Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File:                     9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier:          NZlm9PJY4ITxSAWRsi6RbsUbXblBHd+PoMQ5Lzo8STg=
Subject key identifier:   D1:EE:C3:AB:65:75:6A:A4:88:87:2E:D4:4F:28:DD:36:A8:C8:1C:B2
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer:       /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial:       0193579B7BA1F712CD6FCBCD4CC100901185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number:          10AD
Signing time:             Sat 23 Nov 2024 06:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:27 +0000
Files and hashes:         1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: XkhzNtpti/0UrKyV5Ify8PAC+uNgdw6k2Wt455g/9fo=)
                          2: NKvD7dWzJyl94jet9t6Za4d6Q2E.roa (hash: APhtdoDNbRZ278hdn2mfToQe+aDKzPJo9sexZBY+TYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:7b:a1:f7:12:cd:6f:cb:cd:4c:c1:00:90:11:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f501b9e20616d686b405da906afa597635063640
        Validity
            Not Before: Nov 23 06:00:27 2024 GMT
            Not After : Nov 24 06:00:27 2024 GMT
        Subject: CN=d1eec3ab65756aa488872ed44f28dd36a8c81cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:16:9a:90:b3:b0:05:03:54:4a:f5:28:e2:
                    99:e5:ec:6d:79:9e:26:e4:0b:f7:55:6b:3f:ff:25:
                    30:14:36:fe:d1:b3:2b:1a:4d:83:7e:67:30:56:b5:
                    7b:7c:c2:bd:be:ea:8c:88:dd:ca:e0:44:02:53:17:
                    60:03:0e:8b:2d:3b:54:6b:64:af:8d:20:11:1b:86:
                    95:c7:90:5e:1f:f7:d2:0a:8a:1f:40:d7:06:26:f6:
                    12:8e:3a:25:f8:a6:76:51:33:9d:50:df:6b:8e:1d:
                    f9:28:bf:86:aa:c1:a2:00:35:4b:ab:be:36:5d:22:
                    ed:99:90:b9:a3:0d:42:8d:b1:3a:b7:57:b7:55:6d:
                    12:8d:ad:0c:16:31:c1:ea:6c:91:e5:69:83:63:aa:
                    d4:73:56:65:bc:d6:8e:99:18:50:96:af:93:ed:36:
                    f2:27:57:0a:f7:5d:57:88:13:a4:72:45:a9:42:d2:
                    59:83:13:7f:28:3a:29:9d:eb:b6:4b:8a:2a:42:f3:
                    55:85:2c:86:67:a7:aa:58:fa:46:66:6f:66:fe:24:
                    ad:f6:d5:c6:cc:e8:08:a0:79:b3:c0:29:f5:8f:16:
                    c4:ec:11:39:55:71:e3:52:83:b7:9b:11:df:1d:f8:
                    43:87:52:b1:93:2d:8d:21:70:f0:9a:7b:84:b8:ac:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:C3:AB:65:75:6A:A4:88:87:2E:D4:4F:28:DD:36:A8:C8:1C:B2
            X509v3 Authority Key Identifier:
                keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:37:39:f6:a2:9a:e0:8c:f8:40:83:47:c2:45:2b:50:d8:2b:
         49:ad:6b:04:3d:b4:98:3d:e2:9b:d8:00:92:41:2d:27:ea:e3:
         cb:bb:09:24:9e:44:45:d8:dc:df:70:50:07:c0:64:d2:b8:0f:
         9b:38:18:4c:ff:cd:74:2f:f8:f4:ab:39:b9:87:3e:ca:77:50:
         a5:31:f7:97:b2:48:c4:1b:08:74:56:cd:2e:79:23:e5:99:95:
         37:5e:0e:0c:e9:15:88:5d:d8:fb:de:34:6e:be:2a:6b:27:9d:
         c5:31:2a:78:a6:f2:2b:c8:36:ae:0c:c6:c6:ea:68:b2:81:8e:
         c7:6f:08:08:43:23:47:8e:66:0d:a1:4e:8e:78:c0:8d:cf:be:
         0f:d4:57:f6:0b:40:02:e2:6a:ae:2c:9a:bb:99:a6:ff:df:7e:
         08:c5:ce:28:af:49:4c:64:6c:ab:dc:03:0f:8f:c1:6d:23:09:
         44:f0:53:e3:97:84:5c:b5:86:41:90:bf:ef:31:10:98:56:f1:
         12:3b:b2:cd:8a:70:48:5d:6b:b8:59:76:90:ae:c9:ee:64:3b:
         76:f7:ad:5c:2b:8c:0b:c7:6d:62:a1:79:a4:d5:49:bb:d2:9d:
         03:8b:b9:32:80:99:b2:7f:91:90:07:3d:11:48:9b:98:56:c8:
         f1:bf:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:54 2024 by rpki-client on console-ams.rpki-client.org