Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File:                     MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier:          WhRL9o7ZavNtrEiGzmu06+XMsHnn5YMgi95262IJy7A=
Subject key identifier:   7E:9C:37:4E:23:49:4D:0B:4B:C1:F1:E2:06:53:9E:E9:02:BA:37:97
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer:       /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial:       0193553F3A59FE2E825F74F6C24555241A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number:          9A
Signing time:             Fri 22 Nov 2024 19:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:27 +0000
Files and hashes:         1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: 2o9Q6e5ZH1DB0ODUUae8xao6JPBLbYRleW+3mTU9tPQ=)
                          2: rYQeDNPUyS7IAtAax7wezTUU3Vc.roa (hash: lK8n4j7MRMriTEMHGIXAVzL9ZrSf5WJmgfd/NKlweKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:3a:59:fe:2e:82:5f:74:f6:c2:45:55:24:1a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
        Validity
            Not Before: Nov 22 19:00:27 2024 GMT
            Not After : Nov 23 19:00:27 2024 GMT
        Subject: CN=7e9c374e23494d0b4bc1f1e206539ee902ba3797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:42:77:9d:48:2a:ee:e0:22:9b:82:5b:0e:
                    06:b8:92:27:c4:f4:5a:64:f3:0c:4f:22:c1:6f:4a:
                    a2:81:54:58:2d:89:9a:b0:e3:5b:40:6f:9b:ee:0d:
                    aa:f3:03:7f:32:c8:b2:5f:59:ea:ec:00:02:aa:ba:
                    43:cf:af:bf:22:fd:0d:4d:0c:b6:f4:c3:a1:eb:e5:
                    e9:9f:c2:f4:ec:3f:1f:b0:90:fc:b1:94:e2:81:28:
                    fa:cb:c6:ef:f3:95:15:88:ec:9d:88:d7:c2:63:a9:
                    49:98:cb:7a:43:46:cf:17:ce:28:c8:a7:fc:f9:b1:
                    9b:7a:eb:e5:c0:94:9d:9a:32:58:17:f2:f0:9b:6b:
                    b0:fc:71:d5:65:7e:84:2c:4d:57:65:ab:ac:68:e9:
                    06:d1:22:0b:83:a3:aa:3a:c8:c2:3d:5f:3c:7e:e9:
                    45:e8:95:c3:ce:a1:c6:2e:11:42:8c:21:d2:7a:b9:
                    e1:e9:d5:75:7e:e9:16:b9:f0:c1:80:26:2a:ab:07:
                    87:d0:19:b6:d1:15:9a:a6:3c:b2:96:7b:82:4a:11:
                    28:90:ef:be:51:b0:d8:10:78:63:9a:cb:07:e7:25:
                    ef:2d:2b:89:cf:47:ec:17:84:60:22:7f:4d:8a:d5:
                    36:f8:5d:28:e2:59:37:cd:a8:0c:63:ee:30:6b:43:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:37:4E:23:49:4D:0B:4B:C1:F1:E2:06:53:9E:E9:02:BA:37:97
            X509v3 Authority Key Identifier:
                keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f6:d1:ae:be:4a:fe:bb:3b:04:ad:9a:b9:5e:20:95:c0:c3:
         48:22:c6:b3:62:97:22:c1:7d:47:a4:6a:42:77:23:77:88:0c:
         d1:c9:53:ef:bd:59:f7:f5:25:25:57:a2:3b:42:ed:17:da:8b:
         a8:90:97:fb:54:31:70:fe:3e:cd:38:19:09:d9:e7:c6:8b:ec:
         6d:c7:a5:a0:8a:14:dc:6d:c5:5f:26:60:aa:9c:ac:79:15:4b:
         25:bb:5f:81:83:ec:06:9b:8b:3f:f4:ed:c4:32:9a:cb:96:8a:
         85:97:13:67:84:de:85:ae:ab:11:b5:0f:68:18:76:7d:be:db:
         96:c0:0f:ba:1f:7d:57:1b:59:29:d9:ca:a2:44:04:c7:b4:70:
         7b:a7:a6:c5:56:ca:16:e6:f4:57:44:fc:48:21:60:d5:ba:8c:
         0a:86:6f:38:d8:9c:58:0d:bb:d4:3c:27:d5:57:b3:1b:d8:56:
         45:bd:7a:4d:fa:26:fc:3e:14:bd:9f:90:56:9a:3d:e6:b6:5a:
         99:e8:73:b7:45:1d:cb:6b:cc:1a:7a:fc:2d:d4:4e:56:35:18:
         c0:f5:6f:37:a3:32:94:a2:06:fc:e7:03:0e:f9:e5:3d:6e:de:
         9e:db:16:b6:dd:d2:77:38:e7:4e:c7:d8:14:79:fd:1d:76:4f:
         47:d7:14:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:04 2024 by rpki-client on console-ams.rpki-client.org