Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File:                     9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier:          WZnP/pZAnq8oEbmm+9OfVIXGGy1bQdBG0YFHKF3t+eM=
Subject key identifier:   46:2E:6C:64:E6:61:8F:20:EC:26:B0:05:3B:27:C0:5A:2B:1B:AA:81
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer:       /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial:       019352AE83F8297AEE957EDD86D208951785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 07:03:08 +0000
Manifest this update:     Fri 22 Nov 2024 07:03:08 +0000
Manifest next update:     Sat 23 Nov 2024 07:03:08 +0000
Files and hashes:         1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: 06jy8IaHBWKzRAF0jjJt1kV39hBbbswNp0ehA+U7ZjY=)
                          2: A0wNRtYNAv5pN1_gcmsf_bUnfRk.roa (hash: 4qrjlA1OwrQa2t6aCVFRejTm2sBkHP6eFx4xuqVqR3U=)
                          3: syBkKQClvaM6RRHgEwquGxOSftQ.roa (hash: K7H/kt//ExG7naqhre/MwmM9UTRWpXoRFhJRpmZVCjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:83:f8:29:7a:ee:95:7e:dd:86:d2:08:95:17:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
        Validity
            Not Before: Nov 22 07:03:08 2024 GMT
            Not After : Nov 23 07:03:08 2024 GMT
        Subject: CN=462e6c64e6618f20ec26b0053b27c05a2b1baa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:43:58:36:cd:f9:65:9a:19:e6:cf:3d:2a:
                    b3:85:c5:89:a3:0b:b9:61:10:4a:a9:cb:0e:cf:f8:
                    3c:c6:f5:9f:8c:2d:85:85:54:98:8e:93:aa:b6:fd:
                    24:b0:9e:03:ef:1f:8b:db:b4:b3:9c:0a:00:eb:24:
                    ae:b9:28:43:0a:2b:87:88:d0:8f:1a:10:40:de:50:
                    09:47:f5:3e:9d:0c:84:25:68:d4:f6:3f:41:e1:a1:
                    3d:4e:a4:0e:08:f7:41:49:7b:ac:0d:90:1b:6d:6f:
                    e3:ad:ff:f2:fb:d8:d6:79:fa:3a:7a:18:a7:2c:b7:
                    87:16:47:64:c5:9d:c4:85:aa:e7:e3:ee:97:00:56:
                    b0:43:31:f6:08:ef:aa:b2:91:1b:03:1e:ce:af:6f:
                    03:4b:f0:42:fd:c7:e4:82:66:2e:44:a1:5e:7a:4f:
                    97:eb:07:88:e0:15:fe:35:97:ea:bc:29:ee:6a:1e:
                    f5:09:cc:89:db:1e:2a:f9:d8:05:4c:07:84:26:5d:
                    a7:fc:92:29:f0:75:3e:6f:1c:62:9e:58:80:db:34:
                    64:3a:b1:bf:06:d4:a9:fd:4a:21:0e:47:e1:12:20:
                    bb:5f:d9:65:60:41:47:ee:41:4c:50:b9:dd:65:d3:
                    1d:f0:50:f2:0b:f0:0f:3c:79:0f:a1:34:01:b6:d3:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:6C:64:E6:61:8F:20:EC:26:B0:05:3B:27:C0:5A:2B:1B:AA:81
            X509v3 Authority Key Identifier:
                keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:44:0e:88:19:e7:69:d6:af:18:71:11:8b:eb:3e:60:b2:c8:
         b9:38:d6:80:0b:22:de:2a:41:19:ae:0a:14:3b:8a:bb:40:d0:
         62:c6:d6:59:dd:ad:62:1b:30:ce:fe:75:cb:df:24:78:35:c1:
         be:df:9c:bc:6d:b8:e5:3e:49:05:9f:e2:b7:29:39:03:86:d5:
         eb:ef:ba:04:20:4a:23:b2:6f:6c:9b:e9:13:00:48:91:5b:36:
         f3:e7:c7:29:e7:02:16:9b:f4:a6:ea:c5:c1:5b:a6:19:3d:7c:
         e2:49:1f:40:85:a2:ed:37:07:d4:34:f0:a0:7a:02:11:8a:92:
         9d:65:08:2c:29:86:10:a3:b7:8a:98:b2:d0:a4:68:7c:15:94:
         29:85:ea:e9:f3:23:59:86:cf:c8:19:7d:60:e4:da:68:ea:cb:
         93:1c:5c:29:a2:52:55:92:f8:4a:81:80:71:c3:17:ec:2a:07:
         d0:71:8d:c2:3f:8b:f6:5b:61:2a:fd:e1:d6:fd:b2:81:d8:56:
         5f:76:78:f4:44:cb:40:5a:36:5d:98:dd:19:09:8b:be:11:a4:
         99:b5:bd:b5:a8:bd:dd:69:3e:53:8b:9e:f9:38:64:a7:4d:88:
         e4:bf:31:74:2e:87:69:5e:b1:ce:f7:0d:8a:a2:2a:50:fb:fe:
         fc:c2:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:01 2024 by rpki-client on console-fra.rpki-client.org