Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File:                     dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier:          LNpceOV27nh44oDulhzVsMZwMTIJRbh6Lv97g7t9fZ4=
Subject key identifier:   1E:9B:87:F1:92:10:66:DD:51:72:D2:1D:77:D9:70:4C:E5:91:DF:E9
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer:       /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial:       019369345F74A9E86A7F194728AE94A68AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number:          0CE5
Signing time:             Tue 26 Nov 2024 16:01:00 +0000
Manifest this update:     Tue 26 Nov 2024 16:01:00 +0000
Manifest next update:     Wed 27 Nov 2024 16:01:00 +0000
Files and hashes:         1: Tv4rLOzOguqL7noFGRj03_NiySA.roa (hash: Je5kCedyRSZXj/3lNdUjZr/mE5P+DcaVKu6/lROHb9c=)
                          2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: JP/8wQuJShYVgD0qAZounkB2wAZxqx83ReEs2M8+5SY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:5f:74:a9:e8:6a:7f:19:47:28:ae:94:a6:8a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
        Validity
            Not Before: Nov 26 16:01:00 2024 GMT
            Not After : Nov 27 16:01:00 2024 GMT
        Subject: CN=1e9b87f1921066dd5172d21d77d9704ce591dfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:ce:d8:5c:e3:dc:7e:7a:14:bb:9a:92:4e:
                    ee:49:9e:41:73:5b:0b:ac:83:ec:fb:01:d2:99:d9:
                    61:64:54:e4:6d:b9:5e:d4:e5:91:18:12:9f:b2:ca:
                    9a:81:31:39:7a:4b:4f:06:64:a2:3e:c1:a1:b3:e9:
                    f4:35:43:56:71:02:ef:26:53:91:41:57:1c:b3:97:
                    3d:18:31:3c:fe:70:c5:7b:f1:d7:13:b1:3b:50:ad:
                    cb:8d:6d:48:02:0d:6b:37:e1:e7:d6:e7:61:f3:c9:
                    86:cc:a7:4f:5d:84:57:76:f2:2f:a9:b4:35:19:15:
                    e9:18:7b:01:ec:9f:af:e8:fe:8c:97:a2:01:af:54:
                    79:47:2a:f8:45:b0:50:2f:65:c6:2c:22:73:0c:aa:
                    a8:0f:1b:b1:88:a0:50:95:cf:65:e0:9b:c6:6d:de:
                    7c:78:7a:de:1b:93:37:26:e7:f9:7e:b4:1d:dc:e3:
                    b8:e7:79:18:73:75:7e:c2:d3:3f:18:e5:83:fb:bf:
                    d1:b2:8f:9b:08:04:fb:70:07:2f:46:7a:d2:64:51:
                    4b:e7:98:ea:9d:89:0f:84:41:3c:29:de:48:f3:a4:
                    e4:59:19:5b:8a:36:cc:fb:74:09:7d:d7:93:2a:cd:
                    49:9c:75:be:83:32:e9:33:05:e2:01:63:dc:de:d9:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:87:F1:92:10:66:DD:51:72:D2:1D:77:D9:70:4C:E5:91:DF:E9
            X509v3 Authority Key Identifier:
                keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:01:70:c6:b5:0a:e6:b4:7d:69:34:b2:31:a3:51:94:8d:27:
         4f:5a:3a:1d:7e:53:ff:91:16:e1:74:cc:9f:18:4e:5a:f3:78:
         c8:29:d2:34:74:bf:c9:ae:39:7e:60:49:71:1d:27:50:65:a3:
         86:1b:b8:55:5a:8b:b5:7e:78:14:ba:84:67:ea:24:60:c1:fa:
         65:e4:68:42:3f:20:f2:16:07:82:6f:84:6a:51:ae:c8:d5:bf:
         b1:b6:e8:7e:2c:e5:49:7b:0f:46:3f:99:b0:ef:76:5f:5c:91:
         5a:22:40:42:cf:42:a1:51:4f:95:cf:62:ad:ae:75:54:11:92:
         54:ec:77:8f:03:ac:2c:5c:d9:eb:5a:90:bc:1a:cb:bc:c0:37:
         8f:ac:77:0d:30:b0:41:b1:f6:e0:93:d7:3c:32:93:8b:09:cf:
         ac:2d:8a:14:cd:45:62:56:1d:b0:8e:22:7e:2f:91:3b:55:25:
         bf:09:b6:f2:bf:b0:01:51:1f:08:99:45:cb:a7:80:d7:42:1a:
         9a:b8:a5:e6:0d:be:f0:ce:17:68:ac:b1:e4:90:ef:14:c3:85:
         c6:22:d7:8e:de:69:e6:07:ba:78:1e:16:d6:7f:36:4d:2d:2f:
         bb:5b:9b:27:86:98:9e:b1:82:0c:21:e5:37:c3:33:e6:22:69:
         cd:4d:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:17 2024 by rpki-client on console-fra.rpki-client.org