Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File:                     9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier:          z7Cv/7TVhApev/9c4ApdWOiCKXuapDjO18I/ZoB1klk=
Subject key identifier:   C2:AA:C7:C2:AF:70:65:E5:D2:F6:00:0C:CD:A9:D4:A6:8D:82:67:AC
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer:       /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial:       0193549AC8259FFF10AE32198208A12BF0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number:          91
Signing time:             Fri 22 Nov 2024 16:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:50 +0000
Files and hashes:         1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: AP7m58ZDjoJ6LT7i+u9MULSDrDaHUuOmfiC8l6kNOpM=)
                          2: VNxKLLeO4MCfEGyXp2_wjGm4Bnk.roa (hash: UXZ5z1mYeu8IXgXNww30xqrDce1snqZCWGjlMCmfL84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:c8:25:9f:ff:10:ae:32:19:82:08:a1:2b:f0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
        Validity
            Not Before: Nov 22 16:00:50 2024 GMT
            Not After : Nov 23 16:00:50 2024 GMT
        Subject: CN=c2aac7c2af7065e5d2f6000ccda9d4a68d8267ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:c0:43:e7:bd:4c:d8:e8:1b:f9:40:93:98:
                    bb:24:f2:e6:d6:10:11:48:7c:4b:df:6e:3f:fa:7e:
                    23:e1:7b:f1:b7:12:6d:7d:b7:e7:0d:48:18:9c:d7:
                    cc:b5:7c:80:b4:b9:f5:9d:92:f8:6f:1a:a4:5d:cc:
                    51:1a:a3:1e:a2:66:c8:f8:f3:a6:c7:91:a6:0f:8a:
                    66:9d:06:9c:ab:80:5b:00:ab:b5:29:22:e3:5b:9d:
                    6e:94:1e:bc:86:5d:fd:51:0b:c2:b7:90:0b:95:f0:
                    0c:71:43:dd:05:17:25:2c:a8:8a:2f:a3:71:d6:24:
                    ad:6d:9e:d3:e5:aa:cf:7e:c3:e8:18:43:77:b2:69:
                    8a:56:9c:81:86:6b:f8:60:d0:d2:20:fb:7f:92:a1:
                    48:cf:a4:ef:c1:fb:c5:75:77:8b:10:3a:6c:a3:91:
                    02:04:c9:ad:ff:57:9e:2b:6a:c9:df:37:93:c2:ba:
                    0f:1d:8a:53:15:49:61:06:78:75:b3:cf:07:dc:2e:
                    cd:a0:6c:a5:e0:56:c8:9f:a0:22:cd:e2:da:2c:81:
                    92:a9:d3:e3:f2:61:77:54:a3:39:8a:3e:ba:b5:59:
                    50:15:db:2a:f5:39:99:cf:b6:86:e3:8c:e4:23:c6:
                    b0:e3:45:d5:b4:85:1c:ff:72:2a:0d:37:08:34:b2:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AA:C7:C2:AF:70:65:E5:D2:F6:00:0C:CD:A9:D4:A6:8D:82:67:AC
            X509v3 Authority Key Identifier:
                keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:87:ca:7d:cc:45:58:78:c3:10:49:86:b6:ea:4e:9e:ee:f1:
         62:e3:c3:a3:d9:1b:8d:fa:c8:fb:4a:25:cb:3a:fe:83:f5:c6:
         9c:e9:2a:8e:89:66:7f:1d:bd:36:05:e3:8c:87:05:00:78:8d:
         d3:a1:b5:d4:16:4f:f1:11:5f:40:e1:f4:c1:a2:8e:85:13:dd:
         29:6e:58:93:9e:3b:bd:8e:ac:ae:f7:ec:6f:7f:68:f3:ca:77:
         42:99:28:0f:9f:66:a4:85:3b:24:48:a5:16:3d:5c:fa:d5:fa:
         3e:65:39:bf:37:21:10:42:7d:29:c5:29:9a:08:58:7c:68:22:
         16:f4:84:27:21:e2:c3:f1:c5:e2:cc:88:48:ab:84:b6:df:d0:
         4b:9f:6b:80:c8:5a:7a:5c:b1:94:b7:f6:72:cb:ea:ba:51:ad:
         4f:e5:d9:07:de:18:4c:67:95:5d:69:bb:68:e5:b1:16:0c:dd:
         c3:9b:9d:00:9f:60:c9:b3:8d:49:64:86:eb:91:be:dd:94:9b:
         cc:88:9b:de:12:f9:fd:44:f8:30:04:c8:54:2c:99:47:d7:a5:
         51:fb:0e:d1:b3:32:f1:c8:45:9a:ee:c0:c8:bc:23:c7:11:54:
         3a:47:fb:51:d4:13:70:f5:8b:3f:58:94:96:da:ba:95:0e:44:
         da:15:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:08 2024 by rpki-client on console-fra.rpki-client.org