Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File:                     4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier:          EGJn0nege6v/pE+xgJXgPx3TxgSooXeEjIrMGqt75sY=
Subject key identifier:   6C:75:59:91:AB:01:C4:5E:89:0C:CE:C2:EB:34:DC:F9:9A:2F:DC:E1
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer:       /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial:       0193549ADDD3D1A32C0B64185D31D6AC7A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number:          05D4
Signing time:             Fri 22 Nov 2024 16:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:55 +0000
Files and hashes:         1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: amzSj+6qiNFT+OdQOJCUsDsIUSvgoBkVZkJ15aHuoMM=)
                          2: SnhtNDCI9NmRDN23GoxywSqALGA.roa (hash: 4PNAmmpNXDPndInvEEYT4snsLYm9BACUvTlY0tX2IEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:dd:d3:d1:a3:2c:0b:64:18:5d:31:d6:ac:7a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
        Validity
            Not Before: Nov 22 16:00:55 2024 GMT
            Not After : Nov 23 16:00:55 2024 GMT
        Subject: CN=6c755991ab01c45e890ccec2eb34dcf99a2fdce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:c1:5a:d8:bf:5a:18:0a:4d:bd:89:c4:87:
                    75:41:e1:e9:74:d6:38:c4:1f:e2:3f:ad:28:1a:3f:
                    d4:cf:08:6e:14:13:a5:21:94:64:a4:c1:98:18:36:
                    6d:a3:c1:a7:be:ac:a0:16:aa:bb:6c:af:13:47:e8:
                    44:a5:ae:4d:05:17:bc:4d:02:06:ae:f1:4e:99:dd:
                    cd:ef:55:02:6f:ff:ac:e0:e7:16:ea:fb:6f:44:96:
                    02:02:92:81:09:74:08:26:7f:2c:56:3d:0b:36:a9:
                    cd:c0:1c:8c:82:65:81:b9:fa:79:e0:0a:89:38:59:
                    3a:23:62:e7:40:b4:3b:7e:ea:e2:f7:8d:cd:5e:2d:
                    a9:44:75:bc:c3:0e:b0:40:5e:2c:75:74:6a:bf:8e:
                    33:b1:59:4b:fe:62:73:30:07:1e:9f:9b:f4:be:be:
                    89:7b:3e:2c:59:ce:e4:3e:33:07:39:cf:4f:ce:b5:
                    37:d4:b1:35:c3:97:9f:39:14:ec:d4:95:47:e8:f2:
                    97:ad:52:de:69:0a:06:72:f2:34:b1:10:ba:40:26:
                    07:1e:23:5e:b6:9e:2f:f6:ea:d7:c7:4a:f3:ab:83:
                    1c:21:03:31:57:75:b5:6e:8d:f7:60:89:13:7a:04:
                    e8:09:b2:de:8f:cf:44:71:be:d6:f1:50:84:59:ff:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:75:59:91:AB:01:C4:5E:89:0C:CE:C2:EB:34:DC:F9:9A:2F:DC:E1
            X509v3 Authority Key Identifier:
                keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:56:c8:cd:21:8e:2a:71:fb:58:b1:8e:fb:fc:c6:a1:3b:
         e9:7a:93:80:e1:2b:60:40:6e:3e:d8:e1:f0:ac:24:c7:52:b7:
         98:2f:70:6e:db:5d:14:68:2f:c5:20:7a:7e:ea:da:5e:05:ef:
         99:86:b3:98:f4:e6:4c:a7:4f:37:ff:48:d9:5e:6a:fc:17:87:
         00:b1:64:5e:dc:7a:43:b3:9f:66:1e:18:1e:72:ef:88:bd:39:
         d8:c8:13:66:45:ea:33:6b:f0:54:54:7a:40:3f:aa:17:5a:2b:
         35:96:57:9a:3a:06:fc:e2:65:41:49:7d:31:27:2c:a5:fa:4b:
         e9:37:0a:60:a1:8c:0e:4a:7e:97:2c:9d:6e:11:71:48:6d:61:
         38:dd:54:df:32:14:21:63:ef:0b:7c:4d:75:33:4b:a5:f9:f1:
         23:c7:49:66:42:29:4b:91:2a:cc:56:1e:bd:ac:23:77:02:82:
         62:9b:02:9e:a5:bd:ba:0d:70:34:70:b4:5f:4b:ae:05:87:9b:
         d7:37:ad:f0:3a:54:9a:be:d3:75:33:09:28:50:93:70:12:cc:
         f5:d4:b4:98:38:cd:27:90:44:da:11:fe:de:b4:33:e7:c3:2a:
         d5:d1:c1:8f:6a:68:c0:f8:c3:2b:74:77:2f:13:73:4f:f9:67:
         96:d5:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:28:49 2024 by rpki-client on console-ams.rpki-client.org