Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File:                     Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier:          RwOd4xUdhRJmNg98NWF+1nuHS4ZdT2sAoUSzv7QeMGU=
Subject key identifier:   AA:4C:C1:3E:23:22:2D:86:88:FA:BD:D1:18:A0:E8:7B:E0:6F:3D:41
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer:       /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial:       01935989CCFDF329C36604A47720138A5D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number:          0B23
Signing time:             Sat 23 Nov 2024 15:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:23 +0000
Files and hashes:         1: 1ITModqHB2fBRtuza5iM-Tr99yM.roa (hash: jAAQraz7graatGDEH9ZV0fAc8r1xvQx/cXkpQp+zdJA=)
                          2: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: UP6JrInFTCf+rS7QkoTvDQcClDjF3GIX83Zup9X3jnQ=)
                          3: OMzDY48ClFOMSB6V5QFO661yGBk.roa (hash: Jg1Krckj0rbQuXk3ZtHBJmF0ThHTQusOlmd+8OQbd6E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:cc:fd:f3:29:c3:66:04:a4:77:20:13:8a:5d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
        Validity
            Not Before: Nov 23 15:00:23 2024 GMT
            Not After : Nov 24 15:00:23 2024 GMT
        Subject: CN=aa4cc13e23222d8688fabdd118a0e87be06f3d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:b5:58:72:f7:22:25:e0:c5:70:49:cb:5c:
                    42:b3:cc:c9:cd:2d:34:08:ff:c4:06:22:cc:9e:01:
                    41:9a:07:ee:06:e5:3b:aa:81:3d:bf:26:9e:15:b3:
                    6f:28:bc:f0:f6:0b:89:bb:81:07:9b:09:f7:45:9a:
                    39:06:54:69:12:92:b2:58:e3:f4:a3:9e:30:7d:e8:
                    ac:f3:7d:a4:e1:b2:58:54:85:63:e7:41:4a:54:10:
                    64:45:18:de:48:2f:2f:6c:03:b4:f7:97:2a:14:86:
                    c5:fd:27:ba:42:a3:c9:c9:1b:46:aa:38:6e:71:3d:
                    9d:bf:30:3f:71:3c:d6:0b:40:af:aa:e2:86:0b:cc:
                    63:87:6e:bb:d6:e5:d8:8d:75:97:47:6c:11:d1:31:
                    ad:40:83:7e:f7:25:6a:db:b0:40:a6:36:52:be:f6:
                    46:28:d9:e6:4c:75:e3:98:73:3a:d2:f0:95:26:fb:
                    19:9f:cd:c7:62:bb:1d:84:fa:74:87:34:68:1e:d9:
                    0f:dc:e7:cd:4b:11:75:f1:d2:27:5c:12:55:93:b3:
                    6d:3a:3f:ed:bb:bb:fb:ca:d8:8c:03:8c:f2:92:9b:
                    58:54:e3:4c:c6:6f:7b:10:d0:55:5c:51:71:04:ea:
                    50:18:a8:79:eb:dd:04:07:72:6b:ed:8f:f3:53:e2:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4C:C1:3E:23:22:2D:86:88:FA:BD:D1:18:A0:E8:7B:E0:6F:3D:41
            X509v3 Authority Key Identifier:
                keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:77:46:78:00:7c:a0:1f:51:54:21:34:67:70:19:e0:1a:d8:
         22:c1:97:50:bd:ea:23:e3:9b:d5:be:0e:13:35:01:94:f9:73:
         5a:28:a0:60:eb:87:90:af:fb:3d:53:00:89:08:17:2a:4d:8e:
         17:fe:23:15:a4:4d:ce:59:55:47:45:46:ee:7d:39:30:db:e8:
         00:62:be:4b:8b:a2:3e:4d:63:92:98:62:31:b4:e1:53:16:a6:
         8d:0f:eb:a9:46:28:37:d3:5e:cf:e7:fe:ee:ab:73:12:a9:c7:
         7f:19:e2:36:36:08:69:b2:bc:8f:55:b5:67:3b:ad:5e:3a:50:
         07:22:85:20:c3:41:3b:c5:0f:e7:23:20:a8:e5:ec:47:11:d9:
         12:18:09:c2:ca:e0:b4:f4:30:b8:30:62:73:2a:91:ae:ae:5c:
         4b:47:7a:49:66:df:73:2f:ef:98:31:7e:04:5a:3f:fc:4c:08:
         6b:0c:e8:75:7e:2c:eb:f1:20:fc:e8:8e:0d:01:35:22:3a:65:
         f0:f6:f6:e1:64:81:67:e5:99:c9:59:be:25:8f:ee:56:98:5e:
         e5:6a:1f:59:8d:0e:fb:67:7c:ab:9e:70:4f:13:c2:ee:3e:e5:
         9a:c5:2f:30:92:00:a8:b0:eb:e6:6d:fb:93:e4:71:41:c0:d5:
         c6:c0:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:43 2024 by rpki-client on console-ams.rpki-client.org