83:
         c6:bf:ca:0d:9d:1b:f7:b1:31:7f:09:b8:71:ac:8b:7c:44:8a:
         f8:0f:fb:3f:a0:0e:f4:61:f7:b4:a3:93:c7:27:36:71:73:3a:
         8d:3f:59:f1:e3:47:73:ca:54:7c:bf:da:85:d4:cf:75:ab:55:
         41:92:32:3a:0d:e6:68:f7:05:13:0d:18:33:c8:1c:ea:57:e4:
         09:d1:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:09 2024 by rpki-client on console-ams.rpki-client.org