Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File:                     9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier:          Vva8/tqUcN58sg8KaeBCNghatxzIJ7GsJE4udt5kOUQ=
Subject key identifier:   2A:AB:26:CD:FF:E9:DA:B3:6C:55:26:C9:B9:C8:4A:D9:28:BF:00:03
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer:       /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial:       019356892E906CDF641308EB1C0E413B10DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:51 +0000
Files and hashes:         1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: NtSo4e+4QNgnWqYeOMieUm9VTH/+LctoofKqNflRce0=)
                          2: ZjUA35qp5_Y57yZwkicvVNFa4AA.roa (hash: aeT/KNQNUKum+ssiY52If0uLWQgVaQzA6CXaXAKsvrQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:2e:90:6c:df:64:13:08:eb:1c:0e:41:3b:10:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
        Validity
            Not Before: Nov 23 01:00:51 2024 GMT
            Not After : Nov 24 01:00:51 2024 GMT
        Subject: CN=2aab26cdffe9dab36c5526c9b9c84ad928bf0003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:1d:ed:98:4a:7e:9f:30:0f:33:2e:9b:26:
                    05:d1:68:51:6b:0b:11:12:42:f5:88:67:4f:88:b0:
                    aa:36:32:8a:36:2e:7d:da:16:ea:55:90:f3:b6:ab:
                    85:83:43:d1:3c:85:ad:c8:b7:43:86:f4:6f:64:3c:
                    0e:e6:db:66:54:81:bd:18:de:58:21:bf:a0:5b:19:
                    ef:29:26:79:84:5e:7c:6c:c2:1e:b6:9e:f9:eb:78:
                    d8:72:2b:7a:a4:40:ca:75:a8:7f:d3:96:62:97:f2:
                    29:46:7a:48:bb:84:ef:ee:1c:78:69:b2:7c:44:5c:
                    93:a8:33:85:f3:cc:e7:31:20:5d:c0:dd:37:8f:bb:
                    c5:8c:15:6d:d4:aa:0e:9a:04:26:7d:bc:1c:c8:21:
                    93:17:47:31:6a:83:82:6d:43:8e:8f:cd:c5:ad:6f:
                    98:98:ed:52:6f:41:18:1f:29:3b:90:f7:f6:30:03:
                    85:f9:6a:cf:5c:54:50:d4:c0:2b:e3:20:0a:75:06:
                    be:c4:e5:5c:50:52:ac:96:90:81:ae:26:6e:c1:95:
                    82:c6:72:22:aa:7a:ab:7d:8a:35:2f:dd:c5:f8:09:
                    7d:93:9c:dc:4f:dd:9b:52:c0:ca:32:af:b9:9e:19:
                    3e:b1:48:4c:23:bf:cf:f8:50:68:3d:95:f5:b8:95:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AB:26:CD:FF:E9:DA:B3:6C:55:26:C9:B9:C8:4A:D9:28:BF:00:03
            X509v3 Authority Key Identifier:
                keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:79:d8:82:0d:e0:88:40:8a:ce:c5:14:28:cd:4c:2a:29:
         d6:f5:02:08:d4:0a:3d:2f:0e:79:71:f1:f3:d6:c3:d0:65:64:
         24:71:1b:6a:d4:e1:78:a6:c1:2a:49:45:99:67:95:1d:a2:53:
         e7:94:b4:02:86:09:5d:3f:3a:8e:a5:45:f2:69:9a:c8:93:e0:
         78:ac:35:36:8b:fc:ef:2b:20:08:82:f6:dd:54:09:f6:fc:e7:
         14:33:8f:c7:b7:0e:8d:09:56:f8:52:86:71:5e:fd:8d:ed:64:
         77:6e:69:fb:9c:8e:1c:31:c1:21:64:73:2e:3b:3c:32:a3:a9:
         cf:a7:4a:84:70:aa:37:6d:24:aa:6d:25:79:23:83:67:8b:5e:
         4f:d6:32:91:b9:1c:9f:b4:cc:f2:d6:40:cf:d4:90:bc:96:38:
         67:9f:9b:c5:1c:56:cf:17:0c:0e:3f:d4:ab:9d:77:04:e8:14:
         b7:26:b7:8b:91:9d:a8:bd:bd:40:28:d2:d7:08:89:9d:aa:97:
         51:eb:a2:e5:74:1c:0f:9b:0f:dd:32:f5:e5:76:29:d4:bf:2f:
         c5:d9:19:02:ec:57:f7:4e:74:cb:88:d2:9e:53:35:8b:d6:0d:
         0e:78:96:6f:7a:d3:d0:c2:9b:85:b8:4a:47:da:e2:70:be:8d:
         e9:3a:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:59 2024 by rpki-client on console-fra.rpki-client.org