Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File:                     1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier:          BmwehNdb7j0VH8riZJJsolZgVFRJleiB/UywMIR9IGU=
Subject key identifier:   2B:C4:B5:29:94:6B:F0:7F:29:E5:46:16:D3:38:B9:DD:6D:44:28:50
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       0193568B22950944BCA92E1769B3F412F43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:02:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:59 +0000
Files and hashes:         1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 4PbN+s7NuC9T5MdZ9YcecPfifyaGWApbiIoa5HsNfhc=)
                          2: bFk0_n5tGrCDFTLfKH2n8K3B9n4.roa (hash: 2Reqy78mGE9JA9ibpmUualvTRFpLYnt37eSUXYm389g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:22:95:09:44:bc:a9:2e:17:69:b3:f4:12:f4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Nov 23 01:02:59 2024 GMT
            Not After : Nov 24 01:02:59 2024 GMT
        Subject: CN=2bc4b529946bf07f29e54616d338b9dd6d442850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:7c:5e:dd:59:5b:1a:fb:0a:94:ee:77:84:
                    63:74:96:32:f5:90:6c:5d:f5:55:47:95:19:1b:2d:
                    1e:c0:08:6e:b6:05:47:16:6e:8f:5d:e3:45:2e:30:
                    ca:9e:cf:10:31:bc:e9:10:66:82:cb:40:30:7e:6b:
                    33:39:df:7d:4c:29:2c:ae:4b:ea:f1:9e:fb:ce:ea:
                    f4:28:fa:42:b7:93:b9:66:c0:9c:27:10:74:25:77:
                    12:4f:87:bb:64:24:8f:7d:0a:ee:b9:9f:55:25:5b:
                    d0:c1:06:de:c2:bb:98:41:d0:4d:96:10:4d:9c:81:
                    61:3e:4b:b4:c6:43:73:b4:7d:2a:31:a8:2b:76:d8:
                    fd:88:c8:61:5a:fe:9f:8b:29:ab:fe:bb:03:8d:fe:
                    ac:53:d6:93:e4:8d:fe:02:5f:83:a6:a7:20:28:0f:
                    b0:2d:39:cb:15:78:84:de:12:33:23:35:fd:0c:86:
                    e7:e4:9a:6a:d5:e8:54:68:20:af:b9:1a:7a:b0:26:
                    ca:8c:63:db:69:f2:f0:ee:4f:18:c6:76:a9:e5:2a:
                    e0:11:04:a9:1d:f9:4e:3c:50:4a:b4:d5:ff:ff:64:
                    35:5a:32:e7:dc:04:ac:82:23:b8:4d:f6:ae:96:0d:
                    3b:80:f3:d1:18:46:7f:ae:f8:f2:8e:70:cc:2f:7a:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:B5:29:94:6B:F0:7F:29:E5:46:16:D3:38:B9:DD:6D:44:28:50
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:56:e0:aa:08:69:c1:c9:ad:d6:f9:52:dc:ef:1a:c9:c8:
         06:50:3d:29:80:84:54:dc:96:f5:d3:23:d7:6d:52:9d:2a:06:
         68:66:aa:14:00:fc:55:3a:7a:5e:cc:df:88:38:28:7c:e4:e4:
         9f:e2:d3:65:81:4b:95:07:cf:47:cf:0f:b6:2c:b5:ec:21:23:
         25:09:7d:e7:df:8f:3d:58:4e:4a:73:9c:1e:1a:d1:b7:5f:8a:
         c1:14:7e:03:02:c0:b0:a6:cd:97:4d:41:00:28:8b:70:22:15:
         69:fa:5e:9f:6a:a3:59:47:5b:32:ba:6c:b2:8e:33:b6:d4:12:
         26:20:12:07:ee:0b:a0:c9:d5:e2:c1:6f:a7:3a:c6:91:68:11:
         a0:c5:64:a2:8c:3f:82:a8:b3:3a:72:83:53:00:bc:28:18:c4:
         af:64:cf:3a:88:54:2a:cc:ff:2e:59:59:a5:ac:08:99:04:44:
         10:55:65:77:cd:78:cf:de:5d:8e:ca:10:0c:cd:af:5b:14:e2:
         4f:9c:6c:e5:3a:d4:2e:a1:06:44:0f:1e:b1:45:1c:95:95:ed:
         44:69:28:54:24:a9:10:6d:9d:de:f0:60:4a:79:19:40:a2:13:
         23:ed:d1:36:3e:d2:8b:86:7f:92:9e:33:d7:85:9b:72:3d:f6:
         0b:1a:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:43 2024 by rpki-client on console-fra.rpki-client.org