Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File:                     9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier:          krZTLvoDibb2ldJXcT35iYV9L30o5teT76LAvvflGU0=
Subject key identifier:   57:98:BD:69:8D:B6:39:B3:43:55:27:4C:A0:CD:25:20:F7:0D:D4:EC
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer:       /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial:       019405A15F14A041B628F746EE2FAE463FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number:          13CC
Signing time:             Fri 27 Dec 2024 01:00:49 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:49 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:49 +0000
Files and hashes:         1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: 5jXrmfk0T6j7vkdXoKTXDFCxMByTHOwlT+A7HthZnHg=)
                          2: k2zTrsB7fWejCzofv3ARWgbw--8.roa (hash: nzIh6J+Z3UUYrp2pZ0buggk7VZoukPWhYRkQJa60huM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:5f:14:a0:41:b6:28:f7:46:ee:2f:ae:46:3f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
        Validity
            Not Before: Dec 27 01:00:49 2024 GMT
            Not After : Dec 28 01:00:49 2024 GMT
        Subject: CN=5798bd698db639b34355274ca0cd2520f70dd4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:92:76:b5:b5:2b:d4:49:d6:7c:3e:10:21:
                    8a:e4:93:af:92:83:ef:1d:bb:b2:93:3a:0d:c2:33:
                    8e:c7:36:d6:23:16:55:82:86:08:77:d4:df:80:7a:
                    1f:42:a4:51:73:40:8d:7f:01:79:77:74:0f:18:67:
                    5e:49:b2:ac:15:a0:3c:92:a3:1a:5e:52:8f:1a:80:
                    f0:81:97:5f:44:3f:07:ff:ab:0b:71:8c:4d:37:1e:
                    5b:7b:59:a2:f1:8b:9f:18:1c:60:76:83:16:59:52:
                    da:3a:11:b5:d9:7b:7f:ae:f6:36:92:7c:c8:01:34:
                    7a:28:59:d2:f3:d1:03:c0:b8:0d:96:4c:0f:1c:c0:
                    a9:25:29:9f:c1:6c:b9:54:49:81:b7:ff:91:09:f9:
                    58:41:1f:ba:1d:04:0b:78:34:8d:37:c0:1a:75:78:
                    84:0c:50:08:b2:b6:79:e0:de:e5:df:be:8f:fa:1a:
                    fb:79:e4:d4:e6:64:59:ab:54:4b:2b:0b:5f:df:6b:
                    ae:0c:09:a6:b2:fc:7a:3a:f1:de:4b:43:f2:32:c3:
                    22:f6:5c:5e:78:0a:5a:14:15:c6:65:86:3c:a4:3d:
                    07:63:4c:70:3d:b1:62:f3:20:b3:9d:07:22:19:76:
                    03:77:c3:9b:d9:8e:d5:65:71:80:75:72:c4:69:75:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:BD:69:8D:B6:39:B3:43:55:27:4C:A0:CD:25:20:F7:0D:D4:EC
            X509v3 Authority Key Identifier:
                keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:06:d9:50:96:6c:ad:6e:c8:05:dd:ce:03:4a:40:af:1b:
         ea:a6:c0:0d:c8:7e:be:a0:97:03:ab:45:d7:14:eb:44:f8:0e:
         02:81:5f:4a:cd:a0:ad:4a:1c:a7:af:e6:67:24:30:8b:51:fb:
         65:d4:c9:79:b2:86:13:16:c1:3f:b9:26:c9:f5:a0:c9:b5:16:
         df:7b:e1:35:af:d2:ad:86:c3:8d:1e:1f:5b:bf:81:f0:73:80:
         a8:47:04:ac:6b:e5:8d:61:c4:b3:3c:6e:ef:36:29:7a:06:ac:
         9c:16:bf:90:45:a7:ea:87:b5:41:6b:0c:8b:c5:e4:4f:25:a0:
         9a:99:12:00:cc:f5:a1:33:a1:a9:c3:ac:1c:fb:37:66:11:60:
         5e:e8:10:a4:45:40:e4:a8:ae:66:af:61:7b:38:1c:40:c2:be:
         54:da:6d:15:a6:21:f9:b2:ee:a7:82:34:0f:36:e8:7a:6d:2c:
         00:24:b8:71:5a:81:3c:00:04:76:bc:72:11:27:7a:c5:e1:50:
         30:4f:90:32:d4:d1:0d:b4:f6:d7:5d:4f:b5:a2:de:a3:df:dc:
         c6:4e:34:dc:b9:bc:a2:78:e7:60:a3:ca:f6:30:20:d5:32:09:
         eb:b2:49:53:7a:fb:b6:79:06:1f:01:97:60:12:1e:dc:0c:9e:
         01:fe:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:14:24 2024 by rpki-client on console-fra.rpki-client.org