Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
File:                     1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft (raw, json)
Hash identifier:          tDREBbyMkPje/wvm0MnuwkDIJ9tQ0h6GWvX7kYCNGsw=
Subject key identifier:   4D:51:8D:9F:31:4A:BF:76:2F:BF:CB:68:DC:7B:70:2A:BB:6E:5C:34
Authority key identifier: F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
Certificate issuer:       /CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Certificate serial:       019367ECD71CCFF7F03B1CE2DBB75370075E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
Manifest number:          093B
Signing time:             Tue 26 Nov 2024 10:03:14 +0000
Manifest this update:     Tue 26 Nov 2024 10:03:14 +0000
Manifest next update:     Wed 27 Nov 2024 10:03:14 +0000
Files and hashes:         1: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl (hash: u8eIarBsH1BaAbj8u+GlJV9vx84N5s7LLgNyhPv5Bww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:d7:1c:cf:f7:f0:3b:1c:e2:db:b7:53:70:07:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
        Validity
            Not Before: Nov 26 10:03:14 2024 GMT
            Not After : Nov 27 10:03:14 2024 GMT
        Subject: CN=4d518d9f314abf762fbfcb68dc7b702abb6e5c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:a1:e6:8f:d2:c5:48:e8:a9:1f:6b:0b:2d:
                    9e:cb:06:6c:60:10:1d:07:08:f5:52:c5:7c:36:55:
                    6a:6b:81:ff:3b:75:3f:9f:4a:7c:18:a2:8e:ee:f3:
                    99:84:45:85:60:99:26:cf:62:55:9b:74:75:44:b2:
                    20:a6:18:d3:d1:2b:4c:45:bf:af:15:a6:06:29:7a:
                    ad:0b:54:e1:38:84:85:f6:40:b4:69:71:80:97:fc:
                    57:e0:5a:d6:ea:9f:8a:b0:38:7d:5f:dc:be:0a:78:
                    28:5b:b8:9e:ec:db:81:8a:bd:6b:ff:7b:75:da:13:
                    71:bc:5e:5d:3c:20:74:d0:bf:27:f1:dd:c9:87:14:
                    7e:df:47:22:25:c2:e0:6d:7e:22:57:27:59:41:66:
                    60:e4:84:d9:5e:f1:10:6b:a4:04:d1:40:79:60:fc:
                    63:c2:28:2d:e5:ad:5e:b8:ec:6e:fa:69:7a:ef:57:
                    ca:ef:48:1b:d0:93:fa:35:68:a2:be:9f:78:be:48:
                    be:e0:43:4b:24:87:7b:29:af:29:58:ea:24:d7:ed:
                    53:02:36:20:91:24:12:f1:7c:52:75:9e:ab:b6:05:
                    e5:2a:d2:12:a3:77:91:9e:1d:1a:d1:5c:d4:32:58:
                    ae:63:1d:a7:4a:e7:d3:30:eb:f3:ad:ad:59:81:7d:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:8D:9F:31:4A:BF:76:2F:BF:CB:68:DC:7B:70:2A:BB:6E:5C:34
            X509v3 Authority Key Identifier:
                keyid:F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:0d:56:b1:5a:44:aa:98:60:26:3b:76:32:ee:ab:12:db:
         88:74:7b:f2:44:68:da:b9:99:ef:1e:5d:88:0e:e9:b9:fb:22:
         54:c4:9e:ad:c4:9f:7c:72:35:6a:0a:f4:c2:87:1d:df:a1:6c:
         71:c0:83:0f:06:af:7f:d8:01:a6:d4:44:67:a1:67:91:97:f4:
         ac:b8:c1:4e:53:0c:3a:dd:1f:78:d6:3e:71:9f:50:af:eb:74:
         9e:2e:ba:60:30:ea:d6:33:2f:53:33:a7:b9:50:4d:84:95:7b:
         4d:14:0f:28:f2:50:2d:27:86:4f:9f:e8:b2:f9:89:f7:48:5d:
         f8:51:e8:ad:f4:02:21:76:7e:df:20:a5:08:4c:34:00:ec:9c:
         6b:b7:1e:e5:43:71:c8:2a:b3:b8:98:aa:f9:7c:22:96:86:b3:
         d3:9e:4d:2d:05:12:4f:40:02:a7:61:18:06:c1:7b:7b:45:b3:
         ed:17:8b:b1:93:d8:f4:8d:b5:be:1f:37:20:db:95:19:a3:32:
         64:8e:1c:e0:9e:3d:4f:da:8d:b7:85:55:5b:4a:49:48:32:43:
         0d:4f:2c:42:87:bd:a5:30:47:8d:20:6f:10:ac:24:ff:12:93:
         17:3a:d1:dc:dc:ab:99:c2:64:c6:fc:83:b5:48:22:8a:fe:7e:
         9c:5c:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:41 2024 by rpki-client on console-ams.rpki-client.org