Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File:                     MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier:          ZXxrLiNOKJRoozpVOhOnbP7iROVGD1P/D8YN0591HTI=
Subject key identifier:   FE:03:3B:05:A7:58:8B:13:AA:44:16:5C:30:4A:5A:B7:6F:2E:4B:54
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer:       /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial:       019355AD0E367FC5E7E6B83E6AF9371E6C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 21:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:24 +0000
Files and hashes:         1: 7YOusaKLJ8pIs_k5EVCkumHpVK0.roa (hash: xyjy36aC3yH+bR2qZjciQkjuIo6u0e59MwjJr5xyx4c=)
                          2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: EDmjHRP25hSwjVH1xrVeKYrvcwWanbSZL4K9HUbGQwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:0e:36:7f:c5:e7:e6:b8:3e:6a:f9:37:1e:6c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
        Validity
            Not Before: Nov 22 21:00:24 2024 GMT
            Not After : Nov 23 21:00:24 2024 GMT
        Subject: CN=fe033b05a7588b13aa44165c304a5ab76f2e4b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:d1:59:12:98:ab:6a:30:21:7e:47:5e:33:
                    89:8e:4d:b2:1d:7b:a0:9e:e1:f0:5a:84:ea:59:89:
                    95:36:31:91:62:96:2b:6b:d7:8d:7e:85:7b:61:11:
                    12:38:43:5c:74:64:30:82:9b:ec:9d:52:7d:4d:df:
                    77:71:e6:b8:a7:25:dd:05:df:d8:67:27:92:b4:1d:
                    0d:94:7a:53:97:8e:5d:92:2b:f4:f8:ec:69:a8:07:
                    f6:0a:a3:99:db:88:ab:ad:b8:2a:c5:29:61:b4:d1:
                    41:91:68:30:29:6d:eb:29:19:28:ae:0f:a2:90:9d:
                    fe:20:15:46:03:90:54:49:b7:b3:9d:61:9c:d7:a7:
                    fe:40:36:a6:21:11:32:41:10:2e:3a:62:9f:75:59:
                    aa:75:3b:8a:27:a5:23:df:bf:bb:ab:a0:a5:3e:64:
                    56:51:78:8e:fa:ae:58:6e:08:c7:54:fe:b2:b8:1e:
                    aa:fe:3e:0b:4d:99:d7:53:97:7b:05:94:b1:9b:31:
                    24:85:ef:45:8e:ed:3d:9f:8f:18:19:27:db:36:a1:
                    35:ee:c0:56:86:1b:b7:86:0f:6f:82:78:ec:f8:27:
                    53:36:71:41:9d:b1:33:76:2d:53:ce:04:08:68:94:
                    1b:77:6c:c4:67:48:8a:9d:23:ef:dd:6d:d8:ed:7d:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:3B:05:A7:58:8B:13:AA:44:16:5C:30:4A:5A:B7:6F:2E:4B:54
            X509v3 Authority Key Identifier:
                keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:ff:90:65:62:02:43:4e:8f:16:a9:7e:cb:75:9b:fc:1f:
         56:4f:b7:0f:3e:e2:cd:1a:4f:4b:00:64:8d:be:f4:91:c3:94:
         bb:c9:a7:4b:62:34:68:10:cb:f5:1f:84:1e:72:fc:c5:ab:0f:
         e9:c8:34:c7:80:ef:cf:a7:c7:87:d1:0a:4b:e4:dd:e3:d3:2f:
         72:86:51:5e:1a:87:7f:51:07:87:c2:c7:4f:d7:c1:56:2b:8a:
         81:e7:19:90:09:25:2a:9d:85:d9:bc:f8:44:42:e5:c5:90:1d:
         70:3a:45:54:5e:ec:f7:d8:20:57:81:24:ec:1c:cd:de:72:61:
         a4:74:52:11:f5:6b:14:f0:bd:20:53:92:b8:b3:60:16:0e:19:
         15:14:a2:a1:16:6a:08:7f:8b:1e:f6:18:38:6a:83:2f:fd:19:
         1a:6c:02:26:17:eb:5d:bf:66:d9:e4:c8:02:01:cb:c8:15:53:
         bc:1b:42:7f:72:15:d5:0f:b1:07:fa:42:bf:ae:de:32:1c:ef:
         10:6d:06:ec:09:cf:d8:e8:8e:a7:a2:5c:9a:ff:31:89:61:74:
         c0:ec:1a:6e:19:09:4c:5e:fa:a1:52:c1:e0:64:8e:fb:84:37:
         af:0e:3f:2c:26:4d:4c:af:4c:85:dc:54:d8:d8:22:f7:5e:44:
         6a:b4:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:24 2024 by rpki-client on console-ams.rpki-client.org