Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File:                     9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier:          wW6FO9ibjUjh6GOr7F+H3gJUxva+BvSkmrSI6kA5lMk=
Subject key identifier:   17:B0:72:1C:DE:E0:80:52:3E:44:DA:45:02:35:DE:3E:12:DB:FB:A3
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer:       /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial:       019369D947F01D947267802102F0B1E33373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:01:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:07 +0000
Files and hashes:         1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: Fghu5uxWyucTzFWjJTdZulIp4xY3PfyEo/fuQARRfz0=)
                          2: mRRVsGfcLPmdR99n1j0u3ool8Fc.roa (hash: wwO+Gro9mnfEu3m0neI2kEzml0U7buFp3TX1GcuAW3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:47:f0:1d:94:72:67:80:21:02:f0:b1:e3:33:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
        Validity
            Not Before: Nov 26 19:01:07 2024 GMT
            Not After : Nov 27 19:01:07 2024 GMT
        Subject: CN=17b0721cdee080523e44da450235de3e12dbfba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:ca:50:99:8e:63:14:2a:75:c4:02:c2:16:
                    53:c9:7e:01:d7:b5:4b:8d:98:83:85:e9:a0:df:2f:
                    1b:e4:02:75:cb:4e:c5:29:30:4d:2c:6c:e1:01:69:
                    07:b3:55:c0:df:93:9a:66:20:79:ef:4d:11:65:7a:
                    68:70:24:17:61:25:77:d8:92:79:33:b0:e8:1e:97:
                    35:df:b1:c3:0c:51:d6:09:93:eb:8d:b2:79:9a:4a:
                    f6:a7:c0:0b:4f:f6:e7:0c:51:73:f3:dc:06:d1:75:
                    b4:ba:4a:43:0e:8e:3b:67:5b:94:a9:d3:c3:3a:fb:
                    e9:43:ea:2d:ff:0a:69:a1:6b:79:d3:3b:ee:ac:34:
                    06:32:c3:22:a4:70:37:1a:e3:0f:d6:ab:00:ed:d0:
                    c3:c2:b7:54:e3:11:0d:28:56:25:b3:6b:93:d4:23:
                    85:d6:3f:80:bf:bf:45:83:3a:da:25:af:82:6f:71:
                    f1:da:3a:ba:16:d0:0a:72:24:3c:06:fb:ec:2d:eb:
                    86:d6:0e:cd:8e:b8:55:a6:97:3d:7b:af:1b:4e:e4:
                    c3:82:3b:1d:9a:17:6b:5e:20:c6:a4:66:86:2e:5d:
                    6a:e3:4a:82:b9:f8:43:7b:cd:d5:53:2b:de:51:d7:
                    62:45:0f:c6:88:42:2e:07:1a:37:a3:eb:62:8e:3f:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:72:1C:DE:E0:80:52:3E:44:DA:45:02:35:DE:3E:12:DB:FB:A3
            X509v3 Authority Key Identifier:
                keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:72:13:5b:5d:50:08:88:d5:44:5a:08:ab:19:4b:dd:75:a1:
         90:39:4d:c8:81:1c:ad:72:77:9b:1b:e5:b9:ec:81:95:bc:f3:
         1f:f5:52:2a:c5:78:1f:2d:ff:11:bb:07:d2:01:a7:41:4c:e6:
         1e:8b:42:8c:68:c2:7c:16:4b:6d:13:a3:09:e7:22:4f:76:6a:
         8e:34:16:e7:9c:21:62:a8:45:ad:14:d1:04:53:12:c3:76:94:
         ff:89:bf:20:72:45:15:50:17:b3:d5:d6:80:10:18:aa:e7:51:
         51:48:a6:ab:eb:ea:46:1a:88:0b:20:52:1e:e1:c8:86:6d:db:
         1a:a9:9f:cb:69:f0:77:55:2d:80:19:c5:83:58:b2:88:95:c7:
         f1:31:3a:44:76:72:fd:1b:63:cf:38:d0:1c:1a:2d:dd:c1:bb:
         43:4b:5c:60:53:10:9b:0e:59:f3:db:df:c7:f9:46:a0:bd:55:
         84:5e:2d:24:8f:e2:53:3e:ef:6d:24:eb:64:5b:c5:ba:1c:bc:
         c7:52:a6:19:81:22:cf:88:1f:f7:7c:76:24:41:9b:62:23:fc:
         20:5d:b8:97:98:a8:4c:32:68:7f:6d:14:c2:e6:bc:2d:d8:16:
         3d:95:e5:40:31:c1:c5:72:7c:eb:cb:c1:86:f5:0e:19:ae:ba:
         25:e6:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----