Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          LiD5TvwX/4gxp1GSV1CKBufVI916sAvb9cpZhfBRD18=
Subject key identifier:   4C:42:2F:C6:57:F6:71:C9:F3:6D:17:F8:B8:B5:1F:59:D0:15:DF:13
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       0193553F7949DC1A4F7F27BDA0C9D84AB206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 19:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:43 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: VuiKgBgeInKgYAgWQc81Wqb5RKYn2NoAGh+AA57vdxo=)
                          2: bhOZBycWb86UhLTISNKALRsPASk.roa (hash: qk2QiV8RRuDy2H1/H8sMhmIqNFJZXqQtQjU7qLMqJ/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:79:49:dc:1a:4f:7f:27:bd:a0:c9:d8:4a:b2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Nov 22 19:00:43 2024 GMT
            Not After : Nov 23 19:00:43 2024 GMT
        Subject: CN=4c422fc657f671c9f36d17f8b8b51f59d015df13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:f2:9b:d8:99:36:1b:86:16:34:94:1d:55:
                    6b:fe:4e:62:a5:eb:7c:77:da:43:2e:04:a9:ba:76:
                    7b:d9:dc:f4:74:1d:a3:56:d7:c8:de:0a:e6:23:12:
                    59:22:90:21:5d:09:4f:e8:ab:a0:91:a3:f5:00:38:
                    6b:a7:92:a8:c4:16:77:73:85:89:67:98:51:15:31:
                    cd:31:44:cc:84:66:86:94:69:28:db:ad:43:97:35:
                    1a:bd:50:58:68:2e:5e:6d:59:c4:bd:ff:2f:11:6e:
                    c4:04:d7:60:76:d4:28:1e:5b:8f:51:4a:8d:cf:41:
                    ca:1b:9e:1e:2b:38:67:78:90:e9:9f:24:62:f8:20:
                    d3:2e:d6:a3:bd:30:54:47:da:15:90:34:c1:43:31:
                    1d:ef:df:04:29:55:d7:10:15:08:e9:38:3c:66:9e:
                    8a:b4:1b:1c:81:a5:a6:93:01:89:07:56:2e:14:ff:
                    54:cb:d9:14:57:3b:2a:f2:9c:3a:e9:ce:b4:c9:83:
                    07:8e:fa:72:69:4b:a6:80:fb:70:4b:28:c2:fc:a7:
                    08:29:68:45:87:47:60:ad:8a:7e:98:44:b1:d3:29:
                    f8:40:f7:26:eb:8a:6d:3d:7c:4a:91:12:c0:f5:ac:
                    18:16:55:51:df:3e:aa:e3:3f:e6:cd:71:54:60:99:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:42:2F:C6:57:F6:71:C9:F3:6D:17:F8:B8:B5:1F:59:D0:15:DF:13
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:6d:05:8b:38:06:93:82:a3:52:c1:de:d0:d6:8f:c3:65:e1:
         0c:14:0d:38:aa:08:8c:9c:cc:7f:1c:ef:58:54:cd:05:32:d5:
         bb:6f:4a:6e:04:45:3c:fd:b0:10:d3:c0:d1:67:dd:9b:a2:3b:
         40:4e:f8:69:1f:21:28:15:59:38:a1:05:84:73:5d:d8:e0:6f:
         e5:36:1d:bc:d7:a2:25:1b:f4:29:dd:50:b3:d4:a3:22:32:96:
         c9:b1:12:c4:01:e8:76:e2:67:e0:c0:7e:44:68:ba:54:91:d4:
         14:73:1f:50:fb:6c:15:e7:40:68:9e:90:9c:19:6e:da:cf:ae:
         67:2f:db:c9:42:fc:0b:ff:2d:09:0f:df:03:19:37:7b:f5:06:
         bb:30:1f:95:21:f0:74:d3:fd:40:fb:76:93:5f:77:ef:f8:de:
         cf:01:21:97:05:55:a8:c0:45:15:82:12:20:94:a3:63:8e:5c:
         15:e3:4a:b9:ba:a5:42:f3:76:41:f3:de:53:e5:4c:ee:56:de:
         67:52:0d:41:86:ff:60:b2:9e:01:bc:8f:95:e8:69:de:a3:1f:
         de:a1:52:6b:01:3d:51:49:87:a0:ff:b6:ee:ce:21:e1:6d:70:
         28:e4:2e:e1:43:a2:db:bd:19:59:02:0e:48:a4:17:9e:5d:18:
         fe:bd:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:09 2024 by rpki-client on console-fra.rpki-client.org