Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File:                     b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier:          umKOK/KqXGHank0utcZv+3RfHaEcuhHTSXtdaLmvmG4=
Subject key identifier:   11:34:E8:BA:AC:31:FE:D9:70:24:B6:A2:C2:F2:E9:F9:71:0D:0B:A4
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer:       /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial:       019369DA972FE1ABAA5E1E7F53779543C253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number:          0CE6
Signing time:             Tue 26 Nov 2024 19:02:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:33 +0000
Files and hashes:         1: IXUniQOuTGZA2YukI1HFBrTejbg.roa (hash: 11OyDR3wuZYHtRhb/X/hse2aIQRHuAUz+ETU6uPig7o=)
                          2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: aJPlK6tXyEJ3Ti6MYCeVTg75CYvGlSybl4i8OhpBsVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:97:2f:e1:ab:aa:5e:1e:7f:53:77:95:43:c2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
        Validity
            Not Before: Nov 26 19:02:33 2024 GMT
            Not After : Nov 27 19:02:33 2024 GMT
        Subject: CN=1134e8baac31fed97024b6a2c2f2e9f9710d0ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:b6:a9:8c:d9:5c:16:c6:47:ca:88:c4:26:
                    57:de:3e:34:73:71:c0:e6:41:a4:b2:63:16:49:39:
                    28:67:16:ea:91:c3:54:17:e4:d3:a5:8a:df:98:07:
                    bf:dd:75:2a:1a:ec:7e:19:9e:89:9c:77:65:fa:24:
                    57:69:6e:e7:af:e8:27:4c:3b:04:a7:81:dd:b9:98:
                    91:61:80:54:87:da:a6:bc:94:0a:7a:6d:b5:5f:21:
                    17:a5:2e:b6:59:1c:05:26:d1:03:58:27:6c:b3:e4:
                    25:8a:a0:69:5b:0b:8f:5f:7c:d9:1c:73:93:7c:a5:
                    90:23:b3:5b:f3:eb:ce:7b:c9:b7:ea:56:c5:99:73:
                    35:1b:59:80:c1:c2:90:ec:f9:4b:ee:cd:ed:70:9b:
                    2a:4a:3c:b6:4b:bc:e1:62:fc:25:79:4b:4a:b7:ad:
                    4b:ab:7c:b2:31:fc:a1:6a:df:1e:7d:7e:8e:bc:fc:
                    28:61:69:f9:c1:f6:79:03:37:70:1f:55:e8:61:f1:
                    d2:a2:80:65:cf:5d:86:55:39:da:1a:e5:e5:b4:b0:
                    2b:e5:09:c8:a6:6d:07:4f:98:2c:fb:9a:a1:7b:d2:
                    58:e3:2f:95:91:01:e3:1e:7e:f7:e7:06:08:d0:66:
                    2f:31:59:6f:4b:d3:cd:bf:c0:b3:53:40:23:d8:5d:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:E8:BA:AC:31:FE:D9:70:24:B6:A2:C2:F2:E9:F9:71:0D:0B:A4
            X509v3 Authority Key Identifier:
                keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:42:a2:78:81:79:4a:ac:b9:53:43:63:ed:fd:e1:a1:96:
         b3:ef:64:be:e5:9e:49:fe:1d:4c:83:39:9f:64:42:d4:6d:7f:
         bc:17:88:7b:9a:0f:57:bf:72:23:4b:1e:6c:e8:63:d6:e1:c8:
         b3:3d:7a:5f:86:e7:4d:8f:18:5e:eb:fa:1d:62:39:6f:84:55:
         8a:5d:21:56:45:97:11:d4:ce:52:8e:8f:49:e4:8f:ef:76:7a:
         e6:44:d6:ac:ef:31:c9:92:d2:0b:f0:c6:f7:ce:4a:0d:c6:bd:
         24:ba:76:d7:6a:fe:ca:ce:cf:2a:e4:2f:d2:55:8e:b5:bd:39:
         bd:aa:00:9f:a9:e3:92:bf:bc:25:af:26:ce:fd:9f:15:6f:47:
         3c:08:6a:6e:b4:9e:68:71:a9:03:2f:50:1a:fc:d1:d8:56:95:
         c6:51:e9:68:47:10:ee:00:d5:71:f4:67:92:6c:cc:03:99:ff:
         f1:2d:88:21:d6:1a:8a:2e:56:b2:83:1e:e1:d4:f8:cc:ad:de:
         93:40:17:9f:f6:fe:9d:6c:67:6b:41:06:92:e1:d0:d7:b8:e5:
         da:c5:f6:d6:92:f1:ea:a9:72:ab:de:1a:1a:9e:24:e4:46:c4:
         c8:77:bc:03:14:c4:fc:22:c4:3d:20:2c:7f:f2:25:58:52:0b:
         a0:1f:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:42 2024 by rpki-client on console-ams.rpki-client.org