Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File:                     9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier:          mM7iNKzWQ9OxJfSQOhQ/Pxqm17dn+vVm4DTRsaarBG4=
Subject key identifier:   FA:B4:61:02:4D:3E:A2:C8:AC:20:6F:8C:DF:17:6D:AE:14:10:03:1B
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       019358092A8A1E663B48040424FFFA01BBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number:          11E7
Signing time:             Sat 23 Nov 2024 08:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:15 +0000
Files and hashes:         1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: 2hWsUz5HxmNkTJeiqg6/dv3K5iFns4EQEivflT0F1HY=)
                          2: S7s5mZia_hjbb7IOY7Ny-tnD2xY.roa (hash: R89OHwokzzdW+71FgDVzpPf0hi6tCkdatA4CNKm3+q4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:2a:8a:1e:66:3b:48:04:04:24:ff:fa:01:bb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Nov 23 08:00:15 2024 GMT
            Not After : Nov 24 08:00:15 2024 GMT
        Subject: CN=fab461024d3ea2c8ac206f8cdf176dae1410031b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:c3:04:df:95:03:d9:02:f2:c0:23:7b:1c:
                    5f:6f:63:b1:c2:e3:cc:41:a0:8f:68:3f:a6:32:f5:
                    03:4a:43:1b:6b:b2:c8:a6:19:60:4e:76:3a:56:d9:
                    d7:6b:54:a4:4b:5d:ff:14:99:b0:dd:21:e9:bd:7d:
                    20:9b:0f:2b:f8:98:8e:a5:5e:26:05:05:bb:cd:8b:
                    eb:42:e3:4d:64:35:65:2d:39:f6:cd:1f:5c:d8:af:
                    4b:1d:1c:46:0e:85:7b:98:da:b1:6f:74:8c:1b:a4:
                    5e:be:9a:dc:28:d4:b9:55:10:24:4e:1e:84:5e:42:
                    35:ab:4b:53:c1:81:23:c7:21:2b:b8:95:28:d4:2d:
                    0d:70:7d:21:bb:e9:15:c9:d7:86:89:9a:8d:4a:ce:
                    33:4d:0e:9c:01:aa:58:8f:14:c5:ed:99:6c:bb:15:
                    ec:7a:df:37:a2:bc:7a:fe:26:3f:b5:d3:f0:ad:6b:
                    b0:4f:73:f8:2e:bd:30:e4:f7:1f:d3:86:a8:de:84:
                    12:bf:b9:09:4b:ee:47:7f:78:b0:1c:79:a3:72:1e:
                    c5:e6:2f:6e:17:24:2d:7d:25:f8:87:6f:ca:f4:a3:
                    5f:95:e0:8a:09:69:90:52:c7:64:c7:c9:06:ac:40:
                    f1:9d:41:cb:57:c0:98:27:64:43:fb:56:fb:1b:f5:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B4:61:02:4D:3E:A2:C8:AC:20:6F:8C:DF:17:6D:AE:14:10:03:1B
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:40:49:be:fc:89:ba:0b:be:47:56:0c:e4:c0:30:79:3c:
         98:62:cc:59:5d:12:6d:27:b7:41:eb:40:fb:3c:99:b7:b7:3d:
         90:a9:94:ba:0f:ed:59:ed:bd:9c:94:b9:2f:a2:c8:8f:b6:62:
         e7:b2:ff:a2:83:fb:67:61:44:33:40:b0:12:e9:7e:b5:b9:9d:
         d1:2c:7c:d0:62:8b:b3:97:97:ab:ff:23:03:fd:2a:91:9d:20:
         cb:65:99:56:d5:ec:82:cd:29:c2:d3:b4:07:33:4a:8b:88:14:
         12:5e:4e:e6:dd:a1:a4:6b:23:44:e1:7b:a3:01:98:f2:75:78:
         25:b1:cb:0e:9f:ae:2c:e5:69:e9:f4:69:3b:f3:c8:eb:8f:9f:
         75:22:0c:fd:b7:c3:8b:7d:64:11:00:9e:e7:61:29:d1:91:bc:
         3e:84:9a:a5:ce:43:ca:ac:a3:b2:8b:c1:4e:04:29:b8:8e:8d:
         6f:95:9b:1e:73:ca:15:1e:3d:03:a9:f3:28:d4:91:7b:24:51:
         f6:60:a9:4f:87:8a:89:a6:6c:9b:50:29:db:e3:4d:1d:47:c8:
         14:ae:59:61:78:ce:8e:c9:ed:83:91:ee:be:d2:76:f7:54:36:
         41:25:9a:ca:61:86:0b:13:e0:77:98:9e:42:1e:9c:d3:1f:63:
         d0:26:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:49 2024 by rpki-client on console-ams.rpki-client.org