Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          Ft4Vmgn3WHkq7QwfoGuYSrLademuoOlDz4R3NKNw794=
Subject key identifier:   32:9A:08:25:0F:A4:57:27:75:D3:FC:00:0D:89:0B:4F:B0:6F:99:BC
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       01935840389C8DBFCC518324DACF5081BF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          01DD
Signing time:             Sat 23 Nov 2024 09:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:23 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: 26xrC0RU4weMLLX9ye6S0pDnw+LVM0/tUeDnaxgKFdQ=)
                          2: pQCtyhycb29ZldrwBrFN0Z3tPE4.roa (hash: yBPBDNGX6i75Di0OTCg0blLB+j1b2vzgHt8OmZG5Xwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:38:9c:8d:bf:cc:51:83:24:da:cf:50:81:bf:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: Nov 23 09:00:23 2024 GMT
            Not After : Nov 24 09:00:23 2024 GMT
        Subject: CN=329a08250fa4572775d3fc000d890b4fb06f99bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:5f:d5:6c:de:0f:97:aa:82:80:4a:d3:69:
                    15:b9:2a:fe:2a:49:b2:24:01:57:bc:bd:86:ef:71:
                    ba:f9:17:7c:22:84:f8:72:19:ac:be:94:b5:53:a9:
                    06:96:97:2c:06:e9:c2:9e:39:d5:b2:98:25:d3:ad:
                    29:61:63:5f:93:4b:04:7a:68:ba:b7:d7:7a:11:53:
                    d5:d5:d1:de:c5:88:c5:ea:fe:2a:72:e3:67:2f:c8:
                    dc:58:43:30:04:5f:7b:df:43:8a:e2:a0:c1:31:b9:
                    88:bb:f1:3f:1e:36:bb:0d:f9:a2:86:f3:65:6e:0c:
                    17:96:ec:c7:b0:83:3e:57:44:25:e5:c3:45:0b:4d:
                    72:8c:dc:d9:5a:96:a8:2a:12:97:d8:31:0e:6d:c7:
                    ac:86:5d:86:d8:46:75:2e:30:0f:91:00:c7:82:1b:
                    5a:6e:7d:bf:a4:be:d6:27:f8:f9:71:d2:80:17:96:
                    5b:9b:94:fc:65:a8:5a:d7:a1:d6:3a:ef:30:fb:93:
                    f6:d1:e0:14:67:2e:f7:4d:7d:27:c1:64:fb:3d:bd:
                    9e:94:a3:ba:23:0f:20:50:ec:55:99:86:74:2a:2b:
                    a5:74:69:49:b8:1d:17:15:64:01:e8:89:61:41:af:
                    b1:af:2e:26:98:bd:ac:fe:b6:c4:e0:b1:72:53:62:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9A:08:25:0F:A4:57:27:75:D3:FC:00:0D:89:0B:4F:B0:6F:99:BC
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:ca:11:7b:80:04:ed:c7:0a:d0:3e:f7:6b:02:63:3b:e7:
         60:ec:fd:52:a2:36:45:49:9a:05:fb:fc:9b:f3:ac:4c:a4:9f:
         e6:36:06:13:b4:da:9b:bf:90:1d:20:ad:e8:85:f3:d2:bc:d8:
         a6:99:91:20:0a:ec:59:44:a2:3e:52:97:86:c2:33:b3:75:90:
         33:b3:62:e5:e5:ed:e1:52:fd:16:87:36:65:a2:48:b7:d9:3a:
         85:8d:3a:f2:1b:bc:36:64:66:7a:e2:0f:ab:62:8a:c0:34:96:
         2a:86:e5:fc:16:75:56:4e:e1:83:83:6c:54:8c:fc:f9:b4:3d:
         c6:77:61:43:d1:b1:e9:bb:a3:5f:75:5d:2f:fd:d6:08:04:27:
         35:28:10:14:d9:d6:a1:7c:0c:0a:1e:8c:09:e0:71:9d:33:8c:
         7a:0a:12:ff:81:8e:69:c2:ed:37:7f:76:13:f3:b8:82:52:0d:
         ce:99:c2:46:f8:31:7d:18:ed:84:3f:da:a4:59:9a:b7:0b:84:
         4a:a2:5a:df:1b:ea:29:09:00:ad:79:3d:d1:d7:19:b7:85:cd:
         78:61:71:94:e9:6e:1d:f6:ae:c5:c5:1c:c1:04:4e:cc:9f:a7:
         6e:8b:67:98:61:af:49:14:2b:05:68:1c:2c:75:1b:ca:3d:a2:
         b3:c8:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:29 2024 by rpki-client on console-ams.rpki-client.org