Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          kbKVTzlUTsitXSwZ9t+JY9hTuBghHMvOoX7E/pAhqUo=
Subject key identifier:   95:32:9A:6C:2C:71:E3:74:C4:DA:E9:6C:45:A7:04:F6:33:1F:73:E2
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       019352ABDF4F0F59A29C6A71A1C98BFD07CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 07:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:15 +0000
Files and hashes:         1: HASr_IsSqNH38LLp4UsLt8zR7LI.roa (hash: zThxE4Zfm44LkdQbKvwBSupZldhMTh8aPg99Wzp6grs=)
                          2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: NFxZXJdQcGiyxG+DzTgaoHx4oCwGLK2ZaHqyCar0V/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:df:4f:0f:59:a2:9c:6a:71:a1:c9:8b:fd:07:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Nov 22 07:00:15 2024 GMT
            Not After : Nov 23 07:00:15 2024 GMT
        Subject: CN=95329a6c2c71e374c4dae96c45a704f6331f73e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:2e:70:6f:c7:87:1e:8d:0b:38:58:b1:e4:
                    a7:35:62:8e:8e:33:10:62:1e:5c:98:bc:58:1b:35:
                    0e:5b:98:bc:2e:c1:df:58:d3:9d:9f:18:22:80:1d:
                    a0:92:86:1e:e5:d2:ef:fc:98:da:65:00:4c:6b:c9:
                    d3:77:5d:1c:e6:6f:78:74:7e:c6:e6:81:87:2c:c1:
                    b8:3e:a3:75:1c:03:ef:a7:9f:27:36:5f:58:0b:3e:
                    e5:68:94:1d:e6:bf:10:29:39:b0:bd:da:31:38:5c:
                    12:7c:b7:42:65:16:3f:90:77:cc:a4:fa:db:8e:d9:
                    bc:90:b6:59:da:e6:1b:f9:41:64:6d:18:9a:3e:30:
                    98:4d:a9:05:9e:08:7f:6b:63:bb:73:fd:63:45:95:
                    1e:18:00:91:d8:e2:6c:7b:04:30:9f:ee:14:79:df:
                    3a:7b:24:8b:25:f8:75:2a:1d:60:cd:a2:79:84:d6:
                    6b:35:c4:f1:14:e3:06:ab:ff:d8:16:65:56:e9:97:
                    2b:e8:ff:21:7e:01:3f:20:65:94:0d:c1:8f:38:6e:
                    7b:e4:1c:de:5c:40:9b:66:57:00:8e:56:0c:d4:14:
                    39:f6:3f:fb:29:71:22:12:5a:e9:b0:32:9a:7d:3b:
                    23:3b:36:38:cf:af:44:ae:09:ef:64:73:5a:56:98:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:32:9A:6C:2C:71:E3:74:C4:DA:E9:6C:45:A7:04:F6:33:1F:73:E2
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:66:a0:a2:4a:fa:18:4e:89:85:00:52:5c:e8:67:29:63:0e:
         45:09:e6:64:87:1a:67:42:f5:a3:24:02:f8:75:0f:7f:1a:46:
         84:27:e9:ac:aa:de:61:0a:e9:0f:a1:f3:3f:78:3a:9d:37:9c:
         1e:90:3d:b8:47:f1:cd:ad:d1:58:10:51:af:c4:54:82:a8:99:
         2c:b4:cf:5b:cc:01:73:e5:8f:ee:ad:b5:ab:86:98:d7:0e:cb:
         3f:0e:2d:3c:92:04:6f:04:fe:44:9c:d2:50:9d:e4:9b:90:ee:
         5f:a7:af:e9:d9:a0:74:07:96:50:94:e9:7f:a2:9b:19:0f:c4:
         73:49:29:22:3f:68:8d:d4:9e:a4:76:79:c4:72:14:7e:48:14:
         c4:7c:98:d9:fe:b3:13:16:20:61:ee:6b:b0:3a:0a:fd:7f:d9:
         84:8d:ed:38:f4:eb:55:fd:e1:3e:98:08:53:f4:e1:15:3b:7f:
         db:a1:28:c0:5e:b7:49:d2:e1:3b:96:f9:8a:66:7a:d5:d4:8c:
         58:14:05:ba:33:f6:41:39:b8:62:33:3f:b3:de:56:be:b7:fd:
         ff:a7:04:76:0e:42:fa:62:9a:5d:31:b9:8d:f5:e3:1f:58:86:
         fc:31:21:3f:0b:e5:e9:e8:26:0a:51:15:f0:b6:27:03:4d:3d:
         1d:86:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:35 2024 by rpki-client on console-ams.rpki-client.org