Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File:                     9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier:          YYWTeEv0GAhKIBsDDWLWWRxfBsb4BTfdWMlpT/i/dwo=
Subject key identifier:   06:AD:EC:D7:57:B3:CE:17:B2:FF:3F:07:FA:2C:5B:7B:AC:52:7A:D3
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer:       /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial:       0191FB5A7863008BDC57F3EE5841E7781C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number:          DB
Signing time:             Mon 16 Sep 2024 15:01:35 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:35 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:35 +0000
Files and hashes:         1: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: hdI2RdkbUzrgdva/Id6YReb3LKMbV3lro4ZXmHAzYHY=)
                          2: c3fAAvzWW3rwLSkbKfg8HRPSepQ.roa (hash: ypGcFLIAjFpd8gVtS9VkTJT2kFIqXb9TxzsAJcU3G1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:78:63:00:8b:dc:57:f3:ee:58:41:e7:78:1c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
        Validity
            Not Before: Sep 16 15:01:35 2024 GMT
            Not After : Sep 17 15:01:35 2024 GMT
        Subject: CN=06adecd757b3ce17b2ff3f07fa2c5b7bac527ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:13:51:3c:f8:9e:15:1e:47:95:f4:7e:10:e2:
                    f6:2e:0b:ce:e1:33:4b:d1:62:1c:28:2e:07:c4:f5:
                    ed:b0:5d:c2:a7:bf:0a:16:a3:2b:38:4d:93:04:77:
                    63:d9:52:86:cb:7b:4c:df:01:4a:a1:95:99:49:50:
                    3b:b1:39:e6:c1:88:d3:74:24:eb:ff:7e:8c:55:3a:
                    4a:47:59:ab:ba:e4:44:55:b9:23:b6:56:0a:a8:f0:
                    0d:68:f2:c8:2e:9b:74:e6:f6:6d:60:da:11:8c:e3:
                    4b:7d:b3:a9:62:fa:ae:7f:db:f9:3b:67:f2:29:7e:
                    c5:a3:75:c6:fb:cd:ee:c0:89:9c:ad:85:39:97:56:
                    3a:ef:73:fd:07:6e:6a:bd:52:b2:0b:f4:98:27:ce:
                    72:a8:6b:04:07:c6:a8:f7:f5:30:ae:1d:f2:99:fe:
                    b1:8a:94:d6:5e:ff:e4:4e:41:ae:fa:8e:62:0b:15:
                    b9:ca:37:35:39:b8:0f:38:26:d9:88:9e:24:95:cd:
                    2f:d8:7c:a3:17:4c:d0:8c:f7:61:39:7c:40:26:a4:
                    d6:7b:89:95:f3:9a:eb:30:5f:3e:50:27:88:3c:c5:
                    16:a0:00:eb:6a:30:f0:cb:ef:db:2a:ea:94:28:5b:
                    30:4c:e6:40:d1:ec:07:fe:14:53:0c:2e:e1:fd:f9:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:EC:D7:57:B3:CE:17:B2:FF:3F:07:FA:2C:5B:7B:AC:52:7A:D3
            X509v3 Authority Key Identifier:
                keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:f6:ed:70:d1:d7:da:f9:6b:61:7c:7d:8c:79:61:07:31:
         e5:6f:55:67:45:c5:9b:7f:52:24:4f:53:00:07:a7:8f:8e:d9:
         6a:cd:53:a7:86:a5:df:7d:0a:ab:a6:c0:d8:1a:4d:99:1f:bf:
         c5:cf:31:5a:0d:90:83:8c:07:b9:0d:0e:d8:7a:31:10:1e:61:
         21:10:e3:34:c7:ae:2f:36:71:85:87:90:80:09:84:b2:19:63:
         54:7a:ef:3c:25:38:6b:be:da:05:c2:27:a0:2a:ae:67:a5:e1:
         7c:ce:a5:c4:77:c1:b2:21:7c:d6:2b:e9:96:4c:b3:71:bf:97:
         07:f7:93:21:49:3c:d9:4f:b7:c7:64:31:a5:d1:95:18:d4:eb:
         bb:fd:d5:e7:30:70:9d:d3:5f:67:64:18:19:b4:41:b4:1c:e5:
         37:bf:58:96:23:0f:25:4c:7e:17:8c:02:44:1c:48:ca:1a:00:
         d3:cd:a8:86:e4:c6:f0:1f:47:7b:d4:8b:1a:91:f0:cb:47:77:
         f6:38:6e:80:47:74:58:d6:bf:c7:52:bf:ae:9b:bb:07:24:fa:
         05:8c:40:96:45:e6:df:a2:5f:9b:56:d0:7a:03:2e:6e:4c:34:
         04:42:8c:3a:a2:69:5a:f1:42:b9:a9:48:57:53:55:af:c8:57:
         fc:2a:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:25:04 2024 by rpki-client on console-ams.rpki-client.org