Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/8d4fd5-db94-4c36-a60b-bae0c2045120/1/9emldy3-LTlG-ZWactOT-v4u-Ls.mft
File:                     9emldy3-LTlG-ZWactOT-v4u-Ls.mft (raw, json)
Hash identifier:          hED2ieDCVyq70Cuvj2z7uCrQrnEYGJ5Ss+oqPIRcK0o=
Subject key identifier:   F9:97:CF:95:BE:63:4D:32:8A:3D:F0:C9:D7:03:96:53:C2:9E:FB:DA
Authority key identifier: F5:E9:A5:77:2D:FE:2D:39:46:F9:95:9A:72:D3:93:FA:FE:2E:F8:BB
Certificate issuer:       /CN=f5e9a5772dfe2d3946f9959a72d393fafe2ef8bb
Certificate serial:       019369DAE5301E70D90A71C224BF044D1219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9emldy3-LTlG-ZWactOT-v4u-Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/8d4fd5-db94-4c36-a60b-bae0c2045120/1/9emldy3-LTlG-ZWactOT-v4u-Ls.mft
Manifest number:          06C3
Signing time:             Tue 26 Nov 2024 19:02:53 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:53 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:53 +0000
Files and hashes:         1: 9emldy3-LTlG-ZWactOT-v4u-Ls.crl (hash: ynWw+sDu211G0yhM6Q9VrAUD9hHXFVZFt3/QRn6Esv0=)
                          2: cqW_5cvjKxjhU2zHNmNg1T2i8QQ.roa (hash: O5xeifv+ySGzJpx3W27GxGJseZ7jxWmQ/r5Zw/R5of4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/8d4fd5-db94-4c36-a60b-bae0c2045120/1/9emldy3-LTlG-ZWactOT-v4u-Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/8d4fd5-db94-4c36-a60b-bae0c2045120/1/9emldy3-LTlG-ZWactOT-v4u-Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9emldy3-LTlG-ZWactOT-v4u-Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:e5:30:1e:70:d9:0a:71:c2:24:bf:04:4d:12:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e9a5772dfe2d3946f9959a72d393fafe2ef8bb
        Validity
            Not Before: Nov 26 19:02:53 2024 GMT
            Not After : Nov 27 19:02:53 2024 GMT
        Subject: CN=f997cf95be634d328a3df0c9d7039653c29efbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:b9:2c:4a:7c:c6:d4:82:ea:b2:40:de:f7:
                    b3:fd:f8:89:f4:c7:5b:68:cc:82:64:74:c9:15:6c:
                    2b:8b:9f:a5:b4:5a:8b:45:14:20:36:cd:59:0c:9e:
                    8f:c4:22:d6:38:80:2d:4f:a0:6a:3d:25:33:30:f3:
                    2a:62:4a:d9:67:45:3b:2d:df:6f:59:4e:0e:9a:0e:
                    fa:3e:ae:e1:bb:85:57:2e:28:e6:0a:8c:89:22:fa:
                    c5:d2:c8:f1:cc:a0:8f:7d:d2:45:14:ef:b9:04:27:
                    90:04:06:1e:3c:e6:6d:b3:ae:8c:1f:1b:6d:96:20:
                    1d:88:64:12:f9:65:b1:85:a4:96:96:4e:61:aa:32:
                    2d:36:32:9a:6b:5c:8b:90:0a:1c:8e:c7:e1:6c:07:
                    e7:c3:3c:90:c2:1e:7e:f8:4d:b4:a1:37:2e:6a:c0:
                    b3:28:a7:8f:c0:a8:8e:9d:12:14:78:3d:32:15:bf:
                    a4:02:9d:f0:93:b5:b6:63:31:55:e6:dc:8d:76:5b:
                    14:04:20:78:b8:c6:e7:a4:4d:04:76:9f:89:d7:3c:
                    98:ad:7f:b3:43:b2:a5:56:6c:98:6f:66:0b:73:02:
                    00:a3:4e:bf:d9:5c:40:94:ea:66:7d:9b:4c:28:94:
                    0b:b0:80:ee:a9:ed:14:de:17:24:17:43:5b:12:65:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:CF:95:BE:63:4D:32:8A:3D:F0:C9:D7:03:96:53:C2:9E:FB:DA
            X509v3 Authority Key Identifier:
                keyid:F5:E9:A5:77:2D:FE:2D:39:46:F9:95:9A:72:D3:93:FA:FE:2E:F8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9emldy3-LTlG-ZWactOT-v4u-Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/8d4fd5-db94-4c36-a60b-bae0c2045120/1/9emldy3-LTlG-ZWactOT-v4u-Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/8d4fd5-db94-4c36-a60b-bae0c2045120/1/9emldy3-LTlG-ZWactOT-v4u-Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:3e:f0:d4:e4:4c:d3:25:3b:82:34:d2:ce:fa:19:99:76:
         fe:e1:15:d4:36:a6:3f:65:78:3d:d3:a4:c3:7e:ef:5f:17:25:
         48:e3:cf:d5:9a:e1:eb:16:cc:46:12:cf:7b:6b:fa:3e:f1:2a:
         12:9e:e5:56:c9:52:a4:b6:92:5e:16:e4:98:d5:43:b2:ad:d4:
         34:16:68:65:60:6c:0d:78:1f:2c:44:ae:a8:fc:eb:79:bf:3e:
         92:0b:32:98:13:51:df:c6:e6:0d:ca:37:a0:18:08:3b:b5:4c:
         72:96:68:dc:78:78:a7:e2:47:4f:51:63:69:ea:a2:73:70:4e:
         ba:fa:12:2e:a9:3a:63:19:db:50:9a:b6:22:23:e1:22:15:a4:
         f5:54:1e:fc:76:45:a7:d8:bf:a7:a4:78:56:31:7d:ae:70:8e:
         69:45:d5:51:32:8e:70:7e:1e:6a:9b:f2:0c:92:0b:09:65:08:
         f9:8a:06:5b:31:9f:7e:19:80:8b:85:7b:94:50:4e:2c:e0:c7:
         64:19:cc:36:e1:d5:eb:f2:be:a8:77:e9:b5:0a:7c:53:83:90:
         6b:20:16:21:47:cd:2e:17:8d:2d:85:21:1f:a0:fc:04:87:f8:
         37:b0:7a:62:8a:26:fe:ff:de:05:ad:82:e4:10:77:21:9c:b7:
         72:c6:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:40 2024 by rpki-client on console-fra.rpki-client.org