Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          dqqVQsKGFxBnPNBYpPKn9wa5izLdws8qxgxlfaJlDoY=
Subject key identifier:   44:C3:C3:33:53:A8:74:57:1E:7E:BC:42:3C:9C:39:41:68:19:F3:B4
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       0193652040DA844AEDBF9C6AD3FBCD309CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 21:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:32 +0000
Files and hashes:         1: 1-K4xMuq3Av_Pi1yAPf-ekvbrrpk.roa (hash: iMVRJlRMZidsgaF1bQIzWrl1Z8M1GOm7jo/InA9K6Co=)
                          2: 1Pt8zm6-CzG2_FNyv9KOcXabiB8.roa (hash: awpPIebDHCF6aMf4q3BIzzvVNJ6jaISbS8IPLxIkX/E=)
                          3: CDxDxtHr9ioQ01TaA4ao2l70Zn4.roa (hash: q0HC9E04HADt2tvFAQ44e2E1Vb7rQWf68W2gAfrBvmM=)
                          4: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: 49IG/3JNqM9Y8XgP5zbRNsrgWoPvfEoSzsqbPBK+kZc=)
                          5: uu6nu25ktOuWrq_y7Lf3cnbTSkU.roa (hash: NwzaGNFoBan0scf5/zZeH/FnfOhLQQDlZZKyn+67mAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:40:da:84:4a:ed:bf:9c:6a:d3:fb:cd:30:9c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Nov 25 21:00:32 2024 GMT
            Not After : Nov 26 21:00:32 2024 GMT
        Subject: CN=44c3c33353a874571e7ebc423c9c39416819f3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:af:b8:eb:32:fc:a7:df:5c:0d:73:a0:fb:68:
                    44:0e:6c:40:0c:d8:24:d0:11:e3:48:3e:99:de:4e:
                    53:00:e7:dc:3d:2a:2c:27:bb:9f:e6:dc:25:fd:b4:
                    7b:5a:95:66:77:6c:a3:64:a7:3e:57:5f:da:8b:af:
                    a7:d1:4f:05:8c:08:eb:bf:d2:74:5f:59:be:19:a8:
                    64:24:ba:bc:99:f7:1d:fb:a3:2a:21:99:cd:b0:34:
                    9e:1c:3f:c4:d6:4a:a1:66:56:89:27:d3:7d:f0:1d:
                    57:ee:5c:6b:05:2d:34:d4:44:3b:94:62:f5:2c:ca:
                    d7:dc:4d:13:e8:bc:e0:c8:72:2e:81:c1:03:6a:52:
                    48:b4:21:f8:77:83:cb:df:05:49:9a:74:3a:94:df:
                    bb:c0:b8:ae:e2:95:a3:1b:76:bd:2f:35:5c:bf:e5:
                    bc:31:af:0d:a8:70:b4:56:96:8b:1f:4c:32:4c:aa:
                    79:bd:df:68:a5:03:d2:e7:4d:f3:2c:3a:b0:a5:ed:
                    b4:77:87:15:b2:61:02:c7:90:50:4a:1f:a7:df:42:
                    6d:0c:c4:bd:94:f8:8e:3e:57:41:cc:e8:2d:2e:65:
                    6d:fa:f7:af:25:f3:aa:e2:d3:a9:e0:b9:9c:03:d0:
                    ed:7f:52:e3:63:d6:b0:62:69:a9:81:c4:70:e3:34:
                    ed:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C3:C3:33:53:A8:74:57:1E:7E:BC:42:3C:9C:39:41:68:19:F3:B4
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:af:68:76:48:a7:31:35:ec:b5:f6:8b:47:e7:1b:b7:e3:7b:
         66:57:26:88:39:96:26:4e:9a:97:1e:7d:40:23:11:fe:d9:97:
         b9:72:58:34:88:8b:d8:92:8d:b0:b4:43:b3:39:e8:7c:cd:c5:
         88:e4:b9:42:2b:a9:4d:6f:df:62:a0:48:d7:ef:ba:bd:03:12:
         0d:29:23:cf:1d:e4:c6:a9:cc:00:72:8d:a6:25:58:2f:01:d8:
         03:6d:7d:6f:45:0a:d7:22:e2:8c:af:bc:7d:e4:ea:40:9c:04:
         f7:15:ac:b5:36:49:7d:b8:c6:f0:92:3f:c8:78:ca:76:50:31:
         72:89:b2:d6:0c:62:3b:69:d6:97:1f:f9:b5:af:fb:8e:db:56:
         4a:7c:1b:df:ee:07:67:ee:e4:14:e9:25:0e:81:e4:0f:f3:0b:
         88:77:72:54:bc:9d:66:6f:91:25:b0:d7:01:14:bc:14:81:80:
         7a:04:0c:3b:66:16:cb:40:88:eb:db:03:cc:8d:5b:01:3c:14:
         10:e2:34:ac:6d:9e:04:c5:00:fb:fb:84:99:0a:f3:7f:5d:5d:
         f8:5c:b4:da:f0:0b:e2:cd:74:9d:02:54:a4:0b:34:4a:e6:7b:
         1c:d4:8e:a0:11:a2:14:fc:ee:ae:c8:b3:25:45:f5:bc:c1:37:
         cc:c0:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:07:06 2024 by rpki-client on console-ams.rpki-client.org