Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          YQYMaGYgKWagbGGTsLZnHLEILo3W094Ca36sXSvKmEk=
Subject key identifier:   0F:87:C3:F0:F8:16:6F:71:FF:07:89:4D:FD:91:BE:A2:7B:33:D4:4B
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       0193546349B696B08A388806F6AD50EAD6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          1395
Signing time:             Fri 22 Nov 2024 15:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 15:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 15:00:13 +0000
Files and hashes:         1: 6hHT6xA63sYoiSJoEkctm0RU4Rk.roa (hash: vPhR2au3XkuFO4Ewk65Av3iQ/bDI67WueO4XPALuyGw=)
                          2: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: GPVElS9njkbitCf5rqoe+EgXfSGSeoJVg1YgZi5LyG8=)
                          3: JR3ebzdmQ6o3IsZgWA6cddy9xVs.roa (hash: jIaj/k6CaOOO0DsFDRupDRAkzno8vZkY8OH/cK5Y19s=)
                          4: OgP6XD0nd9Nj2Bq26Og3CLfSDHo.roa (hash: o3DPMdxZfhg1Zimtn0SkedyfQ4igFrvGO+7LOwyU6I4=)
                          5: VXZRyc4NkTlQ59tVDUbmN9uewes.roa (hash: C0EWbtfYJzMawxiDtGMQBDGClxlOkcg5WnHQC03TFwg=)
                          6: dZEStgzfbiMQEeXZVf02POx1HqI.roa (hash: Pd/nOKPJeETbcKvNVg1KmppA1Nbt6TJqWH9KbLZGOfk=)
                          7: f0MhiJq0tWVRNE4P9AykxzWjENY.roa (hash: YFTBrUuFEAPBazzD4yNseBHgf/rzsircPbPo5lnzCJI=)
                          8: j-kfcO8Id8mCmt7xejVgrtLcfl4.roa (hash: opYL/KjKp7SLrhD8gWsw9pUTVnkD5Iqf4M3Fvy7e8ws=)
                          9: t1re2B814I0Z843KTi4N8XxlM84.roa (hash: uyIuhnOjUPtK0oXFCD0gyRAIVM2E+a7d8bsDswDQnDo=)
                          10: toqeTCSSbmNMuvO5dQMo_7uvUB0.roa (hash: X0/SSRvnmpuX5Jj+CYSZDK57zz5JbnlRnsfG9vAoblk=)
                          11: v2uJId8PAw3WVyJlQ3QZmwVHqYg.roa (hash: NGR5pgLDCmi68kp/ltURnzWBJOirmGq2a/lr9NRBgWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:63:49:b6:96:b0:8a:38:88:06:f6:ad:50:ea:d6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Nov 22 15:00:13 2024 GMT
            Not After : Nov 23 15:00:13 2024 GMT
        Subject: CN=0f87c3f0f8166f71ff07894dfd91bea27b33d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:00:53:fb:61:c3:a9:8a:b4:a3:6f:ea:61:
                    b4:ba:df:13:29:90:6d:38:30:97:fd:d5:51:10:5e:
                    46:78:63:69:21:b1:7b:d1:e2:cf:89:57:13:65:5b:
                    d2:f4:72:80:cc:54:90:ae:aa:00:3d:d1:5f:60:a4:
                    bd:5e:98:b7:3d:b7:f3:c4:61:37:e4:54:65:cc:27:
                    ca:92:38:f1:c2:1f:80:d0:68:e0:31:db:34:89:b1:
                    91:0b:f7:c6:a5:a2:2c:63:65:e6:82:e9:68:73:f7:
                    b2:b2:40:39:13:9e:b1:75:45:12:38:b2:16:eb:d8:
                    a2:2e:e8:c5:ba:58:09:03:e1:91:d6:b5:fb:f9:54:
                    c2:8e:5e:ce:13:e5:29:ed:e6:a3:ae:a8:14:74:de:
                    63:c3:f7:f0:32:ec:7f:72:e7:4d:83:06:a8:d0:40:
                    79:20:d3:4f:d3:29:28:23:29:84:44:50:11:50:5d:
                    60:05:04:3a:02:1b:e1:bd:e7:e2:06:48:c6:6e:45:
                    89:cf:1e:6e:d9:29:ec:eb:83:13:69:32:e1:5d:a4:
                    cd:b5:14:52:fc:a9:b3:88:a7:cf:ce:de:9f:a7:51:
                    18:e4:41:81:6d:ec:78:f2:1e:7c:dc:91:dd:01:16:
                    ee:ec:4a:a2:e0:d1:77:e3:8e:dc:34:85:87:a4:aa:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:87:C3:F0:F8:16:6F:71:FF:07:89:4D:FD:91:BE:A2:7B:33:D4:4B
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ea:99:2a:b6:b0:3d:b5:18:37:fd:79:b5:9c:26:65:7c:7c:
         a0:f7:c4:c7:9e:a4:18:0a:5a:2a:34:97:93:f8:a6:da:76:2d:
         78:c5:b8:36:55:da:40:a6:6b:38:85:13:ab:03:92:33:2e:3a:
         91:f1:95:28:de:4c:2e:9c:8f:7d:00:34:06:8f:f0:8f:26:df:
         bb:ab:5a:56:b3:cf:96:73:7b:8f:38:ed:58:dc:8a:34:b1:91:
         34:b2:82:fb:df:e9:be:d8:c6:8c:c0:cf:77:6c:cb:96:27:06:
         fd:00:ff:7f:61:b5:99:7d:7b:8c:90:9b:17:0f:f9:9c:83:c9:
         c4:70:b0:d6:e6:b8:00:e4:74:96:09:37:d4:c8:21:33:11:d7:
         ae:06:9e:4f:41:97:b0:38:bf:27:77:72:6f:1b:d9:89:75:70:
         82:a4:da:60:68:74:ff:22:82:50:71:0f:46:6b:9a:fb:cc:d7:
         8a:95:b6:5a:21:d5:1e:c3:8a:21:01:c9:93:27:b3:bc:13:a8:
         5a:11:6a:98:29:5e:18:89:9f:8b:f3:54:0c:24:51:8d:37:88:
         1d:2b:7c:79:d2:55:12:b3:26:f1:41:78:11:6a:bc:c3:22:df:
         3b:65:5a:9d:ff:ea:86:8e:b3:6f:84:12:4a:68:63:68:13:11:
         ca:32:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:25 2024 by rpki-client on console-fra.rpki-client.org