Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File:                     nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier:          GlcQDAxqcRHs3ENnRNXOgx3bYh4IG35S+y/6cFOP/QU=
Subject key identifier:   A6:56:B8:68:45:56:74:D5:BA:23:5F:CE:4B:AA:03:96:1E:41:28:31
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer:       /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial:       019367EC2A43CE7AE95623518E34EFF169E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 10:02:30 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:30 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:30 +0000
Files and hashes:         1: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: Z4y3zBub6U5tCDaBrOLk6u0nNc2Ys1CH6cCDPPkF+Jc=)
                          2: noOFGAvQjgCp9EdhWzUnNOHOKiE.roa (hash: V2qDfHN4Eknc67zPWHDK//lcJi8ziSuM9sXcupGs1AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:2a:43:ce:7a:e9:56:23:51:8e:34:ef:f1:69:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
        Validity
            Not Before: Nov 26 10:02:30 2024 GMT
            Not After : Nov 27 10:02:30 2024 GMT
        Subject: CN=a656b868455674d5ba235fce4baa03961e412831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:44:85:02:38:ab:e4:f5:ad:0a:20:42:b4:
                    80:2e:98:a8:92:40:c4:d6:e9:1c:43:9b:9b:41:4d:
                    3d:b0:0e:f6:28:f2:11:f8:a0:2e:f3:aa:95:32:6b:
                    b5:6f:fa:90:9d:3a:91:7f:2c:2a:b0:f2:52:2e:a0:
                    6b:fb:72:f3:72:be:61:c8:ab:df:5a:c1:82:17:9a:
                    1a:dc:03:99:ee:6e:db:ab:3d:be:7a:1e:9d:99:f2:
                    78:b0:fc:ff:91:26:5c:12:60:dd:e4:44:48:8c:90:
                    b8:20:e4:fd:68:f6:4a:82:c7:b2:d4:fb:ed:98:e3:
                    aa:45:64:c7:28:d5:c0:e8:95:6c:35:14:05:a5:ec:
                    d4:b9:a8:63:2e:ac:18:b4:83:40:47:bf:c3:be:8b:
                    37:e0:0f:39:a0:ec:d6:96:7e:87:a0:bb:b0:cf:ab:
                    4a:17:2b:0d:0d:7c:c6:56:c6:23:0d:1e:d8:14:91:
                    fb:e1:8f:d4:3a:ab:b4:2d:cc:06:e8:cc:56:13:49:
                    c4:bf:cc:60:80:0e:f4:e5:22:aa:e7:89:66:d5:88:
                    ec:aa:09:7b:8d:cc:7e:34:b7:94:bc:5f:a1:0c:e8:
                    13:f5:2a:67:6b:d9:b6:1b:06:91:44:18:67:55:5f:
                    c8:22:cb:cd:f2:e1:dc:be:b7:dc:6b:e7:ac:52:ea:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:B8:68:45:56:74:D5:BA:23:5F:CE:4B:AA:03:96:1E:41:28:31
            X509v3 Authority Key Identifier:
                keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:47:61:a0:f7:5e:61:f6:21:7c:38:2e:f6:7d:8b:24:a0:
         27:15:04:ac:5a:b9:ef:9f:07:09:75:a5:f1:06:18:7e:bb:28:
         c9:33:a6:41:7e:05:ea:38:0d:82:71:cf:88:ef:a8:20:77:07:
         6a:7a:1f:9d:64:9f:4f:c8:c7:fe:c1:6c:19:5c:51:6b:25:43:
         33:7e:54:69:a8:2c:83:97:c9:11:ec:cb:60:ec:44:48:5e:7c:
         e5:e5:25:8b:dc:92:8c:d6:95:85:4c:34:ee:66:39:16:43:7a:
         1f:52:f9:9b:0c:8c:23:20:52:56:35:e0:86:06:2d:9a:c8:15:
         0c:4e:53:46:dc:c5:d6:04:0a:1e:0a:da:e7:17:c0:51:87:df:
         0f:b2:46:77:13:c2:ac:02:a4:44:7d:b8:23:0e:48:86:84:ec:
         eb:09:62:00:8c:c7:9d:d4:0b:53:0c:50:8d:03:67:2c:4e:e6:
         e1:e8:e0:58:ab:bf:c8:44:df:fe:d1:db:d4:ea:d0:66:a8:ce:
         20:5a:98:ab:3a:af:58:fd:63:59:9d:b0:c5:82:b4:19:2a:6f:
         75:28:e5:03:2d:95:0d:f3:0d:4b:02:d1:67:24:90:fb:ec:e8:
         fb:4f:75:44:6e:80:6e:d3:c3:74:02:02:cb:b9:a0:29:0b:44:
         fc:43:d1:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn7CpDznrpViNRjjTv8WnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllN2ZhNGQ3MWZmNjFkZGQ3NTJhNTZlNWU5Y2EzMTY5N2E5
NTJiMzQwHhcNMjQxMTI2MTAwMjMwWhcNMjQxMTI3MTAwMjMwWjAzMTEwLwYDVQQD
EyhhNjU2Yjg2ODQ1NTY3NGQ1YmEyMzVmY2U0YmFhMDM5NjFlNDEyODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofZEhQI4q+T1rQogQrSALpiokkDE
1ukcQ5ubQU09sA72KPIR+KAu86qVMmu1b/qQnTqRfywqsPJSLqBr+3Lzcr5hyKvf
WsGCF5oa3AOZ7m7bqz2+eh6dmfJ4sPz/kSZcEmDd5ERIjJC4IOT9aPZKgsey1Pvt
mOOqRWTHKNXA6JVsNRQFpezUuahjLqwYtINAR7/Dvos34A85oOzWln6HoLuwz6tK
FysNDXzGVsYjDR7YFJH74Y/UOqu0LcwG6MxWE0nEv8xggA705SKq54lm1Yjsqgl7
jcx+NLeUvF+hDOgT9Spna9m2GwaRRBhnVV/IIsvN8uHcvrfca+esUurjOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZWuGhFVnTVuiNfzkuqA5YeQSgxMB8GA1UdIwQY
MBaAFJ5/pNcf9h3ddSpW5enKMWl6lSs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQt
MThlMzZiZGRjMjFjLzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQtMThlMzZiZGRjMjFj
LzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLdHYaD3
XmH2IXw4LvZ9iySgJxUErFq5758HCXWl8QYYfrsoyTOmQX4F6jgNgnHPiO+oIHcH
anofnWSfT8jH/sFsGVxRayVDM35Uaagsg5fJEezLYOxESF585eUli9ySjNaVhUw0
7mY5FkN6H1L5mwyMIyBSVjXghgYtmsgVDE5TRtzF1gQKHgra5xfAUYffD7JGdxPC
rAKkRH24Iw5IhoTs6wliAIzHndQLUwxQjQNnLE7m4ejgWKu/yETf/tHb1OrQZqjO
IFqYqzqvWP1jWZ2wxYK0GSpvdSjlAy2VDfMNSwLRZySQ++zo+091RG6AbtPDdAIC
y7mgKQtE/EPRzw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:31 2024 by rpki-client on console-ams.rpki-client.org