Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File:                     nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier:          5XuYsz2kWeEGPyiO/D1o8xdxALnw9xt14VoHN2fK/0g=
Subject key identifier:   D1:88:22:46:86:F1:59:65:D9:65:63:F5:85:71:26:90:23:7E:9B:47
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer:       /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial:       0193572DA707BB7E52EC128907820574B075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number:          0BF2
Signing time:             Sat 23 Nov 2024 04:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:29 +0000
Files and hashes:         1: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: DzoiON4SFNgPcrHrZTIIA4vNEbh7zs91j3Mn/kXkX2c=)
                          2: si2A_qKxExPI8YfaEnBsOE7Xc-M.roa (hash: e5I32bBu9VSX3MfBM97kmIB4UlPiGETsA0Sg+QGvkZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a7:07:bb:7e:52:ec:12:89:07:82:05:74:b0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
        Validity
            Not Before: Nov 23 04:00:29 2024 GMT
            Not After : Nov 24 04:00:29 2024 GMT
        Subject: CN=d188224686f15965d96563f585712690237e9b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:13:2a:36:dc:25:c7:8a:8a:b9:45:2f:6f:
                    6c:c3:d7:79:73:f4:74:37:11:73:da:84:b2:22:ee:
                    f2:7e:b6:90:be:ff:43:fa:2d:06:13:2c:39:f3:82:
                    8a:48:ac:64:0b:6c:9f:d3:f9:e4:02:35:82:9d:c0:
                    27:5b:ad:3e:1e:df:01:7a:78:50:a8:ce:08:90:71:
                    46:ae:02:7b:08:b9:48:20:57:55:33:b7:6a:60:a0:
                    77:bd:01:13:8f:b3:3e:22:1a:55:cd:f4:16:9e:53:
                    69:e4:89:1c:62:64:ad:bc:7f:4b:47:c7:5c:55:ed:
                    45:54:58:c5:e9:71:be:62:3f:3e:ae:f5:a5:cd:1f:
                    e3:e6:16:fa:a1:48:9a:c1:31:b6:2f:17:1f:36:84:
                    18:be:7f:f5:b7:ed:8c:d6:15:ed:dd:4b:40:fb:73:
                    36:0d:b7:8c:1d:88:09:b7:61:b9:54:44:90:d5:80:
                    dc:03:23:1c:97:8e:2e:3e:08:83:ba:79:af:1b:f2:
                    90:5d:b3:24:38:c0:bd:55:d1:d1:a7:95:4c:11:c2:
                    46:21:27:99:40:8e:0c:78:9b:9e:6e:63:ca:cd:f9:
                    fc:eb:2b:71:0a:fc:05:e2:43:4e:17:49:15:2d:87:
                    71:83:9b:69:50:92:30:b9:68:09:78:41:0d:9d:1d:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:88:22:46:86:F1:59:65:D9:65:63:F5:85:71:26:90:23:7E:9B:47
            X509v3 Authority Key Identifier:
                keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:58:1e:0d:0f:ee:ec:e5:68:a1:db:ef:b8:ba:3c:9e:9c:f4:
         0b:1b:e0:70:d6:c8:66:d3:1b:90:93:59:c6:05:14:38:20:1d:
         57:2a:78:95:5d:62:c7:6f:31:02:a0:75:ae:f7:0c:eb:57:5e:
         1c:e9:11:ee:f2:19:32:a5:15:8d:c5:e7:38:01:cc:ce:fe:b3:
         dc:45:f6:8c:f1:94:b8:56:47:98:d0:cb:b6:3c:67:ea:c7:af:
         f1:55:79:9e:00:b0:79:16:3a:74:ff:4a:c0:38:fd:70:29:9d:
         9c:31:5e:47:4b:c3:24:a3:f7:e0:3a:a9:65:b5:26:9c:51:50:
         4d:9b:97:cf:e7:99:3f:16:ed:62:f0:e9:79:78:5d:3e:f1:2b:
         0d:6c:d6:ea:09:8b:1b:0c:ec:89:99:60:0c:e7:55:a6:db:5b:
         eb:1d:33:a9:0b:6b:71:53:21:a7:64:e4:48:e8:f7:3a:3b:4b:
         e4:23:8a:02:df:50:40:53:b1:f4:27:3c:13:c7:50:37:79:9c:
         67:93:33:d6:40:55:12:bb:8b:b5:41:47:2c:9e:4d:c4:8e:59:
         70:8f:cd:ce:88:10:d7:41:32:ad:29:57:bb:fc:c5:07:a3:f4:
         63:bb:f0:36:fe:ca:19:76:45:c7:0b:2b:ea:03:72:40:96:73:
         72:97:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:56 2024 by rpki-client on console-ams.rpki-client.org