Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File:                     1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier:          K6c618LaP9SNS/dPefop2GYHiheP9nC/S2NEMSpo2h4=
Subject key identifier:   7F:65:7E:7C:4E:81:98:2B:60:70:4D:24:29:F7:3A:7C:94:F9:2F:48
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer:       /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial:       01936B224B2677271BA27EAF92AC77F827F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number:          0A23
Signing time:             Wed 27 Nov 2024 01:00:29 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:29 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:29 +0000
Files and hashes:         1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: ocLOK1eNK3EXPiUKff+/KDFoGMzD5K1vAwxskhHwzCs=)
                          2: b2h4UjjoE7JyIvYZhmkPDpeAukQ.roa (hash: wOdaSpEi7aOLG9piN337XzpA1M5O0d3IwaMABcnh54g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:4b:26:77:27:1b:a2:7e:af:92:ac:77:f8:27:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
        Validity
            Not Before: Nov 27 01:00:29 2024 GMT
            Not After : Nov 28 01:00:29 2024 GMT
        Subject: CN=7f657e7c4e81982b60704d2429f73a7c94f92f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:cf:c9:fa:42:2c:c7:50:97:95:65:b6:39:
                    89:20:e3:47:42:4d:aa:b1:3c:04:1d:85:b8:cd:d1:
                    e0:88:de:bc:be:01:36:84:82:b0:cc:63:9c:2a:b4:
                    78:ac:21:c5:31:29:75:60:69:f8:8e:0d:8d:b1:5e:
                    76:41:50:ca:a2:79:5d:9c:84:fa:99:78:63:bb:c2:
                    63:e9:2d:20:fd:5e:a1:f9:3f:58:25:af:f3:d4:bc:
                    8b:6b:6a:df:ed:56:38:c8:d5:58:26:57:d3:cb:6f:
                    fe:f2:28:dd:8a:96:e2:ed:d2:c2:78:6c:0f:bb:59:
                    61:f9:0a:e4:2a:67:ca:7a:9c:d6:d3:c5:3c:ce:9b:
                    13:b7:ff:f9:9b:62:94:04:cb:c6:75:97:45:3f:f6:
                    3e:2b:8f:c0:68:90:de:03:36:50:48:1f:0a:f7:1e:
                    44:fb:34:fa:d5:f9:9d:5d:ee:ce:96:86:88:15:0f:
                    e2:d4:6d:c7:be:f9:55:ce:d5:c7:16:c9:eb:f2:5b:
                    bb:9d:0a:ee:3d:51:80:e4:9e:1a:77:2b:a3:72:a8:
                    7d:41:26:24:e0:de:6d:60:65:d9:ba:0c:ab:e6:79:
                    41:e9:81:bf:c1:f3:45:e4:cb:47:05:4c:c4:8f:bd:
                    8e:75:09:a6:05:de:9b:b0:bc:4b:d9:f1:bf:b8:03:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:65:7E:7C:4E:81:98:2B:60:70:4D:24:29:F7:3A:7C:94:F9:2F:48
            X509v3 Authority Key Identifier:
                keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:22:b1:5f:87:8d:a1:3b:b4:a6:92:fd:ff:1c:c9:9c:43:03:
         83:dc:5c:5f:c7:ed:14:08:cd:d1:ef:75:e2:9c:49:d4:db:3b:
         fa:df:d3:db:19:de:7c:00:a7:da:ff:a3:76:14:f3:73:02:e9:
         4e:17:28:dc:e0:55:8b:22:48:cd:ce:9e:78:77:92:8d:2e:e9:
         8e:59:89:71:86:52:fc:1c:ee:da:e3:95:83:cf:5b:90:e0:8a:
         5e:df:fd:87:1d:85:0c:92:a5:1f:01:ef:42:3c:5e:56:b0:b6:
         d7:7c:3c:f5:eb:e3:96:19:0f:ba:d7:ed:40:09:a1:0a:aa:8a:
         21:67:7a:ce:8b:63:52:6d:a1:ca:4a:08:a7:68:8c:a6:66:9c:
         ae:ce:2c:77:ee:6d:e6:5a:e5:18:f1:fc:8f:ee:cd:4c:8d:49:
         2e:32:5d:ce:96:c5:96:aa:af:d5:8b:43:f8:ca:8f:76:c7:9f:
         9a:98:6f:61:f0:27:b5:e2:9a:42:b8:f5:f3:ab:72:41:0e:c1:
         1b:50:cd:8a:68:d6:d8:82:fb:35:0d:1c:58:b9:aa:9a:5d:27:
         1b:16:1d:18:9f:5a:44:8b:47:31:6d:25:a9:77:21:6b:e6:58:
         31:07:b1:40:5d:97:d5:eb:9c:24:61:5c:3c:16:35:b9:d8:77:
         67:81:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:55 2024 by rpki-client on console-ams.rpki-client.org