Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          FRZz55qdLFWy0FGaw8fTujva7oh/TR4UHotq+W0FRbI=
Subject key identifier:   1B:EB:66:2F:7C:59:27:BE:6A:5B:97:6F:5D:9F:DC:64:C7:DC:3E:9F
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       0193542C9420BCE9913090F7853DF08A2786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          097F
Signing time:             Fri 22 Nov 2024 14:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:27 +0000
Files and hashes:         1: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: rQ24iLxcEbzEKjFIuhR3+JILGUK6FWg0jEzpQAYXNAE=)
                          2: LJk9CC3g1D0CFfApDqO8XEIR7VA.roa (hash: Yp6hPQk1XKed7qc83Oq5KLSilTgDEykOVki44gCJOuA=)
                          3: S5dz3z9Cm87R3IqdJrkuO_tY3Qs.roa (hash: ZHDP633fEHerHhKsRXU30ALgM6nqsujDkyCkQcsSeO4=)
                          4: Y4A45d0CfWkDxh1kLMuI40yvtRM.roa (hash: SaRvaxd1y1jbiKw0uDkpVKkvIcamscb58b5FKh8gifY=)
                          5: q4VEQrbnIXp2-ayL4LM-hdM-fIE.roa (hash: amqTnJge9v+r7h4YcffAZjyBY7gTBY4SBtzhEqfUvzg=)
                          6: vxI1DEr5LXrFtENG1ZHEAhhPF7s.roa (hash: UCKyeGj0KIqv6UmWla/GlGpbz9gDClZKD1fAoHtjTmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:94:20:bc:e9:91:30:90:f7:85:3d:f0:8a:27:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: Nov 22 14:00:27 2024 GMT
            Not After : Nov 23 14:00:27 2024 GMT
        Subject: CN=1beb662f7c5927be6a5b976f5d9fdc64c7dc3e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:43:98:1c:44:a4:38:43:55:ec:ab:10:25:
                    8b:44:37:0b:a5:7c:9a:23:e2:45:01:1e:71:3d:a6:
                    22:17:da:3b:6d:ae:ca:97:54:8e:7b:d9:6d:d8:01:
                    84:8f:ce:a8:9e:4a:96:0f:d0:1e:95:23:18:7e:07:
                    8d:69:f3:c9:09:e1:93:38:f3:0f:32:ec:4a:25:55:
                    b9:a9:86:94:25:12:fd:c5:70:e4:e4:ef:5a:91:bf:
                    d6:92:4e:7e:14:b1:aa:0b:bb:dd:db:e2:6c:da:89:
                    c7:83:13:f1:65:90:2e:2a:66:de:dc:02:65:8b:57:
                    26:81:e0:32:b1:1d:dc:f1:ad:16:fa:01:f3:e7:18:
                    65:e7:2f:0a:c7:ba:e6:df:01:4b:39:0b:81:54:5d:
                    0b:bd:5e:ba:98:29:d2:75:44:87:f4:9a:6a:ee:e2:
                    e8:52:88:75:97:41:de:23:63:bd:27:53:99:33:7b:
                    26:77:3c:89:85:de:a9:f7:1e:15:f5:af:8f:f6:a1:
                    e6:76:3d:62:82:f7:59:4c:1c:57:8b:e8:8e:f3:20:
                    c6:de:ee:29:0b:4d:4d:10:0d:cf:ea:97:93:2f:03:
                    7c:65:ab:da:fd:db:05:26:50:65:0a:7d:44:4f:07:
                    0b:71:3c:5f:0b:d8:20:16:4b:77:c8:6a:78:f3:08:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:66:2F:7C:59:27:BE:6A:5B:97:6F:5D:9F:DC:64:C7:DC:3E:9F
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:66:a5:09:2e:fc:d7:8f:4c:03:a3:13:1f:4e:58:df:27:71:
         88:47:6e:c4:5b:8c:07:28:df:87:43:75:5e:51:28:98:db:06:
         5d:42:85:07:a1:7e:a6:a8:3f:ec:b7:e2:dd:1b:29:07:a1:30:
         f0:e7:81:53:66:4d:fe:de:2d:0b:6b:79:47:21:86:cb:6f:5a:
         c3:44:00:0e:06:38:a7:e1:6a:5a:f1:43:fe:a2:e9:c7:01:12:
         c4:21:f4:61:9e:9d:2c:af:c3:6e:5b:50:dc:6c:0b:66:68:45:
         83:c8:3e:dc:9e:6b:33:f3:96:58:ed:06:7a:71:c1:92:a0:79:
         93:e8:29:11:21:4c:ae:35:a5:86:04:98:21:de:99:6e:e3:6c:
         6a:88:ee:92:34:3e:72:03:89:20:8a:7c:91:06:45:89:ec:18:
         5b:70:8e:4d:ac:a7:f0:50:ac:76:29:2a:82:12:0a:7b:57:ad:
         cd:20:32:c3:02:7c:b1:ab:d4:13:33:de:f7:bb:cc:50:42:94:
         ab:de:93:3b:90:af:e0:8a:6f:8a:e4:44:e4:9c:96:7b:e9:2f:
         5e:94:b4:71:83:46:89:c5:9d:6f:2c:64:a9:3b:f9:69:b5:44:
         0a:91:6b:28:dc:9e:12:ae:75:ee:cf:b0:a1:ae:bc:d7:f8:6c:
         37:27:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:01 2024 by rpki-client on console-ams.rpki-client.org