Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File:                     m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier:          VrjyEjIYdt7z+LulU6ohvrt/+eI4jpeWpbTpvViMcVE=
Subject key identifier:   5D:C7:3C:42:17:E7:26:97:E0:29:9D:DE:68:D1:78:8A:54:A5:67:A9
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer:       /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial:       019231DAC1D00CFE816F0EB35A6C634F59EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number:          107F
Signing time:             Fri 27 Sep 2024 05:01:12 +0000
Manifest this update:     Fri 27 Sep 2024 05:01:12 +0000
Manifest next update:     Sat 28 Sep 2024 05:01:12 +0000
Files and hashes:         1: VntJQz0JEIP7O0_CULKybiNM_kY.roa (hash: WIne9dIJ2wUrmizjmJSF2mRuI04wm1dV3TfZ6GFXgjU=)
                          2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: GgDwaJkE+VAi04lo/SXv/NMMps52QgHC3rQdlRdkSRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:31:da:c1:d0:0c:fe:81:6f:0e:b3:5a:6c:63:4f:59:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
        Validity
            Not Before: Sep 27 05:01:12 2024 GMT
            Not After : Sep 28 05:01:12 2024 GMT
        Subject: CN=5dc73c4217e72697e0299dde68d1788a54a567a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:ab:88:e3:08:81:e1:10:d2:9e:ea:68:dd:
                    00:6f:91:4e:12:f8:39:30:71:80:b3:d5:05:5a:dd:
                    00:ef:cf:74:41:b2:e6:27:2e:ab:b2:7e:26:46:76:
                    f5:ce:07:c8:66:4e:3f:82:be:9a:96:8a:a2:f2:12:
                    1a:75:40:bb:97:8e:0f:a9:3d:04:2c:0d:4c:5d:27:
                    8e:33:86:41:c8:a6:80:5a:8f:00:21:0a:6a:94:fd:
                    d8:b8:75:b4:fb:8d:83:df:75:1f:b1:4c:11:e8:f5:
                    86:80:19:ac:53:b4:e7:3c:a9:ef:46:90:64:3f:93:
                    33:9d:f7:cd:19:a5:c8:03:6e:21:4f:ed:ec:fa:22:
                    45:b4:3b:01:06:f7:de:13:f0:14:cb:7c:49:b2:e4:
                    a6:9a:a0:9a:9a:ad:58:d5:6f:40:8b:38:4d:be:f2:
                    3f:9f:77:3b:d0:34:04:58:b1:34:46:f0:7d:1a:93:
                    d6:9d:25:26:5e:70:a6:35:3c:04:d4:ec:5b:9c:ce:
                    d0:9c:f0:82:e3:56:1b:15:af:31:0f:59:18:9a:a7:
                    e3:3b:aa:ba:09:8b:1f:47:f4:80:8b:4b:85:5f:22:
                    d6:c3:16:a5:ee:f6:12:5b:6b:42:ca:90:ad:5e:b2:
                    6d:30:67:97:2c:45:f2:00:68:1e:96:df:69:0a:f3:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C7:3C:42:17:E7:26:97:E0:29:9D:DE:68:D1:78:8A:54:A5:67:A9
            X509v3 Authority Key Identifier:
                keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:54:e1:62:ca:db:89:01:de:2b:f9:62:a6:f0:17:5b:49:cf:
         7a:a7:ad:cb:3e:99:5f:99:b6:54:cd:1d:6a:3c:f9:4e:73:8d:
         6d:c5:39:e7:83:e5:48:74:61:c7:19:b1:54:36:c9:35:56:f4:
         e7:7d:c4:0b:b8:7e:81:27:a7:78:02:cc:25:2c:f0:4c:58:1d:
         da:63:97:62:31:4f:67:19:bb:9f:ea:6a:58:ac:bd:fe:84:ff:
         17:8b:70:a7:1f:89:73:38:0b:10:3f:0f:aa:58:81:65:fb:a8:
         05:f0:7e:9f:f4:75:6e:a6:94:8a:8a:c6:7f:b4:5b:91:d6:4c:
         d1:3d:5e:1a:8b:a6:c2:94:d1:bc:62:a3:07:da:f0:e4:b2:af:
         e9:66:2d:98:a7:c6:f6:26:98:55:10:f8:00:2b:de:9a:5d:96:
         45:e4:e3:c9:f5:ab:a2:62:62:df:f2:da:bd:4a:d9:39:1d:92:
         ea:17:66:a4:01:45:1e:92:e9:82:c2:d4:f9:14:1a:91:f8:a5:
         84:32:0f:67:e4:fa:08:cb:62:72:51:6f:cb:c1:3b:ff:fd:ad:
         bc:ca:80:98:cb:4b:be:77:3d:f8:22:8f:bb:f8:aa:0a:de:db:
         fb:a8:7b:5d:92:04:0a:0a:a1:b2:14:d4:5b:80:0b:45:b2:14:
         62:66:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:09:22 2024 by rpki-client on console-ams.rpki-client.org