Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          cjS3FyGTmY9Ct/2pBlTjj+lyEmDk87GdyPhjWLR535o=
Subject key identifier:   E5:D0:63:08:A6:61:85:8D:C5:DD:62:2F:FE:2E:E0:55:9D:AE:E2:E2
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       01936632B8CC345C0492029BE4D39DA8E522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          0339
Signing time:             Tue 26 Nov 2024 02:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 02:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 02:00:20 +0000
Files and hashes:         1: 1-XLN5qGNEVkyS6VqQrZ02VX4eaI.roa (hash: 5mpIbStdQMn302qt4rdN3al7L6r5dSsJJ05jRDD8s3o=)
                          2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: Xt0jwiZUy5Z63IGGG4k+FYdj8UhwGF8WlmEfH10QHgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:32:b8:cc:34:5c:04:92:02:9b:e4:d3:9d:a8:e5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: Nov 26 02:00:20 2024 GMT
            Not After : Nov 27 02:00:20 2024 GMT
        Subject: CN=e5d06308a661858dc5dd622ffe2ee0559daee2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:d3:6f:71:e2:45:e2:2e:a3:d7:ca:fa:72:
                    b9:cd:21:96:94:3e:1a:53:ff:1e:94:1f:30:14:55:
                    39:18:ba:8c:a2:11:b2:fa:7a:b8:eb:cb:10:f0:40:
                    14:6e:d8:79:da:6a:93:75:45:2b:7d:49:9f:29:61:
                    48:54:c0:87:20:d8:17:29:1c:fb:76:04:65:0d:90:
                    07:e5:c5:1c:97:f8:10:fb:83:bd:17:6d:fc:35:c5:
                    ee:48:85:6c:3e:20:c8:4a:2c:c6:6c:a9:27:b9:86:
                    13:e3:89:5c:d8:1e:72:d6:93:f8:45:0b:0a:fa:01:
                    bd:c0:80:76:7d:4f:61:69:a4:41:b1:c2:32:72:6d:
                    2a:32:09:e1:4a:f0:8e:e1:53:a5:64:22:eb:4b:c1:
                    23:be:51:84:63:75:f1:34:7f:9d:76:7c:b8:50:82:
                    e2:3d:24:e2:0b:35:9a:3f:f0:be:05:8a:c1:8a:f6:
                    c1:12:7b:a9:b2:ec:83:c8:ce:eb:65:bc:e8:1f:1c:
                    f6:39:fc:b3:4d:3d:85:b6:59:1c:3b:34:fa:54:4a:
                    cb:8c:5b:71:8c:65:ad:d3:7d:d0:0d:8b:c5:8e:62:
                    79:52:88:5d:d9:c1:8b:b5:9a:70:ea:35:d4:95:26:
                    4c:7f:74:39:59:78:b1:9c:9c:45:f2:7f:bb:1d:2b:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D0:63:08:A6:61:85:8D:C5:DD:62:2F:FE:2E:E0:55:9D:AE:E2:E2
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:a5:0a:45:cd:44:99:0e:24:f1:e8:71:39:ea:eb:b9:53:
         ba:07:b6:17:43:da:7d:7d:cd:8d:f8:00:cc:4c:4b:8c:8e:fd:
         7c:eb:0b:34:a2:9b:7a:d2:9b:c3:17:32:51:d7:c1:ff:bb:d4:
         73:4f:d8:85:95:8a:55:be:87:01:5d:a6:f1:12:12:70:6c:4d:
         eb:00:84:43:75:c0:75:01:7c:3d:12:6c:aa:b9:1e:f1:11:2d:
         82:8c:da:95:cb:79:08:0b:d4:dc:5d:62:fc:df:ec:74:d8:cb:
         0f:bb:f5:1f:b7:06:3b:84:a7:df:1b:6e:29:af:2c:1f:30:ab:
         2c:39:d2:4b:20:50:2c:cb:d2:9b:7d:7b:60:46:41:ea:29:ed:
         c6:c1:f2:95:a9:e4:e2:5b:03:14:3c:d4:2a:84:7f:7d:9c:cf:
         c2:af:3f:81:32:31:2f:3f:46:54:dc:dc:e6:ea:38:b4:14:4c:
         b8:2b:97:bf:ff:dd:8c:20:a3:d3:a1:f4:68:7c:71:05:62:64:
         da:48:7d:f3:08:c2:26:fa:67:4d:f4:ab:ae:4a:5b:0d:3c:1b:
         76:44:bc:09:7a:19:c3:f9:6c:d8:e2:1e:f8:8d:80:c4:76:4e:
         9c:08:e9:75:c5:02:6e:d7:b9:db:d0:29:be:f3:9b:d3:84:47:
         75:e7:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:15:39 2024 by rpki-client on console-fra.rpki-client.org