Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File:                     nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier:          VmuVu2Sv9q5CrXAjE8VUK0qZjHz8qHKivD5VowBfIlU=
Subject key identifier:   77:31:D8:8B:FA:AB:39:42:33:DF:D2:06:FF:05:9C:D9:7D:3C:13:89
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer:       /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial:       01936A46B446CE93AED8BBA7472B0A3CCD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number:          06AB
Signing time:             Tue 26 Nov 2024 21:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:38 +0000
Files and hashes:         1: F5QuvxZ0GEKpU8bFzQ0MtRFMNLk.roa (hash: Yc7dZIJ40juTPJKt//ahlhqlb6vPoi1L+ockIw1NXv4=)
                          2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: KkRj9VsDAl9rcWXzoghPZWBzp2D/T2TZml/T0noR3Zw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b4:46:ce:93:ae:d8:bb:a7:47:2b:0a:3c:cd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
        Validity
            Not Before: Nov 26 21:00:38 2024 GMT
            Not After : Nov 27 21:00:38 2024 GMT
        Subject: CN=7731d88bfaab394233dfd206ff059cd97d3c1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:fc:e5:ee:08:6f:36:2e:6a:fe:2c:33:e4:
                    45:eb:06:1d:11:28:68:7b:57:75:1e:13:ca:2b:84:
                    b8:c0:2e:37:6b:f9:d3:d3:d9:d0:02:70:b8:bd:97:
                    a4:fe:94:5e:d0:a5:de:80:93:8d:fc:0d:fa:ba:54:
                    95:61:71:4b:77:50:64:3b:f6:53:12:68:13:85:3c:
                    17:ec:5d:e2:c1:4a:6e:09:5f:14:1a:3e:f9:59:87:
                    a0:a3:57:26:b9:7d:9c:86:f3:94:c0:ce:89:2d:07:
                    d0:2f:08:2d:c2:db:0e:e9:fc:fa:49:3f:d6:12:67:
                    01:5c:68:42:14:10:73:67:50:0a:3a:58:31:6f:83:
                    0d:92:2e:f3:e5:58:2a:02:36:01:dd:00:8c:ce:8a:
                    69:d8:62:86:91:7c:70:c8:3d:f3:05:8b:b4:ba:43:
                    20:b7:44:42:74:eb:15:aa:73:66:bd:01:51:cb:f6:
                    5b:9b:a3:46:a7:5c:db:84:1b:7a:9a:27:5e:a2:f3:
                    ef:38:53:be:5f:f2:f4:73:d1:ad:6c:05:23:7f:18:
                    36:c9:b2:2d:99:78:cb:5f:57:06:78:58:1d:5d:82:
                    c2:28:41:8e:56:32:22:97:4a:fa:b6:0b:d6:f1:4e:
                    cc:87:6c:01:d9:aa:56:4a:ba:c4:15:65:cb:78:7c:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:D8:8B:FA:AB:39:42:33:DF:D2:06:FF:05:9C:D9:7D:3C:13:89
            X509v3 Authority Key Identifier:
                keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:d7:b6:1c:98:0d:43:6c:02:fa:b7:7b:14:3a:6d:14:72:
         76:b8:4e:da:91:24:65:78:bc:04:aa:eb:e4:5a:8d:96:18:42:
         c5:cb:c3:44:a9:89:e2:f5:4b:80:bb:c8:75:7e:64:de:5b:4a:
         f5:e2:24:ff:85:62:11:87:e3:cc:b5:de:50:ac:73:db:f0:a8:
         77:ae:36:78:c9:58:41:d9:cc:3b:db:9e:df:68:7f:d6:99:13:
         06:cf:49:b9:2b:90:b8:d3:e4:f4:73:12:31:c9:c6:d0:a6:e5:
         07:c1:37:cb:d5:0f:cb:74:7a:20:b3:95:5c:6d:04:13:ad:5c:
         cd:85:ee:98:f5:56:24:25:3a:c6:5a:60:e0:a2:cd:4f:03:8c:
         4f:17:fb:1a:e6:ab:cc:88:23:03:b9:86:28:bd:84:4e:13:17:
         ac:b1:8b:2d:64:35:50:be:ea:a0:1b:c5:43:9b:85:f5:85:54:
         ac:b0:bf:67:de:4a:f0:37:f4:7e:c0:64:b1:69:32:15:78:8f:
         c3:2b:e9:6e:af:5c:c7:00:c5:f9:fa:ad:9d:bb:bf:77:97:ff:
         4a:64:e5:8b:44:9c:b6:1e:76:12:8b:42:bc:27:32:0b:5a:d9:
         5b:b0:87:1a:43:fb:3d:e7:5b:d3:92:3b:d8:ee:14:48:44:70:
         0e:ed:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:38 2024 by rpki-client on console-fra.rpki-client.org