Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          o/L1d5tqo/f6wHvWAY1ik//fYcGzNbrRuTtI1x4auWM=
Subject key identifier:   7E:57:2C:DE:BF:57:FD:6F:94:51:FE:C9:53:32:EB:56:02:C6:92:1A
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       0193542C7E975FE1FB56335216DFFB8F01D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          033D
Signing time:             Fri 22 Nov 2024 14:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:22 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: yrKn1JarrCiVs8woV/UpKmYQXe6dKX9mBpYX65QBihM=)
                          2: NOMFHSKn28UQ7K4Dtdoj183-0t8.roa (hash: ptKU/dHNhdedl7I5+D8rtah2J2aYeoxZoKg5mv5YlsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:7e:97:5f:e1:fb:56:33:52:16:df:fb:8f:01:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: Nov 22 14:00:22 2024 GMT
            Not After : Nov 23 14:00:22 2024 GMT
        Subject: CN=7e572cdebf57fd6f9451fec95332eb5602c6921a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:b0:e8:16:65:f9:89:e6:38:74:c2:f4:92:
                    68:9c:72:e8:4d:5d:c6:20:c6:4c:aa:b4:c0:60:9f:
                    7b:2f:5c:81:95:65:d1:a2:b2:71:df:c1:73:64:f8:
                    9e:76:5e:54:fd:ac:7e:94:04:0c:bc:4b:7d:c5:dc:
                    d5:38:9a:b4:1b:87:90:31:1d:3c:cf:8d:bb:a7:78:
                    b0:8d:84:7d:45:d9:07:e0:96:18:ab:40:75:81:40:
                    28:68:76:dc:5e:10:a0:88:74:4b:69:b5:d5:2b:82:
                    80:66:b8:18:b5:a5:2e:89:4a:91:80:a9:dc:0a:f3:
                    8c:36:e2:57:68:87:d5:3f:ff:23:3f:b4:82:78:28:
                    83:f0:b1:5e:c4:e4:7c:7f:d1:8a:8f:c0:4b:1d:8b:
                    b7:26:d9:e7:2b:da:e6:1e:bf:e3:5f:5f:9e:42:b0:
                    c2:8f:96:8f:4e:4f:92:db:8d:ab:70:7d:64:f2:bc:
                    44:3a:5f:d8:3c:fd:23:04:39:a7:34:56:d1:b6:35:
                    cb:0c:14:66:9f:91:6f:bd:e1:03:f1:dd:1b:e7:22:
                    95:6c:1f:dd:9a:9a:61:a2:f6:f0:29:c3:42:a1:05:
                    64:f5:d1:b4:0e:34:7e:87:93:e2:6f:75:11:c0:05:
                    82:0b:d7:1b:5f:2f:64:c3:fb:aa:2c:52:c8:a9:8f:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:2C:DE:BF:57:FD:6F:94:51:FE:C9:53:32:EB:56:02:C6:92:1A
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:17:4f:47:b6:d8:f4:bb:fe:cd:13:24:e4:7e:5f:ff:ed:
         e1:59:98:03:19:db:d9:06:c6:e4:ab:25:6a:be:00:46:70:37:
         24:c2:7b:20:a7:fb:73:88:b4:fc:1b:73:41:e0:3b:74:b3:d0:
         26:fa:12:5d:19:e2:2e:40:48:07:52:36:1c:cb:8a:e7:df:3e:
         cc:07:1b:1e:93:4e:ff:42:01:50:e4:4a:96:c3:4f:83:2e:30:
         44:95:9d:2d:c6:af:2e:68:8c:8d:00:1a:ad:8d:03:37:f5:ad:
         b8:ef:46:b7:ca:62:2c:d3:14:7a:96:77:f9:b0:03:8c:d1:51:
         70:7e:b0:e3:5c:8b:bf:e4:ca:f2:06:4d:db:73:c3:97:f7:87:
         cf:f5:33:95:49:d4:cb:f9:4a:47:46:fa:73:9e:c4:41:8b:99:
         5b:bb:60:81:6b:fc:54:02:93:5b:56:7d:50:20:dc:80:04:ce:
         88:76:89:c1:ab:b0:54:ae:4b:cd:45:3c:d1:c8:1f:3c:dd:ba:
         bd:06:fa:71:40:1c:66:35:65:28:df:ff:33:84:85:b8:9d:40:
         f3:07:01:28:87:ca:2d:c2:76:0b:55:d6:02:38:a7:b1:97:2d:
         ee:eb:ef:bb:d5:b0:ee:84:83:9e:98:c4:9a:3d:82:2a:87:3a:
         67:88:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:11:40 2024 by rpki-client on console-fra.rpki-client.org