Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File:                     nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier:          34tTdzct4HzKHRK4ZUG4eLF5NDtdy12fi8sqZ7ZSS8s=
Subject key identifier:   4D:22:C7:F8:7B:91:69:2D:A3:81:A0:86:2F:F5:DB:C5:19:CB:4C:FE
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer:       /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial:       0193550861492A269106ED9963BB3F81BA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number:          0A07
Signing time:             Fri 22 Nov 2024 18:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:32 +0000
Files and hashes:         1: 1pjwZlUmb8r9oD_HIfjfC6LjQeA.roa (hash: G1Q6rmJRu72XrpQyjBDNFJY+AoZgUw1RHCU67sHanj4=)
                          2: CYrrLmQyJZ8ICdvYi9zbuLVngl8.roa (hash: xmgzmUkkyQEsGHvXae5pScc7JvonLHUiudmj4/6MB30=)
                          3: NykCS1shaiE0okp3jzZZ6SonIvM.roa (hash: 61zf2q9tilEfa957l42gPXC7Lujocwo0eiYO1iYbewQ=)
                          4: X_28B36q2XbterSDmv_z2UMD-n4.roa (hash: zfIBMGo14Wp/SaUmAcm1f5PHLwec4iix1goaeGgOOgs=)
                          5: eGMfGfuwwz3y5AzckW812mtA1WE.roa (hash: uj2O753G6QQfUB8WwELgBjYM8OrtKtYXW/3Qk2bngvc=)
                          6: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: gg5JvZVguR0srEmrVgigHoaiKrTFOUdt6QwmwEJi3kY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:61:49:2a:26:91:06:ed:99:63:bb:3f:81:ba:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
        Validity
            Not Before: Nov 22 18:00:32 2024 GMT
            Not After : Nov 23 18:00:32 2024 GMT
        Subject: CN=4d22c7f87b91692da381a0862ff5dbc519cb4cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:b5:75:a2:a6:88:d9:85:5b:df:22:03:71:
                    76:21:ba:ef:10:7a:95:45:a7:e5:2f:68:a3:41:c6:
                    e7:ee:f4:c2:23:42:ff:ff:89:17:f8:8c:87:4e:50:
                    45:0a:af:2a:b5:7b:5d:c6:3b:05:1a:b2:ae:8b:c4:
                    6d:e0:40:ef:12:29:59:d1:0e:11:03:69:3d:19:1f:
                    5e:66:73:2c:ad:02:ed:00:33:19:f2:e2:3f:23:7c:
                    45:b0:ae:7f:9a:bf:01:5f:7b:20:fb:79:c7:75:97:
                    86:47:c0:76:7b:48:85:ec:56:db:42:60:b6:fc:88:
                    bb:e1:28:ad:04:71:77:d8:6c:f7:8b:bc:cc:94:ff:
                    49:43:d5:bf:80:9e:5e:65:57:4d:5c:ef:2b:86:0e:
                    69:3d:dc:18:be:d6:ff:bc:27:d4:61:9e:71:7a:4b:
                    dc:01:4a:c8:d3:52:ae:83:6f:39:71:a7:bb:7a:e6:
                    09:a0:1f:2e:dd:f9:a3:6e:d1:5a:fa:fa:76:55:b4:
                    22:35:0f:7f:d5:74:99:e4:d7:52:1f:0c:a2:94:10:
                    8f:50:de:6d:d0:f2:7a:94:f7:33:be:68:66:23:3f:
                    da:fa:68:c9:23:a9:b2:82:6d:76:0f:ef:8d:1d:88:
                    b1:34:df:00:e0:64:1c:db:0a:75:b0:43:a2:c6:29:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:C7:F8:7B:91:69:2D:A3:81:A0:86:2F:F5:DB:C5:19:CB:4C:FE
            X509v3 Authority Key Identifier:
                keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:36:b1:67:e7:4f:ee:f9:c1:ad:2d:d8:2a:f8:51:1a:0c:ea:
         04:17:e3:92:c3:9d:e0:1a:76:51:4e:fd:90:32:ec:2f:7f:63:
         6f:f9:04:41:e2:a5:1b:bc:47:9b:c4:4e:65:0e:81:46:c9:e7:
         9d:df:d2:c3:42:a5:54:24:81:3f:98:1d:5e:17:6e:2a:f9:bf:
         c6:36:8f:ec:5f:30:22:1c:dd:ad:86:2e:54:f4:f4:d9:4e:5b:
         8a:43:77:0e:01:f6:5d:1f:c7:95:31:71:37:04:9a:7b:d9:9e:
         e8:3a:b8:93:32:ac:9e:e5:0a:f2:43:1d:4c:fa:f3:cf:5c:c6:
         60:97:59:3d:de:14:ac:ec:a6:69:77:ec:8b:cd:76:01:5f:a5:
         95:ca:ee:bc:f6:d0:5c:4f:7d:6a:fc:00:1b:a1:66:49:1c:14:
         61:d1:76:b4:b9:e0:df:91:16:56:f7:47:70:4c:7e:1b:28:ff:
         ce:94:1a:3f:37:75:2e:1d:b9:00:4d:4f:85:ac:f3:54:31:20:
         fa:7f:48:a2:c3:3f:b1:3d:2a:8c:30:f5:b0:7a:23:35:18:3e:
         4c:24:20:0c:77:64:20:91:c6:a9:2d:06:87:1f:33:36:5a:c8:
         89:ee:c5:03:b0:f1:5f:9d:bb:74:10:11:b5:16:41:26:d3:94:
         3a:46:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:59 2024 by rpki-client on console-ams.rpki-client.org