Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File:                     9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier:          6gduZxG9VOZs4uLRRvyAZo8Bfkm6VNUDwKDGmTzKNlQ=
Subject key identifier:   8E:96:3C:82:94:2E:23:7E:7D:35:F3:E9:57:31:12:7E:A2:1E:2B:D9
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer:       /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial:       0193568A043C13555BC1B7396E18792AB7C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:01:45 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:45 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:45 +0000
Files and hashes:         1: 2_swvO1kdgfYEmxH22QqXJKm_qM.roa (hash: G7otxsRf9FkiScWKpXBiPiRN2pWqib+n4KdbWVl9Wwo=)
                          2: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: W8wXWEuyZK5S3TGVULgcxzvuiM1UdUzKQ6yI91BpZ7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:04:3c:13:55:5b:c1:b7:39:6e:18:79:2a:b7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
        Validity
            Not Before: Nov 23 01:01:45 2024 GMT
            Not After : Nov 24 01:01:45 2024 GMT
        Subject: CN=8e963c82942e237e7d35f3e95731127ea21e2bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:8a:b2:ae:62:34:e9:98:ae:1e:92:79:45:
                    d7:54:37:36:ec:93:2c:82:01:4a:81:fe:86:8b:34:
                    31:36:0c:51:26:f9:19:e0:87:c5:77:4d:d4:15:2b:
                    de:2e:50:84:21:a9:cb:a9:85:b8:3d:a4:9c:76:59:
                    35:7c:17:c5:d6:73:84:31:96:a0:c0:0c:21:fc:af:
                    fc:4d:29:4f:17:dc:10:6e:1f:67:17:d9:a1:f9:41:
                    a8:b1:8f:0a:cb:87:f7:b9:9b:e2:ee:d2:be:48:a7:
                    d3:9b:e6:d1:95:30:cc:d8:a3:61:d6:8c:ca:fa:1f:
                    ca:78:2a:3e:c1:05:13:6f:98:e5:aa:29:d8:26:33:
                    3b:a7:b3:02:36:05:cb:33:1a:2d:52:19:ed:42:bb:
                    6a:64:17:8d:d0:69:d4:9a:78:72:2d:dc:bc:e6:eb:
                    c8:e3:4a:b7:7d:74:18:e6:7d:f5:76:31:6c:20:fc:
                    a1:ee:87:05:78:f0:d8:dd:6b:b5:c7:9e:c2:15:69:
                    24:81:ec:5a:91:8c:a4:51:63:f9:4c:8e:66:37:0d:
                    8d:a7:4d:28:a4:2c:98:52:f7:52:34:a0:0d:db:ec:
                    95:d0:a0:2d:ab:1a:dc:ed:a3:14:fc:c3:90:9b:18:
                    94:ec:be:2c:9b:a6:c1:3b:99:56:32:ff:6c:a6:74:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:3C:82:94:2E:23:7E:7D:35:F3:E9:57:31:12:7E:A2:1E:2B:D9
            X509v3 Authority Key Identifier:
                keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:96:7f:ba:5a:46:42:dc:13:55:8b:b0:9c:96:40:e1:9f:c7:
         b2:4e:4e:e3:52:63:ea:d4:f6:80:ec:1e:c0:22:24:46:ce:22:
         49:44:df:fb:f5:4d:5d:15:84:08:b2:45:6d:da:b9:70:49:2a:
         e5:c8:0f:1d:79:aa:37:8e:db:ae:8a:9c:4c:aa:73:a2:31:ef:
         ce:2d:a0:59:03:b1:80:24:64:dc:56:bd:8b:c4:a3:70:33:a1:
         0b:00:ae:45:e1:a2:0d:49:5a:82:30:b7:48:0a:46:df:13:7f:
         2a:9a:8a:ad:6f:5d:45:db:33:2b:1c:50:a6:5f:94:78:93:31:
         55:b8:9b:0b:cf:dc:b7:06:99:65:ab:2a:c7:49:7c:26:b4:78:
         42:a6:5a:b7:27:77:0b:dd:fb:98:f4:3c:63:cf:ca:88:ea:3b:
         fb:d3:51:85:14:bb:8e:0b:dc:11:08:a1:d8:0c:2b:6b:fa:7d:
         7d:00:38:93:55:49:8e:bd:90:0a:41:e9:2a:24:22:e1:cf:d4:
         00:82:36:f7:5c:be:ae:08:dc:93:8c:78:4c:eb:93:f3:ea:b2:
         2a:37:4f:1c:a2:87:84:22:f1:30:9b:9e:ad:f7:cc:6e:57:23:
         f5:30:a6:7a:93:dd:c5:ce:e7:c7:c9:78:d9:98:da:94:59:b6:
         6a:aa:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:53 2024 by rpki-client on console-ams.rpki-client.org