Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File:                     9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier:          YawFKSlPfKHtq9A5kJQRgQvpNEVRgHLdiwjqLiT2naQ=
Subject key identifier:   79:B0:D6:5F:E6:F8:E7:A1:8B:64:13:CA:F4:6A:10:75:A8:66:C2:FF
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer:       /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial:       019355769A18C267910C62CCF05737230632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number:          05D9
Signing time:             Fri 22 Nov 2024 20:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:56 +0000
Files and hashes:         1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: t2JwfTs9fY0CnH5WkT83bvUig7WjRcvm8bux4tVY+u8=)
                          2: MwJjYmve23PoG-d-1pMPYhKndxU.roa (hash: sbkL1rnph6d5BqIKqyAeKnOaZInsQg1TWdpAAU9paDU=)
                          3: rPyc5DFx0_hDHpOF9HXc0MSbFwI.roa (hash: u4PfP7EZ+MTANlBjCKZ8ZhIXE0iYJIyEQLthrEawMpY=)
                          4: seYAmAchBGNWkiroKaXczYu13ws.roa (hash: nAnK/HevkyEb/SM319Lql4AsJw6FHB8rxHmAcVvVS44=)
                          5: wIoUijKm8q8hv90-ixuX1q2f6To.roa (hash: /pVZczPDChzxuX3Otg38tQsFhTnJrznxAADvpnxTSHQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:9a:18:c2:67:91:0c:62:cc:f0:57:37:23:06:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
        Validity
            Not Before: Nov 22 20:00:56 2024 GMT
            Not After : Nov 23 20:00:56 2024 GMT
        Subject: CN=79b0d65fe6f8e7a18b6413caf46a1075a866c2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:d5:f2:4b:c9:18:a5:d5:22:f7:be:90:cd:
                    1c:c8:c7:86:3c:73:02:0f:95:63:66:44:9b:e4:99:
                    b8:40:fd:22:ba:0e:ed:8c:56:56:0d:9f:77:1e:1a:
                    d9:6c:57:46:bc:45:66:20:6d:a7:5a:4b:58:41:2d:
                    bc:02:30:ec:66:ac:6c:ea:8b:45:b3:c1:57:bc:3e:
                    f2:15:66:e7:5f:a2:0e:3a:b0:d7:72:9b:37:e6:8d:
                    72:91:5e:ca:ef:3d:fe:87:3c:15:9a:af:65:6b:af:
                    34:b5:75:ef:47:17:51:b8:d8:35:4e:1f:fc:3b:a4:
                    91:12:c7:a6:ff:05:73:82:f8:c2:21:ec:2e:43:7b:
                    63:19:75:13:c4:a2:24:83:f6:47:9a:14:9f:5c:82:
                    3a:73:23:35:9f:88:94:f7:cd:61:83:7e:01:0d:f4:
                    2b:cd:c2:af:47:e6:2e:96:50:12:04:10:f4:62:a7:
                    59:54:3c:2e:3c:a4:ff:97:40:0a:83:2e:ac:79:a7:
                    27:de:3f:ef:23:58:3c:e0:5d:65:b8:61:8a:3a:ad:
                    8c:5e:77:4e:37:a2:43:c0:04:79:7a:de:8d:26:d2:
                    ee:3c:cf:3c:b3:1e:d7:f9:bd:9a:12:7f:5e:0f:86:
                    12:17:d2:08:74:3b:9c:fa:b1:88:b2:5a:c1:9a:4d:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:D6:5F:E6:F8:E7:A1:8B:64:13:CA:F4:6A:10:75:A8:66:C2:FF
            X509v3 Authority Key Identifier:
                keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:25:a8:06:fc:e9:e3:89:1d:e9:60:89:c5:57:ff:99:a8:f9:
         d2:4e:1e:6b:a9:9c:88:b6:87:d3:ae:13:3c:35:8f:97:29:8b:
         7a:b4:8e:a2:6f:43:2b:83:26:01:d7:d7:87:7c:65:d0:41:60:
         b9:c1:05:d5:df:0e:58:5e:5b:72:15:bb:2b:12:b8:92:13:e8:
         63:96:37:40:5a:84:56:92:3d:df:9b:e7:38:5e:19:59:b9:79:
         b4:5f:a5:ef:ec:b6:0e:93:58:49:09:73:cf:8f:5b:5f:1c:44:
         fd:df:5b:62:60:20:3b:89:f2:44:1a:fa:f0:01:ee:8c:1a:66:
         7e:dd:41:c4:34:de:5a:a5:e7:b5:41:de:7a:88:2f:9d:4d:e4:
         be:f4:b8:e4:33:c7:f5:f4:b2:02:cd:dd:88:5a:d7:82:31:4a:
         06:19:ba:b7:c4:37:f1:c0:fb:24:26:d5:69:5b:12:d6:f1:0d:
         2f:ce:6c:0f:72:7f:be:f9:03:5d:16:85:9a:13:89:5d:2d:8c:
         02:1c:bf:e6:c1:5d:99:ec:52:93:e7:df:ca:f5:13:b3:c8:90:
         9d:2b:07:5b:46:d5:d3:f2:83:a5:2f:19:bf:8e:5f:c5:23:b9:
         4e:e0:22:82:56:05:dc:a5:1b:fe:13:fc:ec:c9:f9:ab:e9:a5:
         e8:3d:8f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:40 2024 by rpki-client on console-fra.rpki-client.org