Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          j6ata6gdPHFqegCyNC0IpgXEn3S+wRFaXfveoQwhAp4=
Subject key identifier:   AF:E9:28:DC:08:1B:60:D1:36:27:18:E3:97:63:F4:D3:8D:8D:78:51
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       0191FAB50F55A0A6CB3750A3B9B30FE1264B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          0128
Signing time:             Mon 16 Sep 2024 12:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:55 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: DhPDkXULrovmPV38lcFYbxfNojPHw66f4PVczDCLUZY=)
                          2: pQCtyhycb29ZldrwBrFN0Z3tPE4.roa (hash: yBPBDNGX6i75Di0OTCg0blLB+j1b2vzgHt8OmZG5Xwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:0f:55:a0:a6:cb:37:50:a3:b9:b3:0f:e1:26:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: Sep 16 12:00:55 2024 GMT
            Not After : Sep 17 12:00:55 2024 GMT
        Subject: CN=afe928dc081b60d1362718e39763f4d38d8d7851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:c7:d1:ee:cf:5f:1a:95:87:3c:69:a7:31:
                    63:a0:db:97:49:21:c5:9e:5f:a2:b8:b1:f5:e7:08:
                    fe:32:87:13:f1:03:b2:11:d0:94:b2:e7:a4:16:58:
                    b1:5e:bc:c8:a5:55:57:15:ca:27:a6:01:c5:2a:c5:
                    45:6c:bd:7e:38:fc:e1:cb:18:41:df:13:62:df:66:
                    eb:bc:a9:df:dd:e1:3c:68:62:83:40:92:2b:12:e3:
                    f0:0c:96:5a:8f:54:14:73:4c:8d:ca:52:59:e2:11:
                    66:a5:0a:97:48:de:f9:2c:d7:d4:8a:f8:46:f7:25:
                    ea:9e:9e:e2:d1:a7:d6:2c:ac:cb:65:c0:d8:6f:c4:
                    e1:e0:d8:c0:75:93:1e:a1:d2:cb:af:1a:af:3f:94:
                    ad:f8:03:9e:73:46:7c:8f:93:19:7b:e1:95:31:9c:
                    e4:2f:da:f6:5e:18:35:ae:ee:74:a1:60:3b:94:c3:
                    2c:7d:60:ce:c1:40:19:f0:df:c6:c6:d6:e0:b2:39:
                    f8:44:59:82:fc:c3:27:79:19:89:20:c3:74:be:f9:
                    89:0b:ae:3d:f4:92:e1:df:2e:5a:e1:7f:71:65:87:
                    44:7f:c8:81:f6:74:0c:52:34:96:db:37:37:bb:d3:
                    41:49:da:c8:73:cf:38:67:e3:ee:05:0a:73:a2:dd:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E9:28:DC:08:1B:60:D1:36:27:18:E3:97:63:F4:D3:8D:8D:78:51
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:51:36:79:94:10:eb:9b:6d:2e:f1:7c:3f:d3:b0:3f:ba:72:
         37:d8:3b:52:af:18:aa:4f:0f:92:60:fb:34:f6:9f:f9:bd:41:
         75:69:42:7e:86:e5:2b:ef:52:66:98:b0:6f:a6:22:28:b6:b1:
         1e:fb:25:c8:91:42:2c:e8:c4:2a:28:a6:97:f4:cf:31:df:83:
         09:04:3c:44:50:98:c6:e8:a0:29:4f:55:f8:e8:f8:12:4a:76:
         a0:84:f4:17:92:e7:49:ea:fb:dd:2b:d0:bf:3e:2f:54:a8:f1:
         e0:a9:83:67:ac:6c:c9:9c:b5:71:ff:6d:51:ff:c3:3d:84:e3:
         4c:5d:b4:fe:1f:3d:44:21:5d:52:ac:a5:d7:d8:72:1d:ca:ae:
         29:45:72:e5:12:ab:62:5c:48:0e:67:c7:38:4e:4b:30:64:de:
         44:63:f7:00:b7:f3:ab:0a:d9:f7:9d:7c:82:8d:e5:af:82:4d:
         e0:da:e4:94:39:0f:4f:61:06:38:c8:9e:1e:70:e9:9f:38:6b:
         4d:e4:52:0f:0f:28:ac:ed:06:e8:e0:3e:a7:c8:01:6c:45:6c:
         9d:43:fc:7d:39:f8:6d:df:04:4d:5c:2f:f1:5c:97:26:ef:46:
         fb:f0:2e:99:0c:ac:41:5d:40:21:6e:3e:b8:1b:62:ed:01:78:
         b7:2c:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:07 2024 by rpki-client on console-fra.rpki-client.org