Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File:                     nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier:          2LqA4fSSUfxGayFGMBfxNgudRoCNhdRodR+HBY3tPnk=
Subject key identifier:   62:4E:93:29:EB:C8:E5:C0:85:2F:28:BF:DC:5A:3D:E8:75:3C:E6:D9
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer:       /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial:       019356F6F250C27C20581E8CA345FA1445C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 03:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:44 +0000
Files and hashes:         1: lPHZHkSqhXPw4Ae90-kkKChIaIU.roa (hash: MAzRf4T9YAJkbHpxJ3HgtlPNPsRxKjb96KNNKO2D3U0=)
                          2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: QbsLg4G2UrKUAg5Gehc6/rdQ5FrNMkxpNW8vMaAfBSU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f2:50:c2:7c:20:58:1e:8c:a3:45:fa:14:45:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
        Validity
            Not Before: Nov 23 03:00:44 2024 GMT
            Not After : Nov 24 03:00:44 2024 GMT
        Subject: CN=624e9329ebc8e5c0852f28bfdc5a3de8753ce6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:88:c7:87:50:11:ec:23:06:a0:77:a0:ee:
                    9e:b0:50:73:9d:31:e8:35:e5:40:8e:a8:c2:9c:20:
                    f2:47:9c:19:65:10:56:9b:1e:a3:aa:35:10:83:4f:
                    d0:24:c6:eb:08:0f:1f:c4:a6:7c:39:9c:e1:91:df:
                    e8:2a:8e:00:13:7f:f9:83:ff:87:cc:fc:bf:33:64:
                    71:89:f1:88:55:34:8d:1c:89:d9:fd:e7:69:12:6c:
                    b9:cb:3d:b2:65:05:b0:99:4e:2d:50:e5:60:e2:87:
                    2a:77:d1:a7:1d:19:7e:76:f9:bf:91:38:dd:cb:f0:
                    f0:e4:b0:1c:7d:76:04:43:3d:7f:d0:90:c0:af:37:
                    d4:e0:fb:bd:b1:20:9a:f1:85:ae:3a:59:96:98:52:
                    26:c8:cd:39:d5:9d:1c:b7:9a:bc:c7:02:43:37:46:
                    d7:5d:95:8b:3e:e4:1e:63:72:ba:8e:da:cd:1a:10:
                    d2:36:11:c0:28:d9:08:8f:3f:f0:bc:74:ea:a7:f0:
                    e1:c7:ff:ca:13:e1:53:aa:02:e3:4c:33:15:89:a1:
                    e4:bb:1c:9d:8e:13:32:31:45:cd:a2:1e:cf:a2:a7:
                    59:39:9e:93:c7:60:e8:64:2f:18:ba:17:ca:72:44:
                    92:73:27:0b:e3:e2:74:1d:a0:90:7f:1e:8d:ce:c6:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4E:93:29:EB:C8:E5:C0:85:2F:28:BF:DC:5A:3D:E8:75:3C:E6:D9
            X509v3 Authority Key Identifier:
                keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:94:df:66:1a:76:79:b4:58:c8:2e:86:78:48:0f:32:5e:1b:
         ac:44:8e:0a:27:c9:ba:01:b9:1d:c5:1b:79:85:27:0d:cb:a8:
         aa:3a:21:7a:19:14:b9:ad:54:94:23:3c:eb:f7:0e:8d:68:60:
         7b:5e:e9:f7:b7:12:f7:7d:a2:8a:b7:5d:e3:60:d8:f4:77:ca:
         e1:76:56:90:f9:1f:72:41:71:97:5b:f5:93:de:54:de:c0:b1:
         f3:e6:b1:7d:53:d2:e0:f0:e6:7d:1b:df:60:3e:ac:01:09:dd:
         12:14:f3:6c:57:26:99:0e:d0:fb:7b:ea:45:91:04:db:d5:b2:
         5d:92:32:49:db:3d:21:d6:28:8e:2c:ad:c8:c3:50:72:66:2b:
         33:45:43:f4:18:43:72:90:86:ee:2e:d1:4f:ea:2d:66:b5:e0:
         53:4a:e4:cc:06:a9:2f:3f:f0:85:0f:20:6b:31:7b:76:20:0a:
         1c:d2:97:d6:6a:8f:d9:ab:4e:4d:1f:68:0a:e3:a3:62:61:52:
         22:72:fc:27:ac:4b:f7:21:a6:ee:46:46:38:54:f7:c8:a2:ca:
         1c:1f:76:66:51:a8:a1:21:a6:bc:ef:2a:84:ff:11:84:43:fc:
         76:ee:65:d2:f9:14:dc:ed:e2:c2:30:b2:d6:b2:bf:63:02:22:
         ed:8b:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:07 2024 by rpki-client on console-fra.rpki-client.org