Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File:                     f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier:          I/tWAdtX8/0Ba8v4Hw/1ne9DAQFGQrHn0HBZEPJmbPQ=
Subject key identifier:   B9:E5:32:AD:37:54:37:39:86:57:17:84:08:B8:0C:83:1E:8E:E8:BD
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer:       /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial:       0193549CA575531471560C0E87C0F07452B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number:          0B0D
Signing time:             Fri 22 Nov 2024 16:02:52 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:52 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:52 +0000
Files and hashes:         1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: nzs+IQ85fmFSPjZTxD+WcDiXQWvcaCjApxOpv6dZdlM=)
                          2: n_KIMJqfqW83fJfLKKGYTQuyHsk.roa (hash: J1iTlQF83Arp/FjjdBZnwqbM+mAOyZjQ4pWH1gpPPS0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:a5:75:53:14:71:56:0c:0e:87:c0:f0:74:52:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
        Validity
            Not Before: Nov 22 16:02:52 2024 GMT
            Not After : Nov 23 16:02:52 2024 GMT
        Subject: CN=b9e532ad375437398657178408b80c831e8ee8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:15:7c:0b:87:0d:9d:df:69:e0:51:ad:ad:
                    ac:d5:52:55:65:22:2f:2c:a7:a5:66:02:88:99:dc:
                    91:e8:e2:ca:b4:56:de:45:6e:6c:eb:d9:b9:b9:fb:
                    91:f0:ca:e9:a2:96:64:bc:a7:0d:ff:df:1c:06:af:
                    7b:ff:5a:77:cf:c5:29:ff:30:1b:a9:84:74:1c:de:
                    e2:56:ee:44:be:39:81:07:3e:8a:46:28:b3:3e:8e:
                    2e:fe:5b:33:6e:43:69:b6:85:a0:03:c2:72:f7:48:
                    60:cc:3b:15:dd:64:c5:75:ed:5b:30:46:bd:59:55:
                    40:6c:3f:99:20:c2:98:aa:85:4a:b7:08:7c:8e:7c:
                    ef:99:0f:1d:94:70:d4:06:cf:1f:a3:ec:a4:b7:27:
                    9d:f9:50:be:88:93:2d:f8:e3:49:f6:75:8f:63:b4:
                    36:5f:0b:14:22:99:73:ac:cc:8c:31:e4:35:d2:b3:
                    30:07:dd:b6:87:64:26:e6:47:7b:0d:4a:b4:7f:c1:
                    1f:30:fd:71:09:48:f2:af:af:9b:dc:94:e0:8e:ee:
                    98:2a:2a:f1:52:bc:54:97:cb:c9:85:17:46:89:5e:
                    5c:cb:86:4f:df:7f:41:fe:5b:fb:71:17:64:89:51:
                    6c:99:cb:ed:88:bf:f9:06:36:0b:ef:38:f4:d4:50:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:32:AD:37:54:37:39:86:57:17:84:08:B8:0C:83:1E:8E:E8:BD
            X509v3 Authority Key Identifier:
                keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:8c:bb:46:ff:2a:a3:ac:d0:c2:4d:c9:e1:51:4a:a6:7b:
         70:f7:dd:5e:06:8a:26:31:34:71:2d:d8:1d:fe:4c:85:60:c1:
         98:9c:22:f1:d1:f5:6c:1b:58:64:8e:8a:2e:3f:53:90:f4:82:
         96:fb:2f:09:32:9f:dc:81:ad:a2:de:91:5f:13:07:7a:c4:59:
         48:49:93:ba:ee:51:46:ad:b0:c8:1e:e7:54:9a:c2:c1:91:92:
         8f:2d:81:1f:05:de:7e:05:63:19:59:86:6c:88:52:e3:7d:86:
         b5:c3:3c:40:50:ba:ca:32:6c:86:37:7b:50:10:e0:8c:91:c6:
         fc:aa:24:2e:89:5b:15:5a:db:5d:ea:3c:de:34:8f:53:9e:8f:
         b4:10:65:1b:f5:6e:16:f8:c0:1a:d4:d8:08:d1:9e:58:8f:15:
         fb:94:b3:34:90:03:6a:c3:5b:68:29:c1:d3:65:d6:c3:34:82:
         1e:44:8d:e1:32:9e:03:c6:eb:8b:07:28:3c:97:d0:93:ee:7f:
         de:2f:66:9a:5b:60:72:e7:2c:cd:a6:d0:f4:e8:d5:76:ab:3f:
         96:08:a9:5a:98:e8:1a:b6:56:78:ef:fc:44:98:ea:0c:c1:b1:
         29:66:04:b8:a2:25:fe:e0:d6:db:28:8b:85:b4:59:6c:02:ef:
         6f:a4:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:10 2024 by rpki-client on console-ams.rpki-client.org