Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File:                     9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier:          jB6JxZBPmEPaba7s6E4i+LLd3IT+ywP3dSrT9U8XEC0=
Subject key identifier:   B8:A5:BB:5F:20:FA:33:E9:90:89:2D:33:CB:29:6E:34:D6:CF:E7:81
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer:       /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial:       0193549C9556375F6052CE15EE85ADDA3384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:02:48 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:48 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:48 +0000
Files and hashes:         1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: FIP81s2BWmF1Zg1luaMmP7YzGsbHgiO5UxG5jTUG0UQ=)
                          2: d97FjABW90CroEJanDvGUqTE40E.roa (hash: ZcfktDHA5frHUV5m9DfpcJXEU0rFABj/FDnGJTBAcQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:95:56:37:5f:60:52:ce:15:ee:85:ad:da:33:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
        Validity
            Not Before: Nov 22 16:02:48 2024 GMT
            Not After : Nov 23 16:02:48 2024 GMT
        Subject: CN=b8a5bb5f20fa33e990892d33cb296e34d6cfe781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:a0:d8:26:26:7d:19:98:b3:6e:e8:23:b1:
                    fd:07:2c:83:63:8e:86:bf:6f:f6:18:53:a6:c8:4e:
                    38:75:a0:5f:02:79:c4:4e:48:bb:4e:92:20:44:45:
                    cf:9b:fa:fb:20:1e:9d:cc:34:e5:ba:90:33:a5:06:
                    30:47:c2:8f:5d:8a:a6:25:0b:8e:c2:86:7a:2c:17:
                    05:f5:31:d9:7a:79:21:82:72:3e:ee:93:9a:0b:32:
                    91:4f:a6:66:f6:d3:7f:be:3b:74:34:c9:cf:2b:89:
                    1e:50:e4:9f:6d:e6:a4:c3:c8:58:f2:17:65:98:8a:
                    df:a1:b1:6b:c3:77:da:63:b5:e4:49:ac:fd:b4:ca:
                    94:77:9f:16:53:1c:11:5d:e0:3f:36:51:f1:fd:41:
                    0a:cf:ff:ed:a5:2f:4c:97:fc:eb:ba:58:62:8a:5b:
                    70:57:77:9f:67:9d:88:bf:0b:00:4c:11:08:e4:23:
                    7e:68:d2:1f:da:f5:be:05:83:65:ec:6f:71:6c:f3:
                    65:2f:c5:0e:cf:f5:24:76:92:7d:3d:3e:0a:50:98:
                    25:fd:46:38:00:bf:cd:72:d3:22:c0:30:a5:40:c6:
                    b6:be:66:09:43:87:63:b2:f8:20:4b:d6:26:23:c9:
                    2d:89:ae:d9:15:23:98:6d:62:32:40:52:57:f9:e9:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:BB:5F:20:FA:33:E9:90:89:2D:33:CB:29:6E:34:D6:CF:E7:81
            X509v3 Authority Key Identifier:
                keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:63:d7:9d:a9:d6:5a:d3:45:65:48:13:d3:fc:fc:6c:eb:
         d0:c6:ef:87:75:08:c9:ae:e2:65:7a:3f:89:68:e7:52:f3:50:
         5b:79:01:4f:46:3a:43:71:6e:74:ad:bd:9c:32:e8:ea:76:d4:
         d3:38:09:bc:97:c7:25:d0:fd:66:e1:87:9e:68:31:eb:17:2e:
         b2:b2:20:88:86:0f:58:64:ea:bd:8a:66:ab:3b:19:32:e8:ef:
         84:fa:78:18:87:c3:8d:2a:6b:ea:c0:8d:2d:44:1e:e7:fa:74:
         8a:fa:2c:da:eb:4e:5e:e0:dc:0f:d2:94:9d:7b:a7:3e:69:65:
         88:2a:58:34:af:78:c6:f8:c1:8d:3a:31:0b:4c:9e:bf:ad:c5:
         7b:26:1a:5c:e2:44:cb:01:dc:20:5e:9b:96:7f:10:06:ae:4b:
         4d:89:60:f1:b0:69:11:4a:9b:88:0f:ff:e1:9f:64:67:c8:9c:
         a2:09:6d:69:76:2b:0a:ce:a2:22:30:af:1e:b1:ff:96:cd:2b:
         4f:43:73:18:9d:3c:ed:73:5e:8e:99:8e:06:bb:17:d6:73:99:
         86:56:18:3a:d3:a2:fe:c8:39:2b:25:33:b2:b9:bc:2e:9c:b1:
         2b:e5:c1:8d:98:27:29:53:b1:f4:6a:c0:7e:34:23:c9:b6:8a:
         9a:63:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:48 2024 by rpki-client on console-ams.rpki-client.org