Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File:                     9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier:          xbCJ6UIu18QVusbKHIuIFCEGSjlZxQcXcjgRf7dV1Wc=
Subject key identifier:   0A:BF:E4:D6:E0:7B:74:B5:8E:F8:FC:F5:DE:8C:75:18:1F:44:E4:47
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer:       /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial:       01935878575A33B8018248F4AC57053253A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number:          1300
Signing time:             Sat 23 Nov 2024 10:01:41 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:41 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:41 +0000
Files and hashes:         1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: vRoeN6SJzIioOykMCy6BJZGVg9odFo5Cl2sROaJwhRE=)
                          2: _KDWrJgS7BW3dpIoIEtIxsV6EqM.roa (hash: zJicu/iUMQRCLK9jy1MJGws0OsXOUUFcG4QbkcHkRGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:57:5a:33:b8:01:82:48:f4:ac:57:05:32:53:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
        Validity
            Not Before: Nov 23 10:01:41 2024 GMT
            Not After : Nov 24 10:01:41 2024 GMT
        Subject: CN=0abfe4d6e07b74b58ef8fcf5de8c75181f44e447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:38:ff:67:f9:a1:04:f8:77:58:53:49:e4:
                    2b:53:82:d7:e6:ad:25:1f:e0:0d:bb:21:42:d3:f7:
                    b0:78:db:d0:2e:c1:e1:e9:ad:63:db:35:ae:00:a4:
                    d3:20:9f:20:03:31:6e:89:4f:b7:28:67:d3:d1:bb:
                    47:d3:9c:78:c0:fe:2c:31:ed:b7:bc:4a:cd:f6:5c:
                    72:17:79:e1:19:a1:99:a0:20:cc:d7:92:b9:70:78:
                    16:56:c9:0d:43:cf:2c:6e:d2:6e:bd:92:25:7c:9d:
                    84:f7:da:ac:ff:b7:bf:83:69:0d:67:f1:51:76:a6:
                    28:fa:96:da:c7:12:ee:62:ad:4d:24:4d:33:d7:5a:
                    a4:33:c1:2c:19:09:9b:18:5f:c0:ee:b3:85:6c:3e:
                    f2:14:80:10:fd:87:1d:10:c6:8f:1f:9a:a7:33:29:
                    9e:d3:fb:4a:1e:38:d2:84:4f:5c:93:9b:5f:ae:d7:
                    9a:5d:fc:7a:9b:e0:1e:47:c2:6d:36:47:03:d1:44:
                    db:28:c0:5e:a9:a8:82:94:7d:69:3f:6b:30:62:1e:
                    df:42:3d:e5:ac:88:56:94:69:90:09:5f:18:01:fe:
                    b4:06:43:c6:6e:4d:f8:9e:ae:54:17:fe:71:33:b1:
                    01:31:c1:c5:d2:e0:be:73:08:ea:ec:36:7a:76:a7:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:E4:D6:E0:7B:74:B5:8E:F8:FC:F5:DE:8C:75:18:1F:44:E4:47
            X509v3 Authority Key Identifier:
                keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:8c:77:5b:9b:14:42:61:5b:c0:3a:ad:d4:dd:1f:3a:d7:
         fe:ad:90:2e:ec:7e:ce:1d:ed:65:0d:89:fb:46:b8:ad:48:c1:
         34:4e:27:e2:a0:76:59:26:44:16:15:10:02:6e:58:6c:86:11:
         b1:59:62:c3:45:db:8b:3e:d8:2d:19:f1:35:ca:07:78:0c:8e:
         99:16:dd:40:37:6a:cf:87:11:58:84:40:04:30:76:18:07:04:
         20:00:22:31:24:60:02:f3:bd:07:e9:bb:0b:8e:f7:f2:57:6b:
         54:54:82:19:bc:5a:29:58:94:4e:da:72:9d:6f:4f:9c:08:78:
         78:a8:99:ec:56:c1:47:df:df:05:99:e9:d0:fd:2f:f3:bf:d6:
         ec:a0:4b:04:e5:23:49:09:dc:3e:c8:ed:aa:56:9b:7a:34:60:
         53:f6:63:96:45:cb:a3:3b:6d:8b:28:ea:df:4a:b8:fb:2e:06:
         1a:70:df:50:55:78:aa:aa:72:db:ad:e3:5a:41:11:02:ec:5e:
         ad:a5:0b:dc:37:f1:d8:ff:19:82:c6:d0:3d:92:8f:fc:ed:71:
         3d:73:84:89:f1:49:e3:97:3c:a3:4d:45:da:49:7a:b3:a6:48:
         52:81:ef:35:4a:ad:2c:00:42:14:45:e2:af:12:ac:60:ca:9f:
         9c:84:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:16 2024 by rpki-client on console-fra.rpki-client.org