Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          3hBNXR9MaqYtoiGMHQsmmn1OSu0tc8xKsOlxzencjco=
Subject key identifier:   61:EA:02:22:93:C3:EC:18:A3:E4:85:FB:0D:2A:92:92:00:CE:2D:A3
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       0193568AACFA2DA2E42857BE01F94EB69ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          02F9
Signing time:             Sat 23 Nov 2024 01:02:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:29 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: qrlAJYVihdmBS/A4Arl8p3hC2+hAyK8EsNntUWrXUkw=)
                          2: FZn7lMenBikZp8DHoGJyAtNX6XU.roa (hash: xddHgsvNM/++X3nwncvcTnHMT1BCRZsBEF8XHbhon7A=)
                          3: OPdrMJgtC0CWfeAKSjXec5MhmIw.roa (hash: jOvvCVldZXCXoLPzA6PRegOqUPP1J0uUJhcXxwMeOLQ=)
                          4: t-KQX53Vrw9N2XSMBOWV_AdnH0k.roa (hash: gF0s/Z5aXH2ukPS2u+WGBv5QtgEIuNy4yeKAwTVt6YU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:ac:fa:2d:a2:e4:28:57:be:01:f9:4e:b6:9e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Nov 23 01:02:29 2024 GMT
            Not After : Nov 24 01:02:29 2024 GMT
        Subject: CN=61ea022293c3ec18a3e485fb0d2a929200ce2da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:94:a8:a5:ba:cb:fc:8e:6d:9d:a5:03:83:
                    0d:59:1a:36:a0:f1:76:7a:cd:61:c2:e7:6f:eb:8f:
                    6f:88:a3:91:42:d8:21:cd:6b:29:18:75:06:21:c1:
                    65:9a:2a:50:c3:fb:23:a5:91:5d:b8:85:e2:24:86:
                    2f:b7:9f:dd:30:30:49:23:b7:dd:4c:d7:bf:d0:92:
                    c1:a0:dd:4c:3b:ba:59:de:95:59:a0:96:0c:f2:37:
                    b3:ba:ce:68:b1:c8:a3:8b:da:3d:7e:02:80:cb:3d:
                    39:cb:46:83:a4:56:e2:52:cb:45:ea:9d:ce:41:ad:
                    33:72:37:1a:7b:b0:43:28:97:75:bf:80:b6:ba:d0:
                    ec:f0:4f:14:89:03:d2:c9:ab:b7:97:36:46:87:e6:
                    64:75:d9:52:97:23:bc:af:a0:0c:90:d0:20:8e:19:
                    b3:02:72:53:27:bb:8a:ce:97:a2:c7:e5:4b:48:1d:
                    16:64:63:81:0f:d3:d7:f4:8a:2b:4c:ea:86:91:a7:
                    e4:48:bc:63:fa:7f:44:fd:d9:bc:a9:9d:31:ab:27:
                    95:b5:29:0b:6b:25:35:1e:34:17:fb:8d:30:13:b3:
                    aa:59:aa:0b:d9:80:f4:7d:aa:9b:4c:52:68:f7:2b:
                    09:c9:5a:7e:a7:02:19:3d:28:83:81:39:cd:0d:66:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:02:22:93:C3:EC:18:A3:E4:85:FB:0D:2A:92:92:00:CE:2D:A3
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:60:46:6f:b7:f2:a7:8d:f8:06:77:bb:09:2b:f7:d5:2a:a6:
         0d:04:ce:31:35:bb:4b:ca:db:ef:06:0b:e3:c5:12:bb:d5:53:
         77:93:e1:9e:cd:7a:e6:83:ae:8b:83:6c:6c:e2:91:74:5c:ad:
         5a:df:a8:0a:88:31:57:15:16:9e:b8:bd:62:ee:8e:f5:59:ae:
         ce:09:2f:55:4b:f8:cf:9a:ca:85:9d:ca:15:c5:31:97:35:ed:
         aa:98:13:5d:a2:40:7a:97:89:9a:3f:15:5d:77:48:7c:9e:6b:
         2c:32:d2:1e:59:48:44:36:6d:22:aa:8b:d0:95:39:04:ba:94:
         4f:9e:73:86:8a:d4:86:21:9d:9a:ca:1d:98:f9:5b:75:28:de:
         11:9d:c1:8f:ed:fb:60:c1:07:13:5f:47:f0:7d:3b:d1:f5:5f:
         cc:18:ed:6c:14:88:fc:26:26:9b:28:8e:24:cb:12:0b:bd:e4:
         6f:19:ab:0c:e7:33:26:a6:44:53:2a:8e:62:85:b4:93:64:43:
         da:ad:43:f6:e6:d5:8d:4d:f6:ab:1e:69:a9:f2:08:21:fb:59:
         21:69:c1:d8:5e:66:65:a6:96:64:8a:5b:57:42:bf:7b:a3:77:
         47:22:73:65:d2:c8:67:3f:37:02:2f:89:a2:62:f0:4f:c3:2f:
         11:5d:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:36 2024 by rpki-client on console-ams.rpki-client.org