Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
File:                     JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json)
Hash identifier:          i1jlzLicM3NmztQIruoOB96I+EkcmQhaOZeDz3aS8iM=
Subject key identifier:   55:00:25:08:A9:32:9C:90:55:31:89:FB:2B:4D:77:27:0D:CE:40:4E
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       01935576792A766BF57D87E84040E5C2376F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
Manifest number:          06AA
Signing time:             Fri 22 Nov 2024 20:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:47 +0000
Files and hashes:         1: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: Z8xal4SdF6KrhRkXoHfKyAioMaQgR/Pc4WIBmzSpgUA=)
                          2: UyUBnyibFe_Vs5gV4yYGoAGp_6k.roa (hash: FpCGN1QIWvHmXIOEQKHWU4qi8Wyi8QSUo83QDYmvpxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:79:2a:76:6b:f5:7d:87:e8:40:40:e5:c2:37:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Nov 22 20:00:47 2024 GMT
            Not After : Nov 23 20:00:47 2024 GMT
        Subject: CN=55002508a9329c90553189fb2b4d77270dce404e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:64:98:81:4b:2b:e3:ba:8b:fb:cf:6e:89:
                    1b:32:a2:7d:4f:c1:71:d4:c7:8b:4e:7d:59:74:25:
                    e9:c0:14:83:a4:0e:72:f3:17:ba:c2:c1:7b:6b:a0:
                    8f:0a:11:6d:ce:1c:9a:f1:5e:41:19:fd:88:53:1a:
                    56:e5:60:ee:11:58:1b:e6:05:7e:a9:33:9f:9b:55:
                    26:42:a3:04:c3:d4:41:57:e3:9c:db:c1:61:c3:52:
                    d6:3f:b2:bd:e4:c9:50:ba:d6:f6:94:16:b7:d2:b4:
                    56:ce:24:fe:69:1e:27:ef:c4:81:ad:e1:38:e7:3a:
                    9f:bb:d6:ad:ce:3d:6c:35:5a:02:3e:fa:5e:0e:97:
                    fc:30:9c:4c:c1:a7:b2:ae:86:8d:ba:ff:3e:b5:1e:
                    11:cb:48:6e:c0:70:f2:a0:1a:5a:0a:5b:ec:ed:de:
                    09:06:9f:fd:49:ab:86:1c:6f:da:b8:c2:84:7c:e8:
                    4e:bf:22:a4:d2:ea:48:49:11:09:c7:0e:60:6c:41:
                    1a:ac:e0:5f:0c:e5:74:37:33:2a:f3:12:00:73:1d:
                    53:22:cf:5d:a8:15:ce:cd:3a:26:68:16:52:fb:8d:
                    56:cc:6d:be:82:c8:d5:c1:d5:35:1e:1c:11:e1:d2:
                    52:5d:7c:d4:36:ef:50:8f:22:61:d4:69:bf:3f:0e:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:25:08:A9:32:9C:90:55:31:89:FB:2B:4D:77:27:0D:CE:40:4E
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:79:30:d0:07:4b:ac:42:1c:e7:6a:13:6c:47:f9:a5:b4:69:
         f9:52:7b:11:64:00:b7:69:90:e9:25:dc:35:42:91:b5:f4:b2:
         58:69:b2:85:ab:c5:3a:c6:77:99:06:5d:c8:f8:ca:3c:50:93:
         dd:30:00:2f:87:b2:fd:e9:a3:3e:0f:53:49:da:f9:9d:52:ce:
         36:71:a4:7e:7c:a6:0e:fd:8b:45:43:63:7e:b2:fa:a8:c4:76:
         2f:38:9d:23:e7:47:e8:01:73:30:3d:49:13:26:ab:c5:36:10:
         47:60:c5:35:d3:b9:46:7a:3f:d8:c4:67:41:13:9b:ec:4c:f8:
         90:87:b8:72:42:63:d1:60:21:aa:5f:e2:80:dd:44:4d:dd:9f:
         f8:8b:39:b8:a8:dd:9e:80:f0:05:42:3c:5b:b4:1e:b9:5d:a7:
         68:a1:ca:60:a6:eb:6a:3b:9c:d0:59:1e:ea:db:b0:3e:b1:a3:
         c0:46:64:97:a2:a0:cd:39:32:52:bc:2f:a7:c1:da:c8:0d:bf:
         48:c5:24:d4:a6:87:df:4e:00:49:54:f6:a3:5b:ba:39:68:6e:
         a6:15:1e:f7:0e:df:3b:ca:b7:83:08:0e:72:45:c3:f8:42:95:
         40:d8:80:3c:45:d5:e2:3f:1d:9d:d9:e5:fb:a9:50:5d:2b:18:
         60:49:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:25 2024 by rpki-client on console-fra.rpki-client.org