Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File:                     1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier:          V0PgCKGgWBvCvSUh6bhM/g5JvENjExfol8SNGWnrDKU=
Subject key identifier:   9A:C3:1C:CB:DE:8A:35:06:FE:DF:28:77:E1:55:2D:B2:97:81:9A:E5
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer:       /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial:       019368FCEEF77487CF94E80390F39DF21C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number:          094D
Signing time:             Tue 26 Nov 2024 15:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:26 +0000
Files and hashes:         1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: vvC6VIWVKRpYjZcj/tVNgOh1ZSq8TT5313l1YUEjs10=)
                          2: ibbUyELQhKjbyC4vGuBJQ9JvHI4.roa (hash: yhXWbPVrcUcuC8qY1sWv2JnA+afHPBx2Lp6OeW/psOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:ee:f7:74:87:cf:94:e8:03:90:f3:9d:f2:1c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
        Validity
            Not Before: Nov 26 15:00:26 2024 GMT
            Not After : Nov 27 15:00:26 2024 GMT
        Subject: CN=9ac31ccbde8a3506fedf2877e1552db297819ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:00:5d:82:14:0c:50:2a:b6:78:20:6f:7f:
                    91:26:4c:4e:94:09:0b:7b:c8:3e:a1:fd:43:f5:0e:
                    92:0a:bf:38:a2:76:48:3e:5c:f0:8a:a3:3e:b7:07:
                    b3:c1:c8:a5:69:91:16:eb:b1:f3:ab:b6:a5:85:4d:
                    f6:70:6b:08:7d:d5:a9:26:0e:ba:1d:ee:a8:6c:9e:
                    36:26:59:3c:fb:86:92:64:28:36:bd:47:96:9b:64:
                    1b:7b:10:26:2f:3e:8f:3d:0a:6e:94:9c:11:e1:6e:
                    58:e4:fb:06:fa:98:15:80:47:90:da:d2:f0:79:54:
                    69:6f:53:37:70:8b:8d:df:9d:a2:15:76:d3:cf:d4:
                    03:94:85:f1:13:a2:7c:bf:81:f1:c4:82:7f:fa:13:
                    da:6b:7d:45:30:b3:b6:97:ac:1d:45:fc:7d:47:bc:
                    1b:ed:58:f8:5a:65:25:13:42:f3:dd:74:1d:a2:3a:
                    32:15:71:28:b8:35:e3:ac:bb:14:db:ca:cc:0d:b3:
                    78:81:01:06:91:5d:ec:78:bd:fa:0d:d8:77:8a:4f:
                    6a:2d:2e:7c:35:62:34:14:02:a4:c1:11:d3:af:39:
                    26:74:54:59:48:7e:6f:c2:ec:37:0e:b1:48:95:7d:
                    ee:cd:f4:9f:72:3a:e4:3b:33:b6:51:84:a2:6f:9a:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:1C:CB:DE:8A:35:06:FE:DF:28:77:E1:55:2D:B2:97:81:9A:E5
            X509v3 Authority Key Identifier:
                keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:e7:be:d4:cf:c2:2c:68:65:5a:6d:f1:ba:35:89:59:c5:
         8f:83:ee:bc:9f:0f:0e:93:16:6d:74:fb:17:db:f9:98:2e:d0:
         f0:6d:f2:e1:9d:99:cc:22:38:d8:b1:7f:ae:38:8f:b5:01:3e:
         6b:93:d2:ec:28:85:c6:aa:75:43:f5:e8:06:63:53:fb:16:a1:
         5f:9f:af:06:e1:61:ff:ed:66:31:e7:b7:d7:26:f5:80:b8:48:
         ad:52:14:a3:67:d1:a3:96:13:ed:e7:fd:4a:11:40:f8:f2:ec:
         37:49:04:b5:f7:fd:fd:ba:3a:86:4d:d1:31:d2:e7:4b:8e:2c:
         9f:6f:f9:69:92:90:53:c4:01:ac:cf:9e:f5:d0:e9:e3:34:50:
         05:9c:f1:5d:84:f1:31:69:29:e7:be:7a:b5:a5:7b:02:d4:29:
         ef:de:87:88:0f:ba:09:52:bd:55:1c:d1:7a:50:15:9f:40:a4:
         5e:7f:b7:36:63:cc:a0:9b:7b:26:e5:93:de:62:cd:91:5d:63:
         02:01:e8:d4:a9:fb:1f:eb:c6:28:4a:27:de:f1:b1:ca:c3:b6:
         de:97:6c:15:05:13:b5:ec:f1:8c:e0:c2:3f:36:17:93:b5:2d:
         a4:28:c8:8c:37:48:dc:fa:ce:ab:21:58:0b:a5:78:c5:55:47:
         c9:ce:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:11:24 2024 by rpki-client on console-ams.rpki-client.org