Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File:                     nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier:          +gepHPaDU5rC0uBUWo7UxBhj3WIbesxlm7H5eODWZ24=
Subject key identifier:   C7:36:1C:F1:3D:E8:8F:92:4A:EE:88:9D:77:E3:71:0F:6A:4E:DA:88
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer:       /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial:       0193568A2FA563721804E35F2576EDA2ABF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number:          0CEF
Signing time:             Sat 23 Nov 2024 01:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:56 +0000
Files and hashes:         1: 5rrZFjRnVgrrlj38TV6VU6RKRxs.roa (hash: 8rRcEZSX5H5WpDO+pvso+/lb0wBQTUgyibEFOBwGyHc=)
                          2: f6WgRA-dfWhfj5YVrPEYIxXyifQ.roa (hash: Fnl22RAXWIO/1vIIthzrpd/2vf9fefu/bXk2nVmgwbA=)
                          3: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: RKyGSrPHio8FKjk6Mngq621/9ZlBF24qnD4FhNBGMwA=)
                          4: rBKJ-mtKUe6ZHx6dE9Gpxs82CM4.roa (hash: Bqm6dXow5zvoorYo1Xf4P/nUYyhR12C/QDPdSfGXpRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2f:a5:63:72:18:04:e3:5f:25:76:ed:a2:ab:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
        Validity
            Not Before: Nov 23 01:01:56 2024 GMT
            Not After : Nov 24 01:01:56 2024 GMT
        Subject: CN=c7361cf13de88f924aee889d77e3710f6a4eda88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:36:c4:50:58:39:94:c4:47:50:6a:08:96:
                    8a:fe:ed:62:08:43:cd:cb:53:9f:b4:fd:9e:27:a7:
                    90:93:88:82:c7:f7:fa:e6:e7:78:03:90:3f:9c:a6:
                    b1:34:ca:8f:5b:cc:55:fa:4d:05:61:b4:02:4e:3e:
                    26:f1:37:39:e0:e1:1f:6f:56:a5:98:1f:4e:47:5a:
                    f4:fa:55:35:80:4f:0b:65:56:93:e8:65:04:c7:a9:
                    e5:bf:85:d2:0d:4b:95:79:e5:a4:1a:a2:f3:2b:c5:
                    e0:2d:aa:b2:a3:1b:b3:71:48:4b:1c:67:24:70:d6:
                    c5:9a:27:49:14:71:54:c5:db:93:70:09:43:0a:42:
                    95:fe:b5:d0:be:22:e0:a2:82:4a:0e:26:10:c9:38:
                    69:80:33:0a:16:7d:a8:68:c5:a0:e2:34:63:9f:f9:
                    ff:85:8d:5a:9f:15:97:e4:0a:2d:9a:b6:bb:1b:ac:
                    f6:f3:8d:87:42:e1:fa:dc:8d:db:9d:8d:19:e2:c0:
                    ae:01:93:9e:77:1e:fc:6a:8d:a0:18:dd:6b:f7:71:
                    dc:59:c6:93:fd:00:aa:32:73:2b:8e:e8:8c:e9:d7:
                    bb:71:0f:44:4d:0b:27:cd:4e:6d:76:25:c6:41:ed:
                    c3:ae:83:cc:30:1b:2c:d2:37:47:80:af:20:dc:c5:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:36:1C:F1:3D:E8:8F:92:4A:EE:88:9D:77:E3:71:0F:6A:4E:DA:88
            X509v3 Authority Key Identifier:
                keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:6c:67:0d:a9:e1:bb:65:9e:f4:29:ab:47:35:d4:9f:af:9f:
         49:22:5d:bd:12:36:94:c0:b6:e6:f9:7f:b6:92:57:81:cc:79:
         89:21:5b:56:36:59:6d:57:f6:2c:f2:34:d2:e8:b5:d3:55:12:
         a5:ad:22:8a:9b:6d:b3:43:14:f7:fc:36:ee:7c:7d:6a:e5:b2:
         69:ed:0c:a7:b7:8d:42:3b:40:16:dd:23:1b:92:ae:df:88:59:
         de:71:ee:27:82:b4:d6:ea:f7:11:05:93:ba:2d:3c:b3:d5:9d:
         98:eb:a8:e3:ac:fa:45:3d:9a:8d:2c:af:41:9d:f2:b5:03:fc:
         a0:33:a2:29:96:cd:76:23:6e:68:76:61:33:df:10:89:ff:c3:
         fb:e9:a9:68:5a:75:f7:16:98:17:57:98:c4:01:30:2d:cb:ab:
         bb:d9:c1:ac:e3:8b:84:ae:8e:5a:78:07:15:40:4a:ae:17:38:
         04:4a:5f:b2:af:0a:eb:4a:7a:40:1c:f8:1c:28:bc:0e:05:d5:
         7a:0e:59:4a:2e:24:01:fc:45:ee:2f:52:cf:47:80:d0:6e:02:
         47:8c:b4:e7:47:fb:25:d9:38:51:d0:60:ea:41:c1:10:cc:c9:
         d2:d0:63:f5:e3:d1:ac:eb:32:10:74:33:26:f0:07:59:39:c0:
         83:33:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:58 2024 by rpki-client on console-fra.rpki-client.org