Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          OAUkXDa36qDksnbKwsPpPxquJqabMuAS90cmbJhFg5I=
Subject key identifier:   45:6E:E5:37:3C:54:99:C8:9B:49:62:A2:F4:BA:BC:B6:26:1A:C1:7E
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       019353BEF9DBEAC691DF9EB8B4AF8158CF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          0273
Signing time:             Fri 22 Nov 2024 12:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:44 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: TIcA2mduBZX32WhMuaxmRz99r7+Rxw+IN4Q3I5/AQ9w=)
                          2: 1_nRt-fiqRuMK3Z50V9x9ur0WYU.roa (hash: Qfok0rZX4WesXDc+Ti58mkYzvV3rm/xmSH1QW3B92NI=)
                          3: XqUoUcdDJL6Fp9Bf_J44r6DgHAA.roa (hash: Muk9HxVBwka+PnDTC6aANBMqTfN5OeI9H5hr1ijqqRQ=)
                          4: w2SK3S0qgG6B9n9UTw44f-MDfJI.roa (hash: CvdTTxkuyHVjvnIS+aZNU5dJ3lnoVjSePmuxJrf1JUA=)
                          5: zdrKQtAt5UnO1SC8RhT72esUeXY.roa (hash: 6QNnJjtN+OnawcorEmOUI8VRSxPfRdcAKqMgR0Uv36M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:f9:db:ea:c6:91:df:9e:b8:b4:af:81:58:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Nov 22 12:00:44 2024 GMT
            Not After : Nov 23 12:00:44 2024 GMT
        Subject: CN=456ee5373c5499c89b4962a2f4babcb6261ac17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:d7:ef:07:af:51:bb:23:fd:98:b1:99:7f:
                    78:97:78:65:a3:66:15:13:9e:9e:25:8d:02:91:f1:
                    49:95:28:6b:4c:06:7f:d4:1c:51:7b:5d:57:76:7e:
                    e8:2c:96:8e:95:32:4b:74:38:80:0e:fb:5c:8c:82:
                    9a:cc:00:e4:e4:95:cf:0d:26:31:e5:58:eb:59:45:
                    bf:42:30:41:90:c9:48:d8:26:70:e8:2b:9c:e8:60:
                    f1:d0:08:ce:1d:5e:ec:2b:4a:e3:f0:0c:aa:5a:46:
                    d3:ba:95:4f:8f:3a:2f:37:dd:3c:e7:34:f2:fe:03:
                    25:65:6f:52:29:6e:25:61:03:63:21:10:79:f5:a2:
                    42:07:f9:e8:6a:81:9b:39:b6:39:29:3f:8f:4c:11:
                    66:b2:1b:05:83:16:22:30:87:47:61:35:9f:fd:2d:
                    10:3c:8d:61:6f:3f:af:d6:3d:6e:83:7f:1f:6f:8f:
                    db:86:ac:c8:ec:9e:67:b0:2d:96:08:4c:9b:c9:57:
                    16:44:42:7a:03:79:05:c3:7c:35:9d:5a:ac:c7:6f:
                    da:1c:a5:73:1a:46:04:b4:1c:2c:2e:0e:37:02:d1:
                    e2:63:c7:6f:c4:f7:41:fc:a4:39:4f:1d:b3:35:66:
                    25:91:b4:c1:87:a7:c5:81:0d:af:5a:32:40:02:b7:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6E:E5:37:3C:54:99:C8:9B:49:62:A2:F4:BA:BC:B6:26:1A:C1:7E
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:18:26:b3:36:c0:e6:3a:1e:80:e5:47:10:b7:8b:8d:39:74:
         35:bf:ff:a1:d1:fb:c9:5a:04:9e:94:fc:69:a3:77:21:c2:99:
         cc:1f:d6:cf:99:56:c7:7a:fc:a1:3f:dd:ac:ed:1b:47:db:db:
         53:11:3b:73:c1:b3:e8:20:af:b5:0b:8b:a5:41:f3:0b:45:eb:
         17:05:ed:4d:11:ed:24:3d:ed:38:00:0f:f5:ee:f8:28:12:70:
         a1:c0:42:47:41:b7:9d:db:19:25:f5:3b:ef:25:53:a5:b3:cc:
         be:54:b7:75:9d:27:b6:58:87:b0:53:43:be:c1:88:cb:3c:94:
         8e:a2:63:dd:28:15:eb:4b:bd:3a:f3:ef:29:71:92:ee:db:ad:
         cb:e8:6d:23:fb:7f:8b:cc:28:ab:8a:19:1e:39:9d:6c:51:2a:
         72:88:a8:ff:5e:d4:17:a2:78:4f:64:77:17:5e:5b:27:04:97:
         59:84:72:ea:b3:00:79:d1:64:03:02:34:7b:1c:05:80:5e:9f:
         33:e1:7e:8e:95:80:18:7d:8d:d7:8c:d7:06:d2:2b:94:2c:70:
         98:84:81:b5:0b:e7:de:82:9c:4a:66:14:69:28:0a:7e:f5:55:
         13:a2:2d:5a:be:9d:35:0a:e0:37:1d:ed:70:8f:08:9e:09:99:
         ba:f4:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:26 2024 by rpki-client on console-fra.rpki-client.org