Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File:                     Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier:          EETuCPMtP8RQV2bqcCHHn6Gb1VkEGt+ZANxuY0UfHqE=
Subject key identifier:   C9:B3:91:68:EB:03:E0:60:86:0B:E2:17:79:74:5C:E1:0C:96:66:98
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer:       /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial:       0193670E9F53DF62F3C51D2EB81A613F9487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number:          EF
Signing time:             Tue 26 Nov 2024 06:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:31 +0000
Files and hashes:         1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: DthVwWQmMbMJzouiymr77lsGqo8w1TtbQL7G90mFCmM=)
                          2: IDrtf-79kf654fwNFXYp_7F91wg.roa (hash: k33qQNA/7cN5k2IVfs4euZvuG/tv8cjfLreS8qcWMjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:9f:53:df:62:f3:c5:1d:2e:b8:1a:61:3f:94:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
        Validity
            Not Before: Nov 26 06:00:31 2024 GMT
            Not After : Nov 27 06:00:31 2024 GMT
        Subject: CN=c9b39168eb03e060860be21779745ce10c966698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:3a:91:49:27:26:80:d6:8b:2c:7e:3a:72:
                    07:b1:9f:b5:c0:60:d0:83:34:00:f0:ee:52:1f:fe:
                    b3:78:6c:7b:68:c0:58:cd:06:b8:91:ac:67:8c:0b:
                    40:0a:49:90:0a:30:02:80:48:e8:af:6e:49:9c:64:
                    6d:89:2a:8b:2f:ba:3b:1a:ce:3c:fc:ff:84:0a:e0:
                    28:8f:da:7f:9e:e1:11:1c:67:c4:59:9d:10:7d:53:
                    6d:67:2e:4d:21:22:fc:0b:ca:4c:a8:a6:d1:57:8b:
                    92:60:55:d3:b9:7c:9e:4a:a6:e2:72:7a:bb:4a:89:
                    86:51:10:fe:d3:87:04:ac:03:54:e6:60:33:3b:6e:
                    00:3d:f6:be:e9:13:a1:51:8e:ee:a0:c2:c0:58:16:
                    b7:49:fe:d6:7f:bf:36:bd:64:f3:0a:a8:b2:14:31:
                    69:11:6a:4f:84:bf:a2:b9:be:e5:01:99:e7:b8:85:
                    19:0a:4c:34:2f:2e:df:ca:b6:c7:66:50:25:ad:74:
                    d4:3c:fe:cc:92:05:cc:a3:ce:f4:24:0e:5c:c9:cf:
                    89:d5:f9:c4:26:71:61:87:9a:b4:24:de:31:1b:93:
                    de:23:dd:e3:f3:6a:6f:74:10:90:bb:98:04:29:75:
                    31:de:e2:2f:d7:b0:e4:cc:1a:1a:76:0e:3c:d1:53:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B3:91:68:EB:03:E0:60:86:0B:E2:17:79:74:5C:E1:0C:96:66:98
            X509v3 Authority Key Identifier:
                keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:5f:76:1d:94:39:28:56:01:cc:de:f6:b5:bc:03:c8:68:
         3d:03:9e:21:5a:49:e5:48:63:59:2a:99:1b:30:c5:c6:c3:2e:
         6f:bc:ce:cd:bc:a2:5a:28:e0:23:05:6d:42:9e:d2:de:6e:b6:
         96:23:b8:6c:7c:62:a2:6e:ed:11:ff:6d:f7:22:96:6c:7f:bb:
         07:09:da:b6:70:13:95:01:b7:b9:35:79:f5:2b:37:7c:ba:95:
         ed:fe:b8:b1:06:22:6f:f1:86:56:b8:e2:61:c9:dc:c5:bf:96:
         8e:e1:c2:c3:6b:da:df:9c:f8:e6:d9:bf:c7:46:84:2d:01:7b:
         b3:a4:07:f3:31:c1:dc:72:c9:a9:a9:36:06:32:9a:e9:ab:2a:
         77:f9:a6:81:1a:44:cf:44:48:b0:59:12:97:7b:f1:0a:b9:af:
         8f:7b:69:ce:b6:98:c7:a9:bb:65:a7:87:d6:ae:f9:7d:e0:2b:
         62:b7:9d:5b:1e:bd:d4:12:c4:71:9f:6d:aa:2a:e2:3d:cf:d7:
         54:06:eb:d2:c9:c3:4a:c6:c7:72:6b:6d:cd:c2:a3:5b:fa:e5:
         ca:1a:b8:cb:fb:ac:e8:82:c8:fa:79:80:c1:a9:5c:4a:3d:c8:
         85:be:54:a7:5b:e9:19:80:98:72:18:9b:16:31:1d:a5:4b:c1:
         c7:18:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:11:55 2024 by rpki-client on console-ams.rpki-client.org