Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File:                     J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier:          ZxJv3IEXS7gyNszSTuC0UoVkOVXIMJ8nlrqs1HjOcZ0=
Subject key identifier:   98:34:4E:18:69:F2:51:F2:D5:9B:BD:23:8C:B6:53:67:DC:05:A7:0F
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer:       /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial:       01921106319AC06E39F0286D11EC3165E22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number:          1257
Signing time:             Fri 20 Sep 2024 20:01:11 +0000
Manifest this update:     Fri 20 Sep 2024 20:01:11 +0000
Manifest next update:     Sat 21 Sep 2024 20:01:11 +0000
Files and hashes:         1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: GdRvmrgZdowcPg7SIKRilUQ4yeqBI0kYur6F+9Kw9uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:11:06:31:9a:c0:6e:39:f0:28:6d:11:ec:31:65:e2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
        Validity
            Not Before: Sep 20 20:01:11 2024 GMT
            Not After : Sep 21 20:01:11 2024 GMT
        Subject: CN=98344e1869f251f2d59bbd238cb65367dc05a70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:10:43:b5:ed:2f:4b:50:22:c5:32:b2:88:
                    9d:c0:87:74:15:1b:8c:b2:75:bb:b5:ac:77:b9:fd:
                    f1:67:6a:72:b4:80:65:2b:03:4b:9d:ad:af:ad:29:
                    0a:23:eb:bf:ab:e8:93:d4:66:88:47:07:38:39:79:
                    0c:a8:a2:27:cf:24:8e:bc:f8:2e:e9:26:d6:79:01:
                    e1:a6:0d:27:0a:af:20:0b:41:99:56:9b:5c:5d:43:
                    00:1a:5c:2d:bf:f9:82:84:18:54:d4:1b:c0:35:97:
                    cf:d2:b6:ca:2d:7b:b4:0d:7f:c8:30:e5:98:40:10:
                    e7:51:7d:ba:08:92:99:ff:22:2f:a4:76:7f:0b:89:
                    47:ff:1b:0b:68:02:b9:30:2b:62:fd:86:b0:dd:5c:
                    21:69:d1:b1:a5:06:b7:2f:5d:f4:91:41:26:ba:a7:
                    57:58:fe:05:a5:17:f8:12:3d:70:09:3a:43:de:03:
                    38:f9:8a:72:b4:77:6f:cb:bb:dc:88:65:c1:77:ff:
                    15:fe:2a:68:62:67:b0:af:2e:f1:2e:c6:b8:42:f1:
                    14:b0:14:26:2b:ee:db:6d:e7:e1:c6:b2:ae:d0:62:
                    42:cb:82:ea:d8:1a:11:17:11:37:ff:06:6e:ff:b5:
                    7d:96:69:2c:85:a1:1a:14:90:98:73:1a:c3:bb:e4:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:34:4E:18:69:F2:51:F2:D5:9B:BD:23:8C:B6:53:67:DC:05:A7:0F
            X509v3 Authority Key Identifier:
                keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:a0:44:74:93:0c:ac:c9:ce:1e:0f:c2:7a:eb:6a:5a:f3:
         f3:bf:04:60:4f:5b:ce:e6:81:5a:01:f2:06:83:e5:62:60:a6:
         ba:48:b6:96:77:54:fe:7a:08:bc:bb:2e:0b:95:8d:59:a1:99:
         d3:68:14:de:e7:fd:33:1c:29:ad:88:b4:4f:89:ed:9e:33:82:
         d4:53:d3:ff:57:7b:3b:e2:2e:b1:22:76:a7:b7:12:0a:26:e9:
         df:d1:31:c9:bd:b8:c9:5e:cf:53:ca:59:75:3d:5c:5f:1c:a3:
         06:52:59:33:48:c6:72:03:a2:49:95:3c:ca:d1:17:bb:66:4c:
         24:0a:9d:ed:a0:4f:ff:25:87:a6:c3:9e:f4:4b:32:8c:9b:48:
         a9:b9:8c:9d:33:b2:e7:d1:44:2d:59:ef:d2:10:ea:7b:19:e2:
         ac:b9:25:60:b5:a7:93:04:34:99:69:62:79:7b:bb:f6:c8:4c:
         c9:8b:ff:30:b5:a4:e2:95:54:57:5f:21:07:3a:e1:22:d1:be:
         70:fb:1a:d6:e7:5f:2e:dd:79:b6:b6:38:2a:dc:23:b4:fa:8e:
         24:13:04:97:0b:00:53:71:2a:fe:91:3d:d1:ad:61:3e:f1:c4:
         26:f5:3c:9d:53:10:b6:1c:95:1d:50:9d:0a:7d:18:b7:1f:e8:
         63:b6:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:44:49 2024 by rpki-client on console-ams.rpki-client.org