Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File:                     Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier:          OQ8fILeo5Fa3a5qD4u37cSmPqYHc020X6i8r86ucyiU=
Subject key identifier:   AA:74:0C:EF:E7:71:96:DB:48:97:D8:97:55:78:E4:16:68:7A:E7:70
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer:       /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial:       0193572DBC8EC88D1A6F3A8098C0D28CD80A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number:          04B3
Signing time:             Sat 23 Nov 2024 04:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:35 +0000
Files and hashes:         1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: pkkpvVLnVKP/eU8RSsPpggXODrQQFk8xhXjGLSfOMmo=)
                          2: yD_gw5wUZEQTwKrJYVDU-HRw7ZE.roa (hash: PZMFaB3mP9dzg+/OVlluz6IK43ekH3iRpT3b5BsYT8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:bc:8e:c8:8d:1a:6f:3a:80:98:c0:d2:8c:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
        Validity
            Not Before: Nov 23 04:00:35 2024 GMT
            Not After : Nov 24 04:00:35 2024 GMT
        Subject: CN=aa740cefe77196db4897d8975578e416687ae770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:4c:5c:ce:12:82:a1:c5:f9:59:9e:79:3d:
                    19:e9:5f:e5:66:d5:ed:17:e4:c5:2c:1e:89:f9:5c:
                    18:d9:e7:82:55:bf:c0:fb:d4:cc:99:93:07:60:12:
                    7f:45:67:9c:b2:65:53:74:da:cd:8b:b4:b4:32:17:
                    3f:b8:01:de:dd:d2:88:6d:ed:b3:b8:f6:65:12:d5:
                    89:72:f4:a8:12:b1:f1:38:4d:41:3e:76:fd:c7:a6:
                    f1:51:7c:32:8e:15:dd:73:56:da:e8:98:0a:e8:f4:
                    10:93:4d:97:95:5b:b3:59:5e:91:93:75:ce:e8:1d:
                    40:9e:61:d2:c9:86:c2:00:19:7a:e5:d1:ad:60:5c:
                    51:59:89:91:02:10:38:6a:55:97:a3:c3:86:54:19:
                    a9:c9:09:f2:9c:48:4b:d5:56:fb:d0:75:29:d1:7d:
                    23:62:43:20:bb:56:53:90:75:70:8a:f6:72:cb:3b:
                    6f:cb:1b:8d:31:1b:b6:ea:77:5c:15:62:7a:50:4a:
                    cc:40:dc:24:45:e0:2a:32:a6:df:b6:85:67:c1:64:
                    ef:73:4c:40:5e:d0:72:50:bd:1e:1d:bf:5f:9b:c6:
                    ba:d3:96:98:89:20:3d:79:7f:67:d9:47:bf:77:19:
                    db:08:ae:3e:91:b1:95:da:76:6f:95:3f:bb:d6:22:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:74:0C:EF:E7:71:96:DB:48:97:D8:97:55:78:E4:16:68:7A:E7:70
            X509v3 Authority Key Identifier:
                keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:34:40:4f:05:10:1b:49:cd:4f:de:29:6d:6c:36:4f:d3:50:
         93:99:85:7b:61:57:48:14:72:5c:fb:e3:64:a5:f5:12:73:5c:
         cb:2b:87:02:91:dc:d9:63:c8:c8:03:64:df:1a:11:34:b5:c7:
         4d:ef:84:3a:af:28:ca:b9:92:fe:e1:55:90:d7:be:a2:8b:5e:
         2a:f7:83:1e:12:31:2b:42:db:10:3a:fc:db:9b:e6:b8:fb:7c:
         32:bc:90:be:f7:8f:cd:1d:78:22:61:f5:63:48:5f:a7:5a:cc:
         f9:dd:d8:89:f4:06:be:cd:64:c1:df:29:e5:7f:99:dc:d4:ef:
         1b:14:e1:77:6a:93:6f:73:cf:f1:1e:6c:31:7d:24:ec:01:b3:
         3f:ff:9b:84:5f:e5:a3:98:2d:4b:97:8e:04:99:c4:a7:c6:d2:
         3c:5c:a6:e5:6d:c2:80:ce:1b:18:a8:fe:27:59:28:bd:0e:f4:
         a3:ea:b0:74:a0:ca:25:3c:95:db:37:73:a9:c6:0d:be:46:74:
         05:92:f5:df:24:54:17:62:16:b7:ee:92:12:a3:99:b0:4d:ba:
         45:db:56:c1:44:76:83:42:95:0b:f1:c6:79:55:41:2e:7c:5e:
         f8:88:6c:ef:ee:07:3e:84:68:7f:81:7a:f1:73:80:5a:d3:db:
         2b:7e:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:58 2024 by rpki-client on console-fra.rpki-client.org