Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File:                     m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier:          /NKtWzp0b1aWC7bJu7fzTK6GpaYSP9UYh0FoSeWZY8Y=
Subject key identifier:   4F:E2:7B:E1:00:96:31:19:4F:79:36:A0:61:5A:BC:7F:FE:98:08:26
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer:       /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial:       019364B274832E6A060E28C7543DB5E9E64D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number:          0979
Signing time:             Mon 25 Nov 2024 19:00:36 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:36 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:36 +0000
Files and hashes:         1: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: o6oh6xIDfkKkYV99acpA7ejo1l1kbJXAyjPEx/Fctf0=)
                          2: zpx_PJZm-ygs_kr2Yt8yQi2Ddlo.roa (hash: EOReRVR+uKRp7RFHsFtC2LkVlXeY//7eRsqw2dxye9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:74:83:2e:6a:06:0e:28:c7:54:3d:b5:e9:e6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
        Validity
            Not Before: Nov 25 19:00:36 2024 GMT
            Not After : Nov 26 19:00:36 2024 GMT
        Subject: CN=4fe27be1009631194f7936a0615abc7ffe980826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:97:f5:bf:7a:6e:f0:63:66:99:6c:7f:28:
                    a6:90:f4:35:ed:b4:c2:e4:51:bb:2f:0b:33:32:83:
                    50:7b:24:b4:54:27:6e:14:99:ae:f2:b8:11:de:f0:
                    54:5d:c6:b6:60:14:c0:07:58:ef:93:bb:66:f3:6f:
                    b6:5b:19:f9:dd:b2:a0:4b:d1:f4:11:56:ba:ef:c4:
                    6b:7b:b0:df:36:85:18:63:45:b4:2e:c6:43:c4:b1:
                    fa:4e:9b:71:76:60:bf:30:6b:b2:a7:cb:f9:fd:a3:
                    05:db:da:84:a5:07:b2:da:d1:aa:8c:f9:4c:41:cc:
                    b9:f0:39:25:e1:34:ab:d2:ce:9b:21:ad:fa:d0:0e:
                    30:92:eb:78:6a:a8:6e:85:16:66:3c:f8:a6:4d:fa:
                    82:9a:1a:b0:f0:5a:22:ae:42:9e:96:7a:8b:df:c9:
                    fd:07:f9:55:b1:20:d4:be:8e:4c:cc:c8:9f:49:02:
                    e9:89:60:c5:85:46:f1:eb:2b:2a:f9:f3:1a:1f:fd:
                    59:eb:45:62:c8:96:6f:a5:c2:1e:e4:51:65:23:a6:
                    06:9a:05:d1:7a:84:5b:d5:60:77:65:0a:b9:cb:35:
                    64:20:44:be:d6:e8:b2:25:f8:19:88:78:01:f8:2b:
                    0f:72:ee:a2:7e:43:f2:17:e0:c4:df:10:b1:fa:10:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:7B:E1:00:96:31:19:4F:79:36:A0:61:5A:BC:7F:FE:98:08:26
            X509v3 Authority Key Identifier:
                keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:5f:bd:11:5f:98:65:92:c2:c4:82:ea:91:c7:c9:b5:4b:
         d0:79:b4:9c:21:23:a6:19:d3:e1:7f:b1:05:9a:fa:da:9f:6c:
         42:47:20:b0:e8:93:9b:d9:d4:ac:3d:a7:a8:46:aa:cb:85:32:
         7c:80:28:98:fc:d0:16:e1:f8:e7:83:45:df:35:9e:a1:e3:75:
         23:8a:30:e8:87:71:f2:16:2c:1c:4d:dd:d8:ca:da:69:e4:e0:
         9b:88:99:c0:b1:64:ed:ea:e8:40:65:b6:6d:c8:4a:23:1b:86:
         7e:68:4f:5c:cb:2b:fa:fd:64:f8:15:10:64:ec:a9:bc:b7:e5:
         b7:c4:c5:89:42:9a:c5:22:88:2e:29:ec:da:93:ab:5b:c9:ec:
         37:c2:31:f3:bd:ad:68:08:4d:df:c3:16:e5:96:4f:d8:15:b5:
         29:35:fc:e4:b9:ab:41:fb:df:a9:a9:d6:25:6b:09:78:00:8a:
         2c:19:e5:88:bb:7f:f7:a2:92:96:0e:4a:20:1b:d8:9c:94:4e:
         11:fa:85:d6:99:8c:ba:a4:c5:23:b6:b6:d0:9d:ee:ad:e9:b6:
         51:40:72:e1:38:5f:0c:10:83:5f:5e:9e:75:b1:97:88:99:65:
         0f:77:8e:c5:e2:00:9b:eb:cd:ec:90:a4:7c:e2:7e:1b:1f:6b:
         ae:61:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:05:27 2024 by rpki-client on console-ams.rpki-client.org