Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File:                     4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier:          /Jne3Mrm1BAlFBXTBQFEAncm5gq+MWMMUVUr/+okr0M=
Subject key identifier:   70:73:32:D8:AD:6D:74:3F:8F:D9:C3:D0:74:F6:74:F5:4A:10:96:E4
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer:       /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial:       019406B4432A0B379AE07105C73064387C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number:          0B4D
Signing time:             Fri 27 Dec 2024 06:01:04 +0000
Manifest this update:     Fri 27 Dec 2024 06:01:04 +0000
Manifest next update:     Sat 28 Dec 2024 06:01:04 +0000
Files and hashes:         1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: euDiul7VtxqBI5/IwyS8VQY+aTRI1OqAjnbayY0Pozc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:43:2a:0b:37:9a:e0:71:05:c7:30:64:38:7c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
        Validity
            Not Before: Dec 27 06:01:04 2024 GMT
            Not After : Dec 28 06:01:04 2024 GMT
        Subject: CN=707332d8ad6d743f8fd9c3d074f674f54a1096e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:70:5d:65:bb:5c:67:63:69:0b:df:e3:69:
                    de:06:03:ce:0f:d0:a3:97:fd:d0:d2:2e:88:b3:1e:
                    ca:fb:e1:fa:59:f1:1d:3a:5e:a7:00:2a:8d:d7:9b:
                    37:a2:42:ea:84:e7:98:26:6e:58:01:89:f2:b9:5b:
                    25:b5:37:cf:62:05:91:9d:6a:0a:23:9a:36:28:05:
                    5a:9c:4f:c9:3b:45:39:46:e5:ee:32:58:cd:d4:04:
                    ee:5f:01:64:62:e4:4d:a3:23:73:28:3c:e5:ba:80:
                    e1:57:ce:01:ee:df:18:63:0a:0b:7b:f5:86:dc:52:
                    fd:a1:43:40:d1:e8:03:25:fa:02:97:d2:8c:51:aa:
                    a7:d9:6e:9e:ad:87:eb:34:c5:79:ed:19:18:f8:ba:
                    ce:e5:8d:6c:d5:ea:49:80:6b:55:ac:d5:69:8b:77:
                    78:c4:cc:62:8e:10:db:54:a2:0f:dd:25:b7:cf:db:
                    6c:ae:5c:7d:40:65:f8:08:39:29:43:b9:68:12:e9:
                    3f:20:a2:8e:c2:70:14:32:67:7d:bd:45:be:f6:0a:
                    ef:6f:22:dd:7e:0e:aa:2b:c0:a1:d2:a2:a9:0b:ff:
                    3a:99:d6:86:70:3f:49:03:36:e2:22:8d:ae:69:8a:
                    02:05:80:d1:38:13:ca:ea:9d:d8:90:91:7f:e2:41:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:73:32:D8:AD:6D:74:3F:8F:D9:C3:D0:74:F6:74:F5:4A:10:96:E4
            X509v3 Authority Key Identifier:
                keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:c5:ae:c4:4a:d3:fd:98:30:9a:d9:ce:61:64:5c:3b:4c:
         e9:4c:ac:d0:63:95:a8:57:dc:90:8d:7b:70:ec:f1:0c:82:bc:
         0b:6e:e4:1a:31:8f:b0:ac:b2:2b:68:af:68:5e:bf:d8:a0:23:
         bd:90:1d:d1:af:bd:9a:bc:82:8a:55:98:85:b7:af:2c:6b:b3:
         88:1e:2d:dc:f4:f3:98:92:30:ab:1e:26:b3:c7:cb:6b:8c:c3:
         39:aa:ec:49:48:1b:c3:87:ce:05:3f:8b:cc:20:30:81:45:7a:
         de:d3:66:d9:66:6b:b5:dc:0e:7d:53:54:6f:52:58:a3:03:68:
         8d:0c:6e:63:e2:a1:41:59:13:7b:21:7b:b1:a6:85:40:29:1f:
         72:bf:69:82:a3:5e:2b:27:e4:00:34:f6:1c:8e:ac:ef:e7:e0:
         94:c2:be:d1:8a:38:f8:f1:b1:b6:85:e6:f6:0c:d5:1c:98:62:
         7d:8c:b2:ca:4e:df:b7:8b:4e:23:51:2a:a8:f2:1e:14:34:c2:
         cc:31:8a:11:38:5d:18:e2:9b:60:1f:5b:25:8b:d7:cc:ec:ed:
         75:8e:e0:4a:54:7e:de:2b:63:3e:ba:56:9a:14:e4:54:07:cb:
         3c:e5:f1:58:2e:bd:07:f9:30:0d:22:c5:f1:2e:c6:f5:af:ff:
         15:77:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:36 2024 by rpki-client on console-fra.rpki-client.org