Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File:                     nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier:          vVK7cLuiEKIR0bOKfj3kRK2VrYWNYNUJ3yE97pwOS8M=
Subject key identifier:   A3:5E:92:FB:9F:F6:AB:E9:41:75:7E:78:4F:5E:6B:D4:3F:D3:EB:52
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer:       /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial:       01936AEB3BCC1EF5664C29224E82F93ADE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number:          0240
Signing time:             Wed 27 Nov 2024 00:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:21 +0000
Files and hashes:         1: UjT-wi3wQfBntUguPIo5v9JQIp0.roa (hash: FUNvYfXF0sJigqZdrThOlz++XWg+4eB1dnCtCRGRolA=)
                          2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: rEqX4n8nRSxBIHr8Pwh3DskLtw5S6RoL7yvZ2cANqHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:3b:cc:1e:f5:66:4c:29:22:4e:82:f9:3a:de:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
        Validity
            Not Before: Nov 27 00:00:21 2024 GMT
            Not After : Nov 28 00:00:21 2024 GMT
        Subject: CN=a35e92fb9ff6abe941757e784f5e6bd43fd3eb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:3d:45:6c:90:fc:cc:42:09:08:83:3b:71:
                    7b:4d:b7:12:78:ef:71:b9:ad:20:cd:76:23:8d:e9:
                    25:31:bb:50:ce:c8:c4:87:f7:66:ec:6c:a3:63:3b:
                    de:be:81:32:ea:51:0c:ce:f5:80:2f:7b:fe:ad:85:
                    3d:0f:47:a5:a6:99:98:9b:45:22:7d:2a:ca:6d:b0:
                    5f:0d:cb:2d:cc:d5:a1:2e:76:10:6e:70:48:b6:20:
                    63:31:40:e6:d4:0b:9c:1b:32:d0:0a:fa:b4:a1:62:
                    e3:bc:58:01:fe:44:82:0e:9d:36:7a:ca:48:24:16:
                    6f:47:b8:87:d6:6f:1b:1a:70:17:3d:90:4e:85:d2:
                    02:b7:6c:5c:d0:4a:fe:8e:8b:d5:66:0a:b6:b9:bf:
                    21:76:a9:9f:2e:17:92:f1:be:1e:ae:3b:2f:a3:05:
                    45:e5:da:f0:68:52:ce:39:f4:33:f4:10:b8:18:69:
                    c2:7b:ed:ef:f4:74:62:4e:00:c8:d6:0b:27:cd:c3:
                    1b:94:cd:6e:b9:72:ac:58:ba:c8:bc:92:2a:6f:a7:
                    85:28:15:7d:0f:6c:40:8a:12:60:e0:37:d1:82:dc:
                    9d:5d:97:9e:b4:76:fa:27:01:36:be:7d:67:1f:76:
                    ef:a1:40:1a:f9:1d:e0:d6:be:62:f6:60:a5:bb:12:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5E:92:FB:9F:F6:AB:E9:41:75:7E:78:4F:5E:6B:D4:3F:D3:EB:52
            X509v3 Authority Key Identifier:
                keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:d4:85:4c:cc:4c:b9:d2:5c:e8:d3:d3:af:d8:fd:2f:df:
         ac:bc:68:fb:21:04:e4:20:c4:4b:02:35:5b:6b:c8:ac:7e:73:
         26:7e:6d:f1:4d:30:8a:b1:24:a9:7f:e6:55:8d:ef:c9:ae:12:
         cd:d3:4f:56:57:fb:bb:e2:2f:61:f4:e6:a4:55:6e:b4:e4:ed:
         93:3f:8c:14:db:81:14:42:c5:71:14:57:7e:d5:5d:3a:62:e7:
         e8:64:8c:d2:96:81:c1:ef:02:f0:91:77:79:71:f2:69:fb:53:
         e7:0b:c0:d0:62:13:9c:00:bc:78:0f:d8:4b:6c:56:08:d7:ec:
         67:cb:03:51:cf:8e:49:58:6f:0e:3e:17:6f:d2:57:1d:bb:f8:
         9f:55:7d:75:5b:9f:27:75:42:77:21:35:9f:fb:5f:71:a0:42:
         b2:28:e8:78:77:24:f3:20:4d:aa:3b:b5:43:05:14:97:2d:b4:
         23:84:06:74:e7:76:ec:ed:2a:78:db:ff:d2:e5:7e:1d:f4:da:
         0c:67:3e:e7:77:d8:77:b3:05:b4:aa:fa:6a:89:e8:76:cd:f1:
         14:1d:fa:3d:c4:a1:75:d2:e1:66:0c:71:93:61:cd:c6:d3:7d:
         7d:70:75:7b:51:bc:a7:57:45:05:b2:6f:3c:15:32:5b:16:e4:
         b5:d0:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:52 2024 by rpki-client on console-fra.rpki-client.org