Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          akIO8ezfMjXYJt7GqG4rkBuwJKENwFucmiokVyss1W0=
Subject key identifier:   0C:B2:9E:03:C1:07:C8:6C:BC:8E:7A:D1:A8:B1:84:64:2E:12:2D:06
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       0193587854E8295B0B195083CA1C0C0243C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          1114
Signing time:             Sat 23 Nov 2024 10:01:41 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:41 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:41 +0000
Files and hashes:         1: Zusxov0H-soOSLvL_KNsAd50NUw.roa (hash: oPOFMAoOi4yeDubjtUQUeEwC78DfGF5yzAXT9uu2Jzo=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: ZkhYYu0oRyH6tVO69FzJJufisxxd1UXvMscTFQuPLLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:54:e8:29:5b:0b:19:50:83:ca:1c:0c:02:43:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: Nov 23 10:01:41 2024 GMT
            Not After : Nov 24 10:01:41 2024 GMT
        Subject: CN=0cb29e03c107c86cbc8e7ad1a8b184642e122d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:4a:02:b2:8d:91:8a:ce:84:1a:34:04:98:
                    79:30:8c:07:b6:d8:4e:08:bc:08:84:eb:98:0c:ae:
                    56:88:e8:83:d9:e9:36:b9:ee:40:3e:a4:f6:57:2c:
                    f3:18:90:9c:f5:4f:ac:00:1a:92:1e:a2:42:93:11:
                    63:a7:49:81:71:a4:1f:f2:a3:03:d5:42:c7:a5:9a:
                    99:ce:f9:9e:ca:32:fb:e4:03:67:db:5e:26:44:0c:
                    64:d6:79:37:b0:8a:1b:06:a0:8e:ec:9e:45:bf:71:
                    2f:9a:90:73:06:1f:2e:93:96:47:15:e6:92:07:65:
                    25:20:ec:5b:5b:3b:41:d9:5c:b1:a6:24:08:9a:61:
                    5e:7a:35:90:fc:be:57:26:b2:f5:c8:49:4c:7d:ac:
                    1b:c8:ce:22:44:f3:ae:3e:55:9d:cb:96:78:a0:22:
                    20:7f:8e:bc:ec:bb:3b:e0:15:11:0d:b6:b8:f8:54:
                    49:60:df:11:89:9c:d6:e3:2e:db:be:62:ed:08:bc:
                    ce:14:0b:f9:7d:c8:98:b3:b1:7e:34:05:37:74:f0:
                    76:fc:76:f1:29:82:3a:3b:de:e3:32:a9:3c:ba:fc:
                    61:5e:01:af:69:7f:1f:50:ba:8d:9b:5b:aa:e8:cf:
                    ea:ef:15:62:6b:8d:6d:3e:6b:9e:42:58:e3:3b:68:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B2:9E:03:C1:07:C8:6C:BC:8E:7A:D1:A8:B1:84:64:2E:12:2D:06
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5d:4c:17:fc:e8:7b:b1:ae:82:db:83:c6:29:87:23:e8:15:
         ee:d4:53:07:bf:fb:7a:c4:4d:db:99:a5:40:bd:ea:78:39:83:
         43:b2:cd:22:33:e9:6d:ee:ec:93:52:d7:71:03:a9:46:cb:9a:
         e1:4f:c8:a3:93:fb:69:f0:2f:d2:f4:85:78:4b:b7:b2:48:ae:
         80:b9:fd:47:6c:2d:25:b3:ca:e2:0d:f6:f6:a9:0d:e8:6f:52:
         25:09:1a:2a:2a:93:b1:c0:e0:47:41:a0:22:a4:c4:1d:19:18:
         57:28:8f:56:3d:6a:b8:6e:af:a7:49:4c:40:a2:1b:b6:a4:db:
         77:93:15:74:1b:93:32:bd:1f:51:1b:3e:d2:54:a3:a8:e5:d4:
         83:7e:b0:59:34:56:dd:52:a1:50:98:72:98:e9:d5:12:e5:2d:
         3f:2b:a4:0b:c1:8f:7e:f4:2a:97:a1:87:e6:20:93:d3:bd:33:
         fe:32:b4:b7:bd:4e:d4:c8:5d:4a:5c:33:b2:ce:e5:a1:ca:fd:
         72:2f:58:90:0a:0b:7a:57:4b:a7:5c:c5:d0:6c:9a:57:95:35:
         29:98:e4:ab:6f:41:7e:1c:df:56:cc:ae:68:a2:75:aa:5f:34:
         6c:8b:f7:32:9e:88:bd:6d:1d:bc:c4:07:be:95:53:fd:bb:c6:
         cc:15:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:00 2024 by rpki-client on console-fra.rpki-client.org