Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File:                     H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier:          q7uHORxu/xosK9oKTRyjJIofN/wMS/Vp0EU4xUW3E04=
Subject key identifier:   E2:22:64:46:A1:37:D2:AC:30:3C:AA:A0:DE:9C:E9:7B:BE:C5:C3:26
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer:       /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial:       01935764D9AB122761EE79F1552F9FE21454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number:          0962
Signing time:             Sat 23 Nov 2024 05:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:47 +0000
Files and hashes:         1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: Jcke1UeYKYqOxaqJoS8fMCiBoftRtovT+FsxJg7GmBQ=)
                          2: wqUrTHKAH5lHmP2sfFKOTBTTOWk.roa (hash: J6g2M+P7tQXEv6pbKMZLJa+YZoB5DNzWzZuTNCswziE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:d9:ab:12:27:61:ee:79:f1:55:2f:9f:e2:14:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
        Validity
            Not Before: Nov 23 05:00:47 2024 GMT
            Not After : Nov 24 05:00:47 2024 GMT
        Subject: CN=e2226446a137d2ac303caaa0de9ce97bbec5c326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:3f:9b:f1:a5:89:40:71:42:91:58:ca:dc:
                    a5:78:51:e4:2b:d7:3c:7e:94:a1:6b:1b:d3:63:65:
                    75:eb:54:a5:90:b6:81:7b:49:d4:c0:6a:9d:c1:66:
                    68:13:d2:40:6d:f5:91:08:ac:ca:a5:16:16:31:ed:
                    ac:c7:de:e6:c9:24:09:02:40:f1:fc:be:ee:c9:00:
                    e7:03:6d:c0:07:3f:14:87:c2:eb:07:66:68:01:48:
                    6d:51:5b:4c:d0:60:f1:d9:d1:dc:ab:ce:7b:99:07:
                    0d:fe:d2:79:ac:77:04:05:47:c4:bf:e5:fe:5a:ab:
                    41:45:9d:f6:1d:3a:e3:5d:03:c3:9a:c9:b1:d6:96:
                    7d:74:4c:cf:dc:84:b1:81:fc:7e:b5:34:4a:33:17:
                    30:e1:1a:96:d0:d7:0e:ce:a1:2c:65:a2:7d:6f:07:
                    63:3e:a4:00:9d:2f:20:ea:1a:c1:6a:fb:55:ba:00:
                    be:31:77:43:fc:b2:69:e6:fb:b3:58:dd:7a:59:82:
                    cc:c2:b9:a8:62:30:df:fd:a2:47:89:12:3e:3e:53:
                    66:f1:67:35:e5:6e:9d:17:ac:d2:c1:8a:49:2d:b7:
                    0f:1e:ca:68:4c:94:f8:fe:f9:63:66:51:e3:d1:6d:
                    38:f1:cb:74:6a:b6:91:8d:bc:c8:74:86:ef:1f:19:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:64:46:A1:37:D2:AC:30:3C:AA:A0:DE:9C:E9:7B:BE:C5:C3:26
            X509v3 Authority Key Identifier:
                keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:47:a0:ef:95:58:47:7e:97:9c:6f:0c:e6:c8:de:80:e8:
         b4:c0:62:1e:d7:a0:10:ba:89:57:2f:85:f1:6d:01:82:4b:6d:
         fe:56:31:48:73:57:09:99:8b:a8:eb:9d:25:46:9a:5f:e1:7d:
         a4:11:e4:d1:66:42:45:2c:8c:63:0e:cb:ae:ce:33:65:1c:e1:
         82:fa:0c:d8:30:3e:43:b2:e0:bc:b4:89:3a:ad:62:b1:08:9f:
         dd:a5:a4:cd:15:9d:4e:20:aa:71:2f:3b:d7:ea:57:46:ec:e8:
         9b:48:50:83:de:94:3e:7f:82:c6:11:66:c9:ab:96:6b:6d:bb:
         95:37:23:d9:40:e3:1f:a1:e5:a4:28:ab:51:de:c5:8b:6d:c7:
         b6:73:57:53:ae:5d:b9:92:8b:48:55:9d:2d:55:46:29:e1:4c:
         e5:f4:06:6e:b5:62:3e:3e:70:35:db:cf:14:0d:2d:5d:ae:a9:
         ff:21:dc:ef:47:7a:c7:e0:63:d8:86:74:2f:85:0b:c2:cc:57:
         bf:46:8d:7d:ff:c4:62:c8:91:04:da:eb:fe:83:31:55:af:ec:
         4c:6c:a7:79:27:6f:a8:d2:07:4c:ce:f8:81:bd:89:23:ce:75:
         eb:78:fe:06:d6:41:a7:4d:a6:72:d0:9b:3d:29:1d:fc:6b:bd:
         ee:d6:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:17 2024 by rpki-client on console-ams.rpki-client.org