Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File:                     d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier:          VYQEUcC5rKZdTIOkNx62kLM28Ekcl+sh3Aj7EiW+fXU=
Subject key identifier:   3D:97:82:A1:6C:91:BF:E5:44:16:CD:F6:A3:02:CB:34:75:D6:C4:00
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer:       /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial:       019369D88ADC1693E335A3EDB685516A77C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number:          0AF7
Signing time:             Tue 26 Nov 2024 19:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:19 +0000
Files and hashes:         1: I17BDfo2E1zvoWoKFJiy4xmNx-M.roa (hash: Rzzh28Bcxva2v2yHZstoSjp3pMx4pYBqiHmcrIGTbR0=)
                          2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: rwBQhrmhIgRVkvTCV+KuGP1wPh0/kfD0lBkxrD8MdHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:8a:dc:16:93:e3:35:a3:ed:b6:85:51:6a:77:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
        Validity
            Not Before: Nov 26 19:00:19 2024 GMT
            Not After : Nov 27 19:00:19 2024 GMT
        Subject: CN=3d9782a16c91bfe54416cdf6a302cb3475d6c400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:3b:91:c1:ad:9d:cc:6b:de:d2:44:54:cb:
                    75:23:b7:a4:40:69:51:fc:44:db:29:cf:81:32:2c:
                    d2:b1:7b:ee:64:b3:f9:25:23:9a:59:17:22:3a:5c:
                    74:41:b8:e0:46:bb:e2:d6:d7:25:2c:5b:60:18:33:
                    81:b4:e6:05:bd:9a:76:d3:e9:76:f0:34:ea:13:70:
                    ab:28:7e:35:40:22:68:fb:c1:5e:ca:e0:22:55:2f:
                    6c:e4:d7:29:c6:e4:08:66:1b:ac:fc:52:38:19:44:
                    2b:eb:72:a3:96:e6:da:00:5a:e2:80:b7:64:e8:75:
                    05:0f:12:fd:10:72:22:c3:a0:d0:5e:72:23:94:5b:
                    d7:7c:5d:94:a6:17:81:f3:bc:ab:d5:cc:14:7d:af:
                    b4:84:da:21:db:df:39:0e:bc:a1:55:fa:e5:b5:c0:
                    d8:c6:73:72:cc:90:20:09:ef:49:0a:50:13:8b:08:
                    15:ef:50:ed:1c:5b:17:bf:d1:d2:68:64:fc:e8:36:
                    f0:82:ab:d6:25:49:20:b5:08:e7:0c:e8:fd:19:55:
                    c9:8b:4c:39:90:c8:f0:59:96:0c:48:de:24:15:79:
                    2b:0e:4d:57:b9:c6:72:20:2e:f0:c3:f1:96:bb:b3:
                    6a:4c:48:b9:ae:b5:92:71:ef:08:2a:a5:e9:c6:f3:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:97:82:A1:6C:91:BF:E5:44:16:CD:F6:A3:02:CB:34:75:D6:C4:00
            X509v3 Authority Key Identifier:
                keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:98:d4:b9:0b:80:a1:b6:72:3c:9d:2e:a5:27:49:53:de:c0:
         42:cc:57:aa:d6:e8:d7:71:50:76:96:c9:4b:9d:7f:d8:06:b2:
         94:da:11:e1:1d:82:00:9b:61:1e:96:bc:2d:89:08:f4:c6:93:
         8a:14:fa:5b:36:6c:97:4e:cd:cd:91:3a:43:37:1a:7d:0d:59:
         1c:ab:d9:39:39:c8:f0:b8:80:e3:05:d4:27:da:40:58:d9:8f:
         05:53:c6:f9:d7:17:28:c4:b4:a5:27:b0:37:de:0d:f5:db:88:
         a1:d4:5b:84:48:7f:9a:c6:50:e4:59:09:a9:9e:7a:40:a6:f3:
         f9:d6:59:4a:b1:62:65:82:7b:7d:39:92:e2:c3:ed:86:92:69:
         40:91:78:92:2f:9f:ed:61:b9:46:55:8f:42:92:a7:ab:ff:21:
         bb:47:ba:ed:e8:e6:f3:c7:7d:30:55:8a:6f:4c:f2:ad:28:a1:
         b1:6c:a7:c0:79:b3:1b:6b:18:f8:4f:11:ae:3b:35:6a:51:cd:
         4e:2c:c6:46:ae:80:72:1a:1c:a4:4b:8a:78:5d:76:ea:55:36:
         3e:79:e0:d3:2d:99:14:ca:de:94:4c:c2:fa:4d:4a:a1:b6:05:
         0a:55:b3:d1:90:14:fc:bb:22:ac:fc:fc:c8:6c:aa:ce:1b:fb:
         c2:e3:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:55 2024 by rpki-client on console-ams.rpki-client.org