Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          eDGsnHdqojtsl4icMjk+BiMuSNVzfWzrHBxMNwTZe2M=
Subject key identifier:   0A:E8:DF:BA:44:50:AD:47:13:29:C0:FB:78:9B:CA:63:BC:2A:4A:1A
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019352E2CC8EB639EC340F9D60D7C193AD9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          134C
Signing time:             Fri 22 Nov 2024 08:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:15 +0000
Files and hashes:         1: 5Z2IK8N4wn4Bvk3wRmJrwjywZl4.roa (hash: lfJRJmGAy9vzErGTOq6UyqQCY8qB3ETj5n3ulE1MSPc=)
                          2: QZ3FkpxrDySkftNaoeTeMYc8hEk.roa (hash: rNLBjO4jAhNE8Tal/tLtFL5Xumjt4OE5q0zsBfvMezg=)
                          3: VY_I-jnZ5FCsfaI58ygsn2y3NFI.roa (hash: 6Gl3wwSR8frdXu3wYdpfIbk9igfvlCW34Jm7lAKNY+U=)
                          4: WNWGusTjgMZTNhfIVDqYpqvjZuA.roa (hash: UKLb//TrsEXCWFXoflJVCjxQxtvXiET2PlXFpGD8gso=)
                          5: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: 1jo3HHbLjY0Jis7tB4z+cgW5Bm6hsIftVZGCpiHSgCQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:cc:8e:b6:39:ec:34:0f:9d:60:d7:c1:93:ad:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Nov 22 08:00:15 2024 GMT
            Not After : Nov 23 08:00:15 2024 GMT
        Subject: CN=0ae8dfba4450ad471329c0fb789bca63bc2a4a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:59:b4:a0:7e:c6:a9:92:ed:94:33:91:c3:
                    ed:f9:bb:e4:68:e1:85:fc:5f:09:df:0d:fd:b1:59:
                    e5:20:c1:3a:f8:1d:62:1f:04:c2:d9:d0:ea:7a:00:
                    d1:38:39:c5:2b:71:d2:b4:58:06:ff:40:20:26:e0:
                    16:69:7a:30:70:17:5d:a8:48:e2:c1:7b:e5:65:3e:
                    d5:b2:1a:1c:0f:6f:9d:78:33:9b:41:94:c3:7c:53:
                    d9:79:9b:03:d5:90:76:26:90:b2:b4:eb:cd:65:55:
                    6e:bf:4e:c1:ac:46:5e:2f:03:67:d1:d2:92:1b:87:
                    5d:ac:72:f6:b3:7f:b7:4f:c3:8f:93:20:c3:ba:08:
                    3f:0e:87:db:b5:4d:64:1b:fe:bc:12:15:ea:77:5c:
                    6d:d0:a0:f6:75:25:01:eb:1d:f3:f6:57:14:d3:d2:
                    8e:0c:5f:63:17:7c:4a:dd:70:66:f3:30:0d:9e:b7:
                    08:64:1f:58:f0:31:cc:8b:6f:01:92:a7:34:8f:e5:
                    85:78:30:25:12:42:0b:3f:06:07:2d:35:18:0a:84:
                    11:95:71:90:ca:d5:42:0d:a4:ca:07:79:a2:da:65:
                    ce:49:dd:16:4d:73:a9:36:02:a9:93:31:b7:b8:2a:
                    aa:4c:b7:9b:75:4a:57:4a:de:c2:d4:0f:f6:b7:3b:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:DF:BA:44:50:AD:47:13:29:C0:FB:78:9B:CA:63:BC:2A:4A:1A
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:46:c7:9e:5a:f7:e5:8b:b4:d3:16:1a:5b:34:56:39:09:0f:
         38:c4:9f:11:79:8f:ba:96:05:7d:dd:21:07:b9:c4:1b:22:9f:
         de:f9:9f:28:91:fe:a8:90:a1:e6:f5:bc:74:af:a4:b1:29:a0:
         95:60:90:b3:8e:c0:b2:1b:77:b9:84:2e:e9:05:85:40:02:58:
         b4:e0:7a:bd:8e:a2:b2:26:f3:f2:df:f2:86:1b:bb:59:e3:b3:
         dc:4c:04:fa:9e:83:91:d3:d8:7f:1b:94:93:7e:e3:d5:b6:91:
         85:8f:46:4e:8d:d3:f6:d1:78:d8:ba:3a:84:dc:eb:e7:41:2b:
         a8:1c:8a:69:4e:22:43:16:4d:2a:53:05:e7:6c:90:63:ab:cd:
         46:e6:7e:49:1a:50:56:33:1f:21:a4:6c:b9:6a:5b:cf:2a:a1:
         b2:6f:b8:6f:ff:bf:d6:7d:48:00:f1:fc:66:fd:c0:ab:1f:e6:
         2c:73:1a:d3:01:1a:15:bd:65:ac:42:99:b0:37:f6:83:53:e4:
         5c:c2:18:71:94:1b:2a:4d:54:88:1f:0d:45:3b:9b:af:eb:b6:
         74:54:12:de:85:01:ce:aa:38:11:b6:6f:30:cc:e3:ea:cb:a7:
         62:4d:f3:ed:b5:9c:a9:c2:3d:bf:5a:c4:d2:52:16:35:c2:99:
         b6:78:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:29 2024 by rpki-client on console-fra.rpki-client.org