Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File:                     rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier:          ja9+AIAGPlIUtKJUW/hfVQJum87owRQ3X+Q5Iu9TIPs=
Subject key identifier:   14:A1:C3:2A:E5:31:C1:3E:B2:CA:36:87:77:D7:33:08:E7:F3:EF:9E
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer:       /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial:       019355AD48C65D0A7DEE4983ECB8641E02F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number:          09FF
Signing time:             Fri 22 Nov 2024 21:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:39 +0000
Files and hashes:         1: AjkER9ZEarfMlx4ydtfMWhNmc8M.roa (hash: kwxmWl7B1rYrFtJ50yeXGPD/rEdqgjpG9k5TbQE5jR8=)
                          2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: yegh6ANPklqxOtMo4ex6wg1/8K0vl6Uo3aSQJQmRTJM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:48:c6:5d:0a:7d:ee:49:83:ec:b8:64:1e:02:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
        Validity
            Not Before: Nov 22 21:00:39 2024 GMT
            Not After : Nov 23 21:00:39 2024 GMT
        Subject: CN=14a1c32ae531c13eb2ca368777d73308e7f3ef9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:bc:d3:d0:28:21:d0:64:af:42:13:c3:73:
                    07:d6:00:82:3b:e0:dd:b8:32:dd:0e:ff:0c:dd:b3:
                    67:02:e9:1f:fe:aa:c7:bc:33:74:66:1a:96:bb:bc:
                    89:90:00:87:f8:39:19:56:30:d9:ca:ee:7e:aa:e5:
                    40:d4:15:d0:61:d6:5b:7c:50:4e:db:d8:72:39:23:
                    8e:ee:a1:1f:80:3a:70:27:1a:cd:b6:01:f4:5c:a2:
                    e9:9a:0f:df:96:49:05:20:ca:e0:ce:c8:7a:50:29:
                    50:b3:bc:ab:b4:1b:f2:91:c1:6f:6b:7b:2d:b4:90:
                    c9:7e:01:f0:21:57:ac:0c:6a:12:18:98:da:d3:12:
                    ec:7b:a7:c4:a7:cf:22:c7:17:d2:bf:a5:4f:d0:02:
                    0f:05:eb:38:79:94:c2:3b:40:9f:f6:8a:2b:17:ad:
                    77:d1:c2:aa:a4:ea:85:b2:73:31:9a:b2:32:1a:09:
                    aa:ba:fd:3b:cc:91:15:1d:88:22:2e:77:a6:56:df:
                    8f:73:3b:af:de:b7:0b:77:0a:55:17:99:00:7b:52:
                    7d:c2:be:1c:e2:36:99:8d:f3:9d:c1:09:80:76:43:
                    4e:45:e2:81:7d:6c:c6:36:cc:a2:7b:74:9f:5e:92:
                    da:73:81:4f:02:f3:92:42:28:2d:91:5e:37:89:54:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A1:C3:2A:E5:31:C1:3E:B2:CA:36:87:77:D7:33:08:E7:F3:EF:9E
            X509v3 Authority Key Identifier:
                keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:93:8f:fe:23:46:5e:e2:96:8e:9b:02:f5:7f:e9:c0:18:
         7f:1f:50:3c:59:11:c4:6b:9c:60:32:e2:fe:06:6f:a6:a4:5b:
         73:e3:5d:1a:c3:44:a3:90:30:d4:d2:84:cf:86:c5:e1:a8:59:
         9d:34:b3:18:ea:b0:0d:41:f7:34:8c:87:c2:51:b4:1e:b6:f4:
         f5:dc:a5:21:63:b1:99:fd:22:98:6a:60:7a:da:90:5b:d7:77:
         37:d6:78:71:06:5a:cf:54:74:1d:a3:47:41:5a:d8:36:08:55:
         d4:33:49:a1:ba:7f:8e:6d:97:5d:52:c9:28:04:32:90:9a:53:
         98:1d:9e:7c:95:e7:11:93:c3:a9:0f:a1:6a:ee:1f:7e:04:8c:
         c9:0f:dd:38:34:9f:a8:17:62:15:b3:4b:d5:2b:09:40:53:c8:
         b9:65:53:d0:10:ef:04:26:f0:60:7f:ec:b6:44:6e:38:b9:ae:
         b1:13:b9:03:cc:7e:17:ca:df:0b:0a:e9:66:bc:2e:dd:c5:d2:
         10:51:6c:d8:47:1a:5e:b9:8b:e4:50:27:8d:f3:49:59:9c:05:
         71:a5:e3:42:1f:ae:6c:66:74:a6:cd:a7:ef:ff:25:53:44:eb:
         c0:4a:89:4f:53:39:bb:69:91:f2:d0:c1:74:9e:11:c5:08:29:
         b1:14:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:29 2024 by rpki-client on console-fra.rpki-client.org