Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File:                     9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier:          qaytJB1QPuFFekv9z65K488SrDk7EJ/WLNuWwq3R0eE=
Subject key identifier:   16:7F:C6:BC:D0:C0:13:D4:32:21:4B:44:A7:BE:79:8F:49:69:33:E6
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer:       /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial:       01936A7D51A73AECF689371F2C4CA94E4BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number:          0567
Signing time:             Tue 26 Nov 2024 22:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:17 +0000
Files and hashes:         1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: tNwvX1/KbeFkWbIDqyUjzDWXAyokjBv85M1DutyguT4=)
                          2: xExn5N3q_cpp53hn3ivo1hcsT3k.roa (hash: M9vP65SQR5xOlPEtG5tLWz3ay5ENA+usw4FJCGi/6j8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:51:a7:3a:ec:f6:89:37:1f:2c:4c:a9:4e:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
        Validity
            Not Before: Nov 26 22:00:17 2024 GMT
            Not After : Nov 27 22:00:17 2024 GMT
        Subject: CN=167fc6bcd0c013d432214b44a7be798f496933e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:5a:ba:55:49:a5:e2:e0:23:d1:f6:38:5a:
                    d4:75:cc:a5:5a:eb:a8:a2:4b:a3:3d:2f:35:f7:ed:
                    2c:7a:57:0d:e4:a8:e0:bb:96:dc:07:d3:9a:16:a1:
                    7d:06:e9:6d:14:08:73:d8:b2:58:9a:c3:cb:ff:1d:
                    44:ec:05:78:d2:bb:23:db:a9:bd:ef:89:c3:9c:93:
                    60:2a:4c:51:8e:49:03:af:12:86:82:22:9e:cb:79:
                    0c:9f:c8:f7:bb:3e:7e:a8:74:87:44:e0:01:99:39:
                    5f:15:67:eb:0b:c0:60:53:69:a1:e5:5a:ba:51:9b:
                    2f:03:db:fd:64:d6:3e:c4:be:e0:5f:39:b3:64:87:
                    c8:ff:64:a7:61:42:f7:54:df:58:71:55:15:3c:20:
                    a3:3c:60:a5:f8:78:25:e4:eb:79:61:0d:09:36:00:
                    a2:0b:0c:86:77:a9:ca:5e:99:7a:2f:0e:a2:b6:8a:
                    2a:2b:bd:ef:53:62:14:84:98:42:a9:70:c5:f5:f5:
                    2e:55:61:9a:30:5e:88:4f:bf:c0:d6:eb:79:50:bf:
                    b9:cd:a4:74:ef:74:eb:36:37:ba:5f:a0:e6:cd:8d:
                    b4:0e:22:94:a8:b7:0b:50:80:f4:1f:e2:2d:18:b4:
                    d4:f8:c8:de:90:00:c2:bf:f9:1b:c4:5b:95:c6:7d:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7F:C6:BC:D0:C0:13:D4:32:21:4B:44:A7:BE:79:8F:49:69:33:E6
            X509v3 Authority Key Identifier:
                keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:27:52:c1:13:b1:9b:ca:5e:89:4a:6a:da:5a:44:82:88:55:
         cb:21:f8:0f:ad:50:55:89:e0:5b:a8:0b:f6:59:77:ab:17:7c:
         9e:dc:2a:59:90:02:bb:e7:fa:67:30:88:71:88:4a:5b:4d:c6:
         cc:90:cd:db:0f:2c:7d:70:1a:08:c5:2d:cf:8b:79:86:b1:ff:
         e9:df:bd:1e:e8:77:f1:c3:f2:11:b8:92:27:7c:08:df:c4:3f:
         85:eb:c3:4c:4d:9f:21:33:c6:44:9e:2e:be:e5:c3:3e:48:1b:
         35:8e:79:dc:0e:f5:aa:c2:00:1f:5b:c9:1a:28:7c:24:98:3a:
         be:87:1f:c2:42:66:cd:b1:42:81:bf:af:37:72:42:7c:a1:20:
         7d:2a:42:34:d9:90:72:73:83:92:f4:a8:f4:3f:6e:8c:20:09:
         a3:55:cb:21:f8:f2:93:3c:09:20:9e:50:98:84:2c:51:18:94:
         94:45:6e:c3:0b:92:43:be:3c:57:6a:09:2c:2b:ba:75:86:6c:
         d3:ac:66:b6:ff:b9:2a:ae:c4:fb:3c:10:2e:2d:74:e9:dc:7a:
         cf:81:2b:33:dd:91:d1:69:29:0d:97:83:94:70:5e:12:91:fc:
         d1:2d:2e:7d:e9:3f:84:20:87:50:ec:92:fa:cf:ca:e4:2a:e5:
         0d:12:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:16 2024 by rpki-client on console-ams.rpki-client.org