Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File:                     A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier:          aXgJ5y7PmMwVf0aDhA5Tw7bEDyOQEQQ9NpsXUVYm+cg=
Subject key identifier:   9A:BA:00:55:FD:CA:CD:F9:2A:D6:1E:AA:32:D2:A9:CE:D0:11:B5:00
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer:       /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial:       54153A0726EC07B53A0E90CB3B04BA3D33D5E42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number:          9A
Signing time:             Mon 16 Sep 2024 11:02:43 +0000
Manifest this update:     Mon 16 Sep 2024 10:57:43 +0000
Manifest next update:     Tue 17 Sep 2024 14:35:43 +0000
Files and hashes:         1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: Or11ja4EH08o561zeKKzEYKEfwcq5kX2Qb2Kbnkaxu0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:15:3a:07:26:ec:07:b5:3a:0e:90:cb:3b:04:ba:3d:33:d5:e4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
        Validity
            Not Before: Sep 16 10:57:43 2024 GMT
            Not After : Sep 17 14:35:43 2024 GMT
        Subject: CN=9ABA0055FDCACDF92AD61EAA32D2A9CED011B500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:a7:00:2a:4c:66:42:77:85:6c:6a:70:c4:
                    81:80:d8:0d:9d:09:01:f8:43:b5:a2:ff:6f:b2:59:
                    ee:f0:1f:60:ce:10:7a:3c:f3:f9:cb:ad:f5:b6:c7:
                    b2:41:4b:0e:4d:12:1e:f3:2e:87:1c:24:71:b7:57:
                    97:ff:c6:6b:49:4a:03:b5:8b:6a:b6:19:69:ee:80:
                    8b:b6:1d:00:2a:42:86:fa:a0:e9:57:96:c0:48:4b:
                    a5:17:ca:7f:1b:c3:b3:83:2a:d2:d4:4b:33:87:17:
                    c5:e1:48:b8:24:e1:bd:e8:fb:b7:d2:9c:48:cf:fb:
                    80:4e:9a:cd:96:1b:fb:29:dc:9c:81:29:26:2d:71:
                    22:e7:e3:93:e9:ed:9a:03:f8:c6:78:5c:ce:26:43:
                    71:95:e5:a7:da:f1:d3:54:11:d7:28:07:11:fd:f8:
                    54:68:2e:e1:a8:cc:ee:6e:1a:24:05:48:92:9e:47:
                    9d:16:8c:20:eb:23:8e:a4:54:44:cb:77:5f:d5:8e:
                    92:ac:ef:38:9d:f1:82:7e:c3:22:27:b2:bb:d7:80:
                    5d:aa:69:2e:42:cd:15:f4:1b:71:75:83:d0:02:25:
                    ea:cf:73:af:52:f7:6c:1e:cc:79:69:8f:8a:95:db:
                    9c:aa:42:35:52:81:51:9c:77:37:aa:4a:ee:cf:8e:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:00:55:FD:CA:CD:F9:2A:D6:1E:AA:32:D2:A9:CE:D0:11:B5:00
            X509v3 Authority Key Identifier:
                keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:06:f7:07:11:c7:fb:2c:be:00:f5:86:7f:39:e6:75:18:53:
         98:c4:a6:34:19:f9:25:f0:10:2d:97:6b:9e:e5:22:f8:72:4b:
         cb:58:5e:6f:e7:9e:a9:00:32:13:d5:c9:4d:60:24:26:62:ef:
         3c:0a:9b:d7:c3:56:d7:b8:fe:e1:c6:a8:ac:d5:e5:69:34:0d:
         33:4b:4a:43:bc:e8:55:4c:43:14:3c:2d:10:b8:fd:d9:ef:2f:
         c6:67:45:68:5b:1b:a2:4e:1e:fa:04:26:8e:aa:b1:e6:8e:55:
         58:d0:ae:03:fa:59:3f:13:bf:e8:79:12:65:d7:76:2e:bb:b5:
         5f:82:d4:86:10:27:55:8a:bd:2a:b6:52:f2:8a:d7:77:41:de:
         63:2e:db:c0:61:8e:da:0b:2e:eb:90:12:14:d1:7a:77:db:4e:
         c0:75:0b:96:2d:b6:62:87:cd:0b:15:9a:06:a7:5d:8a:d5:7d:
         36:d5:24:2d:f4:50:a5:37:97:32:c1:1e:7f:f4:68:01:2b:4a:
         7e:2a:6c:d3:31:7d:db:02:58:50:2c:8a:cf:5f:e0:60:e8:aa:
         bb:97:c2:61:91:f8:da:1e:06:ca:10:ef:e1:b1:94:cc:92:67:
         76:e5:9d:a4:4c:53:a7:a2:ca:09:86:74:97:c5:43:cc:3c:73:
         4c:44:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:40:35 2024 by rpki-client on console-ams.rpki-client.org