Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File:                     r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier:          XkZGkUZpbMzBTOAIIV87bt9Zz2rVy9hmm48V4bOhzjo=
Subject key identifier:   85:C0:34:A4:B6:85:0F:4E:8F:0F:2F:B3:02:39:65:8E:DD:EF:6E:B0
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer:       /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial:       019356898F3B4DF6DAD8C581B50C81501930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number:          06FC
Signing time:             Sat 23 Nov 2024 01:01:15 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:15 +0000
Files and hashes:         1: e9EGyQLhUqjVQ6BG8_mU1KL6A7A.roa (hash: jP8pq1seuFSUlCZN84g8cWweLLMUl5jdlT0W3VB+uto=)
                          2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: /v5YGj9xCk2at6UH3RhcKfZBwL4efRADm6+r7tauBhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:8f:3b:4d:f6:da:d8:c5:81:b5:0c:81:50:19:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
        Validity
            Not Before: Nov 23 01:01:15 2024 GMT
            Not After : Nov 24 01:01:15 2024 GMT
        Subject: CN=85c034a4b6850f4e8f0f2fb30239658eddef6eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:6d:42:2b:be:2d:d5:91:0e:76:a0:79:52:
                    47:7f:92:1e:a7:52:7c:82:6e:b7:17:fe:a7:70:9d:
                    9d:77:d3:3a:ad:9b:b1:bf:9b:b5:9a:3a:7b:a9:52:
                    20:4c:a9:40:d6:0f:b2:25:35:02:9b:99:c7:ba:89:
                    51:8b:87:b7:57:e5:79:7a:83:75:a9:bb:e2:50:d9:
                    a3:8e:80:6b:10:d2:da:e8:5b:64:de:1d:c1:db:26:
                    eb:ad:7f:ce:24:f2:99:83:42:16:b5:7e:0c:d5:37:
                    a8:c2:13:89:79:78:70:f9:94:a5:6a:1c:d0:0c:9f:
                    fa:c4:bf:bb:3b:b3:f7:01:21:c2:fd:bc:30:85:49:
                    c3:da:40:cd:c8:87:04:36:09:6e:52:4d:0c:7f:65:
                    a4:e1:a2:66:fa:dd:88:e6:6a:f6:12:6a:b3:96:50:
                    a2:45:9d:a4:f5:7e:3f:e6:a5:48:60:91:3f:00:c3:
                    39:ef:cb:f1:d1:d3:a3:0c:80:df:24:2b:93:bb:2d:
                    d5:4c:40:f7:81:e2:95:e1:41:87:5b:a0:1d:a5:97:
                    16:e4:a5:b7:44:1e:3f:4f:70:df:f2:10:6b:07:ea:
                    03:c4:16:ea:b3:b5:14:22:0e:18:96:3c:d7:7c:54:
                    a9:7a:2e:5e:a3:bd:4d:7f:13:9a:23:0c:00:04:08:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C0:34:A4:B6:85:0F:4E:8F:0F:2F:B3:02:39:65:8E:DD:EF:6E:B0
            X509v3 Authority Key Identifier:
                keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:41:6f:b2:fd:1d:9a:55:61:e2:36:d1:a8:78:88:e9:b2:0d:
         ea:b4:0f:59:4f:2e:b6:95:1a:a6:13:8d:d7:d4:5c:cb:92:4d:
         7f:1b:73:2c:40:8e:31:ac:3a:2d:24:1c:53:eb:d1:aa:eb:59:
         22:1f:0e:6e:a3:9e:45:05:f3:de:c2:7d:a5:37:9e:58:33:62:
         79:43:69:c6:cc:12:5e:e2:22:f0:70:4c:ce:03:14:b2:18:63:
         3b:aa:9b:53:a6:8d:bf:61:aa:c0:09:64:93:82:a5:bb:bf:25:
         ce:a6:f8:94:94:82:1f:d2:c8:4e:0f:c1:87:2e:94:e2:25:82:
         b7:54:a2:5b:b0:4e:72:95:72:27:b5:e2:11:d4:89:e2:0b:c3:
         0e:a5:a8:54:db:2b:e5:9e:51:d6:8f:e8:f6:fa:07:5a:bb:78:
         e2:47:d0:23:b5:ed:1b:e8:86:53:e4:ed:dd:20:1a:97:e1:3f:
         aa:a8:f4:1b:11:bd:8a:a9:f4:9c:c9:e4:77:be:ca:5c:d0:2b:
         1b:26:85:1c:06:31:05:09:6a:27:ce:62:7c:41:7d:de:92:89:
         27:ab:64:3c:8f:0c:b2:9d:5b:a6:c2:29:c3:a0:47:c1:f5:40:
         ce:8a:87:16:7e:91:3f:a6:c8:c0:cc:31:48:b7:04:59:74:7f:
         89:43:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:20 2024 by rpki-client on console-ams.rpki-client.org