Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File:                     9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier:          MphexjT+w4Ux5JHO85fE/rQHVtgBBAui+fV61FV6TEs=
Subject key identifier:   51:01:C2:22:F9:83:3D:B7:63:24:E1:18:CA:1E:87:C8:1A:03:2C:0B
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer:       /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial:       01935764CD73A8F6B6598A7DF7A21403C8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number:          0441
Signing time:             Sat 23 Nov 2024 05:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:44 +0000
Files and hashes:         1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: QbDtgOS+/9gCrYOTcIgNkTZyl1bA/Bch7Edcd3x18Y8=)
                          2: qalPO8-g61yFH1RSbM0Legny5Ro.roa (hash: /9sR0Unj8Bg5UntMsZ3VIJaEgV9krObZ7Rqs4w6kqXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:cd:73:a8:f6:b6:59:8a:7d:f7:a2:14:03:c8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
        Validity
            Not Before: Nov 23 05:00:44 2024 GMT
            Not After : Nov 24 05:00:44 2024 GMT
        Subject: CN=5101c222f9833db76324e118ca1e87c81a032c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:8d:7d:62:aa:d0:f8:45:2c:76:bf:d8:d1:
                    28:a1:b2:04:f4:79:9a:7b:25:56:60:fb:e1:be:da:
                    e4:fc:34:d5:8d:5d:02:aa:f7:84:35:a1:8f:2e:a5:
                    ce:c8:df:5e:0a:33:ad:e2:c1:fc:53:3d:c1:fa:0d:
                    0d:e7:59:3b:fa:cb:9a:3f:6f:a1:6c:53:aa:a8:82:
                    9c:57:4c:7c:29:25:34:1c:79:fb:0c:39:19:1b:7e:
                    95:11:0e:b9:30:b9:f4:4d:41:0b:8e:67:b9:df:fb:
                    77:89:d4:dd:ac:52:00:c6:ac:f8:38:3e:12:36:95:
                    3d:93:89:10:95:e7:f2:83:c1:bb:d6:32:09:45:e8:
                    cb:f6:fa:ed:55:60:0e:35:58:ef:f4:14:f8:15:83:
                    46:f8:a2:e2:49:54:6e:3f:7a:92:26:70:37:94:1c:
                    d3:12:d3:b3:e0:c6:b8:47:91:14:62:d3:4c:e7:ba:
                    62:bc:66:de:62:60:89:8f:ff:d6:63:24:46:83:54:
                    ba:8c:65:4c:25:78:e4:9f:6b:73:8c:26:25:35:04:
                    e6:42:e3:a3:73:25:91:04:d4:f4:70:51:1c:a2:61:
                    29:83:a2:c3:1a:43:2f:a9:2a:29:ff:96:4b:ac:cd:
                    ff:73:1b:be:72:f1:f2:06:a8:c9:3d:40:ee:8e:bb:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:C2:22:F9:83:3D:B7:63:24:E1:18:CA:1E:87:C8:1A:03:2C:0B
            X509v3 Authority Key Identifier:
                keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:0a:96:bc:a1:f4:85:ef:29:f6:60:7b:db:56:87:b5:9f:
         3b:0e:15:89:82:54:15:10:6f:7e:7b:ac:86:27:7e:d2:53:bc:
         3e:12:b9:c4:bf:ab:db:2e:ee:8c:a9:28:aa:51:b5:d7:9f:c2:
         99:a1:43:4e:f5:7c:7e:7e:e7:e1:fc:7e:6b:bc:bb:0e:fe:78:
         1b:7c:95:9f:ca:46:55:df:b5:d8:66:91:6b:1e:1e:af:e0:6c:
         34:9a:56:28:3a:f7:78:24:45:2a:66:f8:09:74:15:08:e1:12:
         7f:e0:9d:61:f6:66:81:65:4f:9a:38:c5:fd:12:53:8f:05:99:
         2f:d8:92:ac:33:24:72:f7:0d:cf:9e:91:1b:01:07:2a:c7:1c:
         3a:42:d5:bd:0f:03:7a:1a:05:03:11:13:28:2f:a7:94:2e:fe:
         f6:3e:73:78:ca:59:01:60:a7:ed:75:2d:e6:f8:75:45:71:ba:
         db:e3:95:d1:8e:c2:49:03:e7:a9:4f:f9:a7:9e:ef:0e:c1:f1:
         d0:71:95:b7:2e:98:f5:10:c0:c7:15:28:14:de:70:a2:bf:c5:
         87:13:a6:91:1c:62:5d:49:30:68:f2:27:f7:ef:dc:ed:42:25:
         a1:fb:c2:39:b2:56:6a:52:11:c7:d1:19:1e:e6:13:1b:a5:39:
         4c:cb:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:49 2024 by rpki-client on console-ams.rpki-client.org