Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File:                     1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier:          cTMM4kSautLklxnMyGn1ARv0wkrYkHXtGWcz1h06lTs=
Subject key identifier:   7E:07:77:3A:49:A1:C9:B2:4A:07:5A:95:4E:31:9D:CC:B9:D9:F0:CC
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer:       /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial:       0193568AB80CDFE0A1420883FF39C77F6436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number:          0A8F
Signing time:             Sat 23 Nov 2024 01:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:31 +0000
Files and hashes:         1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: zN/e495s0RQ+tSyUonLor5QTIJsDQ1J9lAeP2htcYsk=)
                          2: Y3yc3HrQzTdFeg5pHHD4Q-eKaJ0.roa (hash: ml0YdAViLGeK91KJIF3mxvKBP57uNQ6HNPOHFL6Wcf4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:b8:0c:df:e0:a1:42:08:83:ff:39:c7:7f:64:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
        Validity
            Not Before: Nov 23 01:02:31 2024 GMT
            Not After : Nov 24 01:02:31 2024 GMT
        Subject: CN=7e07773a49a1c9b24a075a954e319dccb9d9f0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:57:d6:f1:82:9b:c8:19:c4:ce:eb:5a:04:
                    30:a0:6e:da:90:b0:79:04:7e:1b:9d:35:ed:be:2b:
                    e4:4b:ea:d5:eb:79:7c:d8:5e:7f:a4:b2:7d:c8:d7:
                    c8:56:e0:b1:cc:5f:d3:24:bd:2e:66:1e:33:65:a9:
                    be:f6:7e:ed:94:46:5c:63:45:09:b1:9f:03:8a:0e:
                    27:c0:8c:ac:33:e8:e9:06:8b:cc:6d:39:7e:76:da:
                    c2:40:71:59:88:9d:97:49:8d:c7:be:c5:0c:23:86:
                    ee:ee:1c:9c:c1:99:8a:92:94:18:67:37:82:d2:d4:
                    ea:37:5d:9a:c5:99:80:1b:d3:2e:e1:d6:6d:18:a7:
                    d5:cb:57:0f:4e:c9:ce:df:ad:e0:92:0a:20:53:c2:
                    d1:fe:d4:d2:fc:0e:77:d5:85:73:fe:31:08:92:a3:
                    f7:c6:fd:20:63:bf:1d:ca:2a:ae:49:14:7c:26:35:
                    ea:c7:74:55:2b:b9:ef:8f:81:85:9a:e9:cc:2e:bb:
                    09:11:82:ce:f8:5c:a5:40:74:68:56:0f:25:d1:83:
                    ca:f5:82:32:e0:d6:3b:f4:fc:a2:07:41:b5:49:74:
                    d5:f5:c7:cd:6e:bf:15:4d:78:0f:5d:5f:d7:e7:55:
                    48:f7:33:01:60:60:a7:7b:a3:c2:4c:5f:d1:59:08:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:07:77:3A:49:A1:C9:B2:4A:07:5A:95:4E:31:9D:CC:B9:D9:F0:CC
            X509v3 Authority Key Identifier:
                keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:6d:66:4a:bc:23:e4:39:e2:61:a4:69:8c:d4:f1:ba:a4:
         05:58:12:37:52:0e:45:ec:ae:9c:b4:9a:a2:1f:37:9f:b0:ba:
         85:4c:5c:a4:eb:5a:ae:15:1e:c2:cd:b4:77:22:59:4c:22:f6:
         2e:a6:3e:38:a8:32:9a:5f:49:9f:4f:78:97:8b:5c:1f:db:8a:
         d0:34:14:d7:2e:10:81:c7:f9:24:e3:9a:6c:1e:40:e0:ad:67:
         11:a7:51:d4:c6:14:07:f3:e1:97:11:b0:57:8a:fb:60:95:77:
         46:92:56:9a:21:ba:36:3b:5f:73:70:ee:ba:c6:be:a3:dd:7f:
         bc:6f:42:01:f1:1c:af:52:20:c4:41:13:88:35:68:4c:e5:6a:
         dc:d3:1b:eb:ed:73:fa:66:2a:28:fe:c4:ac:57:f5:ea:87:ba:
         01:48:3d:d0:01:a9:38:16:77:d0:03:47:5d:7c:5c:13:e3:6c:
         ea:8e:c6:01:7e:ca:a1:04:fd:57:ff:b4:0a:9c:4a:79:1b:d4:
         51:b4:fc:a1:cf:77:0d:fa:7a:af:93:bd:9b:15:c9:ef:8a:b5:
         96:de:3a:ce:13:2a:fd:28:5b:ad:b7:07:fe:ee:3c:df:38:e8:
         6a:8b:74:45:76:d0:7d:38:60:f5:69:cc:ed:42:4a:e7:5d:2b:
         65:44:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:45 2024 by rpki-client on console-ams.rpki-client.org