Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
File:                     c9CjqymaZZjTK8dUUAIYiHlbPSs.mft (raw, json)
Hash identifier:          ZtnYetLb+Pf1D3RGKSacvZi/APqaarYtyajHRqStAmY=
Subject key identifier:   94:D3:9F:03:E0:4F:11:E3:F4:15:2C:10:BB:5C:F1:18:1F:81:A8:97
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Certificate issuer:       /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial:       019356F6BD5A0108C36AC761A9B15127205F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
Manifest number:          0603
Signing time:             Sat 23 Nov 2024 03:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:31 +0000
Files and hashes:         1: c9CjqymaZZjTK8dUUAIYiHlbPSs.crl (hash: yKTJiT6y516So40RS3LFuuqzHtHH/zv4sxJPJFUS9Jg=)
                          2: kmmuI_oO1owx7Qtx163l-3CW-Go.roa (hash: Z32UkMcOXZnxIS+z84tVYJ2oNKaYCDEacSmkJICgNDk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:bd:5a:01:08:c3:6a:c7:61:a9:b1:51:27:20:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
        Validity
            Not Before: Nov 23 03:00:31 2024 GMT
            Not After : Nov 24 03:00:31 2024 GMT
        Subject: CN=94d39f03e04f11e3f4152c10bb5cf1181f81a897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:69:77:04:41:91:87:8e:39:65:ef:17:0e:
                    ac:90:29:84:b8:bb:60:44:d1:31:d0:6a:23:20:e9:
                    81:ec:bd:d0:c3:49:f8:9a:fc:11:48:d0:7f:eb:79:
                    cf:1a:50:c5:27:e9:d9:5a:37:c2:80:82:88:11:c7:
                    e8:6d:bb:7e:38:d6:39:2e:d4:8f:b3:c9:a7:5a:d6:
                    d2:e1:39:09:97:70:3b:42:18:f8:68:1f:d9:d2:74:
                    a4:0f:94:c8:44:c8:88:e6:21:09:e2:b2:be:a2:29:
                    ba:f7:fa:de:e8:34:af:e8:5f:c7:42:32:e5:35:1e:
                    49:f6:4d:6d:15:a2:2a:10:38:ee:e2:e5:8e:5e:aa:
                    a0:58:1d:a9:1b:45:08:cc:69:20:57:32:cf:02:ae:
                    9e:0d:bc:33:e1:44:10:12:52:ee:2e:47:bf:dc:fc:
                    9b:5f:85:db:2d:04:cc:80:03:04:db:8e:81:83:f0:
                    ec:a6:7e:e1:ef:66:c8:b1:43:fa:d2:c0:71:a4:1b:
                    f2:12:49:45:37:c9:05:e4:3a:4b:64:1a:10:3d:15:
                    f1:9b:a7:61:aa:ea:1d:b3:d8:ee:aa:32:fa:87:92:
                    5a:d3:6d:e6:32:fa:37:03:01:2a:fc:d0:ee:ca:7a:
                    96:b9:a5:c3:28:67:83:62:5f:dd:0d:a7:85:07:49:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D3:9F:03:E0:4F:11:E3:F4:15:2C:10:BB:5C:F1:18:1F:81:A8:97
            X509v3 Authority Key Identifier:
                keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:a9:c2:e0:81:15:03:aa:92:2d:90:b3:1d:19:3f:c5:9b:
         78:50:c2:99:98:d4:89:fc:70:c2:73:ac:24:05:48:a1:12:d2:
         47:86:1f:f9:08:d9:ce:50:24:5e:c8:5b:ae:b9:77:96:99:81:
         74:38:57:27:81:ae:64:e7:bf:dd:96:07:fc:57:9c:92:b8:5d:
         33:7a:a5:4d:0e:8e:ad:5c:62:f0:7a:96:4f:f9:c1:d6:f2:5d:
         13:0b:e2:83:fc:42:a7:c4:38:48:f9:7f:5f:6e:f4:5f:e2:9d:
         45:0b:88:85:4e:90:ac:00:0d:e9:25:1e:5a:56:51:22:7c:2e:
         44:4e:5d:f2:e2:fd:14:bf:42:aa:6b:22:1a:d2:02:1c:15:d4:
         77:0d:e4:ef:f8:01:dd:e3:3f:37:e3:f2:7a:7e:48:fa:ef:4d:
         fe:d9:09:97:f8:2e:cc:28:45:8a:87:55:17:0e:94:18:0a:66:
         92:c5:2b:7c:2d:f3:74:69:bb:c1:e0:9d:63:fd:20:80:bc:70:
         97:62:2c:65:5b:b6:d6:83:2d:6a:07:c8:fc:c7:83:d0:7f:44:
         51:99:63:91:2e:2e:57:b1:39:f4:7d:de:48:85:23:24:f6:13:
         79:01:f8:83:49:83:80:19:19:de:c0:f8:24:b1:15:05:53:e3:
         20:75:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:22 2024 by rpki-client on console-ams.rpki-client.org