Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File:                     nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier:          /ei5+pVPbauVdtGQ9AUMT2PwQyB/zgYbkqD/KGBIhg4=
Subject key identifier:   DA:76:82:90:9C:F9:29:F9:D5:1D:45:72:72:54:5C:DF:DA:CA:EB:82
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer:       /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial:       0193591C2C0BEE6F9C46291D5196ED2723BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number:          5A
Signing time:             Sat 23 Nov 2024 13:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:38 +0000
Files and hashes:         1: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: ZJNSofoqent9LRksDL5bJOhiygcsT9iMCE9ScL/2Gyg=)
                          2: yxmllm0Qh79AVcCakKVPpQ3bgZQ.roa (hash: GmGMZUsAKWMBaQXjvbL6FgR6wxsj6O2NcI4x+WTA4MQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:2c:0b:ee:6f:9c:46:29:1d:51:96:ed:27:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
        Validity
            Not Before: Nov 23 13:00:38 2024 GMT
            Not After : Nov 24 13:00:38 2024 GMT
        Subject: CN=da7682909cf929f9d51d457272545cdfdacaeb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:77:31:56:5f:b6:71:a6:26:46:45:06:79:a2:
                    9d:be:ba:68:a4:31:e4:7b:95:b9:de:da:50:19:50:
                    dc:77:2b:3a:88:d5:e1:89:c4:6f:8f:87:0a:a9:e8:
                    4b:cf:7f:f6:55:b1:51:c1:7e:3c:8f:d4:80:45:90:
                    77:8d:85:e9:0e:6d:6a:17:da:e6:48:72:00:bd:00:
                    10:5c:33:a3:cb:c7:5c:34:3b:ae:3f:d4:52:fc:c3:
                    67:bb:e3:4d:89:54:92:1b:47:0c:73:f3:a5:5b:1e:
                    45:59:56:6c:66:ce:f7:93:da:cf:f9:ed:c1:c5:59:
                    12:a6:7e:15:0a:01:39:e4:30:e5:c8:af:11:c1:fb:
                    82:29:d7:63:95:7e:8b:37:ee:5d:08:9b:19:3b:3a:
                    d9:95:8d:ec:2e:34:38:20:1c:04:0d:f5:3a:40:1a:
                    24:16:21:ca:a7:b0:3c:c8:51:2c:c6:24:a1:5b:00:
                    5f:ea:02:19:7a:95:e4:fb:30:8b:8c:68:36:6c:ca:
                    3a:58:cb:55:f1:dc:0c:82:78:7b:ad:52:ec:08:33:
                    05:44:c0:07:25:a3:7f:68:ff:f3:10:f5:b8:14:e4:
                    2b:20:83:fa:44:e3:17:64:50:3b:bd:64:8f:dd:5f:
                    3a:f8:60:c5:ff:37:ea:e8:d6:bf:22:ea:f5:b1:bd:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:82:90:9C:F9:29:F9:D5:1D:45:72:72:54:5C:DF:DA:CA:EB:82
            X509v3 Authority Key Identifier:
                keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:9c:4d:cc:86:89:44:32:83:9a:18:75:8e:92:a7:0b:30:
         61:36:57:a2:5d:bc:e6:63:30:8b:a3:49:db:e5:e7:c3:6b:dd:
         07:27:b5:8f:d4:aa:29:0a:78:19:b7:d5:3c:2c:cd:bb:e0:c7:
         2e:72:57:33:1a:3a:66:85:e1:fd:3e:84:c2:2f:0b:f1:1f:a9:
         48:c9:bb:e9:e9:33:3f:47:5e:da:ee:ab:77:39:e9:82:86:2b:
         0e:73:63:ca:07:c4:de:ae:5d:98:49:c3:1d:7d:31:91:74:01:
         93:25:1c:86:03:da:54:72:81:5c:7b:6c:58:41:2c:87:6f:f3:
         62:08:79:d8:58:86:13:81:55:65:32:d7:06:76:1b:37:90:65:
         e7:75:26:57:2e:8e:f6:19:57:8b:6d:80:47:20:ee:1c:a3:65:
         1c:19:fb:ca:e6:30:d3:ef:63:a1:8d:de:0d:3e:80:f4:54:e3:
         c6:9d:c0:a3:9b:43:1f:08:38:b0:d3:d5:eb:4f:35:50:d3:37:
         5d:45:c5:45:5a:9d:87:08:df:1f:d6:9c:1c:87:c8:a7:1e:ac:
         82:ff:48:05:53:55:d8:5f:77:1c:53:cc:e1:67:5c:1c:29:74:
         2a:40:75:23:fd:40:76:a5:9a:f3:ca:d4:be:0c:16:99:c7:bc:
         25:32:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:28 2024 by rpki-client on console-ams.rpki-client.org