Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File:                     SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier:          9KtGE2+8vsgdmEkeHCa0VE5OjesHx/s3yGwYvo+AAqo=
Subject key identifier:   23:6E:08:89:AE:D6:8E:25:4D:ED:65:65:17:21:83:B0:C3:CB:AF:66
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer:       /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial:       019355E4375EA6F139B3E7D39F2D6BB5CAC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number:          0F9C
Signing time:             Fri 22 Nov 2024 22:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:39 +0000
Files and hashes:         1: B6NJuvKoZZdMyXkXFacxWPOpPys.roa (hash: n6Wz95tHAtJGqonVtZc3bYPvWHMZ5kfUIgVNc2gAZkg=)
                          2: PGPaVWsoqD-yyL6TXD1NJicnVX8.roa (hash: QeK2aVb9ML9pu7DQAbJPLKXGaJqOUmRaWHuaZCt4e5w=)
                          3: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: yFLV/37wDB6S5htviP0J46tEOmTB8RDJKFYurLvZhuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:37:5e:a6:f1:39:b3:e7:d3:9f:2d:6b:b5:ca:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
        Validity
            Not Before: Nov 22 22:00:39 2024 GMT
            Not After : Nov 23 22:00:39 2024 GMT
        Subject: CN=236e0889aed68e254ded6565172183b0c3cbaf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:c7:28:2b:0d:6e:fd:14:48:8a:ee:08:1c:
                    1e:1c:82:98:c4:f1:ff:68:9f:ad:8d:2f:83:32:bc:
                    9c:f5:e3:30:79:38:f1:14:20:21:ec:18:38:50:72:
                    44:25:10:12:aa:bb:b1:da:12:de:80:73:2e:f5:a2:
                    3a:7d:11:44:09:ec:0f:e6:7b:63:ed:fe:f9:e2:7b:
                    06:12:d2:db:66:55:b6:ed:b6:f2:35:3e:48:05:36:
                    b0:b1:aa:1a:66:51:ce:14:17:09:ae:a8:7e:08:f5:
                    4a:49:51:19:6b:82:8c:60:49:e3:ea:ad:0e:fd:b0:
                    c3:a2:88:c6:9d:b4:c8:8c:ec:f7:b6:af:c1:48:7a:
                    63:c4:f0:01:3b:cb:35:7a:c9:76:28:63:8e:99:06:
                    c0:e1:11:9e:8c:35:a4:8d:7f:8e:9b:fd:fc:28:31:
                    65:22:33:3f:3d:33:0b:1b:84:07:dc:66:68:66:91:
                    9e:8c:21:f1:7f:5d:24:44:b1:32:38:3c:88:9d:b2:
                    4e:68:a6:f9:6f:c9:12:45:24:88:64:31:7e:04:ef:
                    91:0c:8f:b4:09:e0:32:62:4a:d3:52:98:59:3e:0d:
                    82:76:3d:e9:12:ad:e9:a6:6f:2b:dd:b1:ce:dd:e9:
                    b1:bd:b3:07:91:0d:e2:18:ef:8d:39:44:a2:73:44:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:08:89:AE:D6:8E:25:4D:ED:65:65:17:21:83:B0:C3:CB:AF:66
            X509v3 Authority Key Identifier:
                keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ba:37:ba:67:f0:47:90:a7:d5:01:f7:99:bf:35:e9:05:0a:
         34:03:91:6a:8c:05:8f:08:2a:38:f2:0f:00:35:b4:c9:86:ab:
         83:1e:2f:e2:2b:b7:10:56:7a:ab:aa:56:b3:d2:de:19:d6:eb:
         52:83:88:51:5f:c9:e5:ab:30:67:5c:ba:88:c9:a3:03:8c:46:
         ee:c8:7c:4d:1a:0e:33:82:06:d0:45:dd:f2:32:43:81:98:86:
         3c:29:e2:c8:82:17:e0:55:b7:6a:02:cb:4b:f7:da:55:88:e6:
         f9:9e:2c:cb:37:e6:a9:33:34:10:db:29:ff:cf:7e:42:96:80:
         73:3f:db:20:64:17:0f:8f:cc:ef:03:1a:1f:8e:2c:01:f1:8e:
         5a:ee:cb:40:69:47:db:0f:48:84:e6:12:dc:f9:56:bd:df:60:
         61:73:77:be:43:62:a5:d3:18:d8:0f:83:2f:d6:38:c8:c2:91:
         49:b6:1a:c6:21:ea:87:da:0e:23:ad:f9:9e:1f:3e:9f:ee:d8:
         b4:a2:fe:ed:2d:b2:a2:08:f8:18:47:50:5c:69:4d:4f:6f:53:
         4f:83:39:a3:7a:b8:7f:26:35:d0:62:aa:c8:21:4b:58:b1:7b:
         5b:96:2b:88:17:53:c1:a3:ce:9f:2f:b2:b6:a8:23:f9:d6:b1:
         f0:1d:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:26 2024 by rpki-client on console-fra.rpki-client.org