Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          uZGyYuoIoRvnFvTZc2Pk9BiPt02M7JWchVTypuqVw8c=
Subject key identifier:   38:C1:21:25:E7:83:F5:68:BB:2E:3F:17:79:CA:88:93:EA:15:2D:A2
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       01934E2AB31929BFA14E42980FEB33959C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          12FF
Signing time:             Thu 21 Nov 2024 10:00:41 +0000
Manifest this update:     Thu 21 Nov 2024 10:00:41 +0000
Manifest next update:     Fri 22 Nov 2024 10:00:41 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: KNdRQjxKaqWUMZMaEOYohd3D4GL78s/J7IUDs6F6QkI=)
                          2: uVZdSHbnmnk8Ek_0tU4bWUh5e1g.roa (hash: NmTTVbO7r1PcNPaADlquWt61ePuzNGoyW8tB4CnfDo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:4e:2a:b3:19:29:bf:a1:4e:42:98:0f:eb:33:95:9c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Nov 21 10:00:41 2024 GMT
            Not After : Nov 22 10:00:41 2024 GMT
        Subject: CN=38c12125e783f568bb2e3f1779ca8893ea152da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:4d:e5:e5:b9:c5:19:e9:1a:07:6c:6d:67:
                    67:07:1a:e4:ba:d6:53:e6:b3:8d:a4:79:0e:73:aa:
                    67:d0:63:49:07:ad:44:c7:2d:c3:44:cb:56:96:4d:
                    74:f7:94:14:52:e3:12:1e:f1:d1:70:6f:10:5c:b3:
                    10:a1:5f:a8:96:3f:1d:96:74:45:7c:35:b1:1a:de:
                    f9:20:44:38:29:9e:50:3b:4a:72:f3:7b:f4:95:10:
                    46:4d:7f:f2:fe:8b:a8:97:3e:3f:e5:80:f6:b3:46:
                    ae:cf:f8:e3:29:62:af:3c:5b:6b:c3:b1:73:ad:27:
                    41:0e:33:9d:a1:dc:a4:4a:1d:03:47:d1:39:3a:6a:
                    bb:fd:eb:93:1e:cc:41:e3:cb:d2:e3:c3:b8:98:8c:
                    0c:c4:dd:42:53:fc:29:1f:99:5c:30:ab:98:8d:89:
                    de:cb:ad:9b:ce:77:b9:7d:23:d9:ca:03:c8:c8:67:
                    4b:fa:44:ad:67:21:bc:95:0b:b5:5d:78:e2:3f:e9:
                    9e:9d:6a:41:e8:c1:2f:bd:f5:f8:d2:0f:50:25:cc:
                    f3:9d:60:91:10:69:c7:18:df:f1:20:19:75:f5:5f:
                    a7:ff:61:68:df:19:81:aa:8d:fb:46:c1:a6:63:91:
                    31:e9:b0:33:90:86:77:81:d0:bb:03:1e:69:bc:95:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C1:21:25:E7:83:F5:68:BB:2E:3F:17:79:CA:88:93:EA:15:2D:A2
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:a7:13:a3:86:d4:bc:4d:a3:fe:f1:e9:36:8e:03:9d:94:
         bf:ff:48:fa:be:9c:e9:bb:fe:45:6c:f7:66:34:45:3a:2d:24:
         3d:31:b3:28:4f:7f:9a:be:a2:87:ae:34:be:af:87:ab:83:fc:
         b7:f8:34:fb:d6:be:92:57:a9:a4:07:14:67:a2:da:04:ef:45:
         b3:c5:04:c7:eb:19:7e:46:58:c0:ee:5d:8e:90:c8:19:c9:4a:
         bf:c3:52:b4:f9:da:8e:a0:f7:08:35:c6:bb:3c:5e:42:e9:a2:
         fa:81:33:7e:22:1c:b1:0e:49:a5:a6:4b:16:8c:68:cc:fd:05:
         08:9e:0a:94:bf:6f:ad:35:e6:a1:f2:4f:69:ba:3e:dc:84:43:
         4b:dd:90:72:cd:ed:c4:9d:21:eb:ee:9b:a1:df:03:bd:24:96:
         5d:33:37:ae:bc:bb:f1:f4:90:aa:2e:4b:df:05:79:82:89:b7:
         a0:18:40:95:53:7a:c7:d1:56:80:01:cb:54:d1:d5:d1:cd:b1:
         dc:63:dc:fb:c6:8c:ef:76:ee:83:96:06:f3:18:8e:d5:81:4a:
         56:25:16:1a:57:20:ea:cc:44:48:96:4d:01:10:28:63:e5:fa:
         30:b6:b7:e0:8f:e4:ad:0d:4f:44:96:c8:2b:4b:b3:05:61:a3:
         11:ef:aa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:00 2024 by rpki-client on console-ams.rpki-client.org