Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          9MNiDgjEUb0VLk2pq9gUe4HWWX6S7RAKxRe1A6h1/hs=
Subject key identifier:   75:3A:AC:FE:AB:5F:B5:D2:83:42:DA:12:0B:C9:11:9D:7D:FB:B8:1B
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       01936933B19DC78084F974C144EAA4430DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          1384
Signing time:             Tue 26 Nov 2024 16:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:15 +0000
Files and hashes:         1: HNnDHLNSKFSdXd3qPKXykP7JDCQ.roa (hash: bNDNCqsAAhJOcQT2ElMIFNsyKJDF2cqRSSQCKZsVqM0=)
                          2: YfnqqpQxd0sVF1nYw5J-Dm4c5rE.roa (hash: oLF4fcqQSXz4+YsKmC1WGt/AZHnnhMfyH7ZM4kSwF+Y=)
                          3: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: pjoBrWH+xHXW/f6EtOTuBO6wIghRHdnTGiQNUTclXG8=)
                          4: tCgTknJsUGIZk18TWezCXzHQU5I.roa (hash: tR17Yc+N/XzXhgVXqLpf8c9z0uZa3zE6Xhfnn0ohCic=)
                          5: tRGuzRNaltL4x6V82TbNAMmRjQk.roa (hash: IhIF0ZsjlvUrffcCadqqwlpVcYK+1j+K1IXlCyF1S4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:b1:9d:c7:80:84:f9:74:c1:44:ea:a4:43:0d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Nov 26 16:00:15 2024 GMT
            Not After : Nov 27 16:00:15 2024 GMT
        Subject: CN=753aacfeab5fb5d28342da120bc9119d7dfbb81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:26:f9:a6:08:e5:4c:a6:46:85:37:9c:43:
                    6d:ab:25:f6:70:ad:7c:c8:73:5b:37:e4:80:a1:f9:
                    ba:d7:f3:52:14:e8:9e:02:e7:9f:09:5a:d0:70:81:
                    68:86:f1:5a:3f:ed:5a:d6:2d:6f:d1:96:2e:01:ad:
                    ed:0f:e0:6e:6e:9d:97:99:98:82:93:2f:03:6a:60:
                    50:00:67:a1:8c:39:6d:73:b3:aa:76:0a:ad:7d:e3:
                    ed:54:ba:0d:61:61:ea:4a:d4:8c:4c:2f:f5:d4:69:
                    db:6b:eb:27:8b:1d:ba:9d:da:7d:a3:90:fa:20:77:
                    8f:eb:c9:01:e5:7a:0b:87:0c:d9:d6:06:c4:25:04:
                    f6:85:13:d0:9c:08:78:45:3c:23:86:3d:27:d3:d7:
                    e7:71:1d:d3:30:d2:9d:c4:8a:34:0f:8c:62:dd:bb:
                    6a:c2:b5:28:21:9d:8f:30:23:7f:08:e5:ed:5f:ed:
                    27:5a:1d:60:52:84:04:a8:da:ec:68:b0:88:21:10:
                    81:f2:eb:83:e8:bd:e4:8c:df:bb:c0:58:95:42:fe:
                    00:67:4d:de:72:58:4d:56:8e:53:f8:9d:f8:f3:58:
                    c0:97:bb:50:45:28:29:d9:2b:d2:34:1c:4d:b0:7a:
                    c9:0e:f3:21:14:0e:a8:2c:75:66:7e:39:e7:a5:7d:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3A:AC:FE:AB:5F:B5:D2:83:42:DA:12:0B:C9:11:9D:7D:FB:B8:1B
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:87:c0:c3:99:68:d9:15:1b:40:44:93:b6:9e:31:2d:8d:
         25:03:0c:56:f2:b9:83:ef:45:31:ca:17:0c:43:01:9e:fe:73:
         53:15:6c:ea:75:9c:3e:0f:70:1e:cd:5e:53:f9:4a:e3:14:a9:
         9e:c6:f5:5e:20:7f:ea:3d:9f:e9:79:fc:cc:2e:a8:81:6a:15:
         43:34:2d:7b:70:cd:ed:ec:81:cc:63:b5:29:35:fa:16:f6:d3:
         53:5c:da:ea:54:61:01:6a:c3:4e:46:29:b3:73:2d:16:f7:76:
         59:5c:3d:84:af:7a:d0:29:d2:f9:44:09:1f:d6:99:a6:a5:20:
         97:3c:06:24:8d:55:b0:e6:50:9d:07:b0:5c:b0:ae:bd:40:fc:
         8c:ad:3e:f0:2e:dc:d6:1e:08:fc:a1:16:88:b0:5e:95:da:5b:
         6b:d1:5c:ab:6d:20:5d:46:9a:70:6c:36:35:80:24:36:4a:da:
         df:dc:f4:11:f4:f4:90:05:18:8c:62:aa:61:4d:0f:9a:6e:c4:
         9f:f5:94:99:d4:ae:a5:80:0e:a4:30:f1:3b:6c:10:da:20:83:
         d7:99:c7:b1:74:59:1f:1f:b6:e4:63:8a:f4:15:3a:cb:91:e8:
         15:d4:4d:fb:04:52:38:73:04:9f:16:55:44:ce:ff:ed:d7:f0:
         98:57:13:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpM7Gdx4CE+XTBROqkQw3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjQxMTI2MTYwMDE1WhcNMjQxMTI3MTYwMDE1WjAzMTEwLwYDVQQD
Eyg3NTNhYWNmZWFiNWZiNWQyODM0MmRhMTIwYmM5MTE5ZDdkZmJiODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptgm+aYI5UymRoU3nENtqyX2cK18
yHNbN+SAofm61/NSFOieAuefCVrQcIFohvFaP+1a1i1v0ZYuAa3tD+Bubp2XmZiC
ky8DamBQAGehjDltc7OqdgqtfePtVLoNYWHqStSMTC/11Gnba+snix26ndp9o5D6
IHeP68kB5XoLhwzZ1gbEJQT2hRPQnAh4RTwjhj0n09fncR3TMNKdxIo0D4xi3btq
wrUoIZ2PMCN/COXtX+0nWh1gUoQEqNrsaLCIIRCB8uuD6L3kjN+7wFiVQv4AZ03e
clhNVo5T+J3481jAl7tQRSgp2SvSNBxNsHrJDvMhFA6oLHVmfjnnpX0a4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU6rP6rX7XSg0LaEgvJEZ19+7gbMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVuHwMOZ
aNkVG0BEk7aeMS2NJQMMVvK5g+9FMcoXDEMBnv5zUxVs6nWcPg9wHs1eU/lK4xSp
nsb1XiB/6j2f6Xn8zC6ogWoVQzQte3DN7eyBzGO1KTX6FvbTU1za6lRhAWrDTkYp
s3MtFvd2WVw9hK960CnS+UQJH9aZpqUglzwGJI1VsOZQnQewXLCuvUD8jK0+8C7c
1h4I/KEWiLBeldpba9Fcq20gXUaacGw2NYAkNkra39z0EfT0kAUYjGKqYU0Pmm7E
n/WUmdSupYAOpDDxO2wQ2iCD15nHsXRZHx+25GOK9BU6y5HoFdRN+wRSOHMEnxZV
RM7/7dfwmFcTJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:15 2024 by rpki-client on console-fra.rpki-client.org