Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File:                     nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier:          4tPwJzyRCpPZm4mB2oe2p+QMCXo6ua2m5MzJRgEvLG0=
Subject key identifier:   06:2F:7C:BB:FA:1C:50:55:F6:83:AD:90:01:CB:10:F6:B9:C2:62:8F
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer:       /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial:       0193568A0D84FADCE6731EEC7E65831EFA69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number:          0C
Signing time:             Sat 23 Nov 2024 01:01:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:48 +0000
Files and hashes:         1: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: 1BXotJj9ihIfO8tmt1EyXV1gCuUq3wF0HdVhsVyire0=)
                          2: sLQ_XES23byYFxDEEzIvLlNFiio.roa (hash: RgXc8vNCDlJL1HbpABcof74pfCOl/f3szTGz4Z3Q1vY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0d:84:fa:dc:e6:73:1e:ec:7e:65:83:1e:fa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
        Validity
            Not Before: Nov 23 01:01:48 2024 GMT
            Not After : Nov 24 01:01:48 2024 GMT
        Subject: CN=062f7cbbfa1c5055f683ad9001cb10f6b9c2628f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:0a:b6:27:5a:cf:45:63:10:53:1c:58:ab:
                    64:b7:65:81:35:b5:34:8a:72:7f:ab:0f:60:76:74:
                    13:cc:08:db:7d:44:eb:10:aa:7e:f9:18:55:8b:29:
                    65:74:89:52:2f:ae:40:98:92:20:d8:9c:70:45:c4:
                    7c:1c:72:72:36:ce:92:ea:3d:19:3d:31:81:cf:b4:
                    0f:91:d8:24:21:58:a4:b8:d7:ce:30:42:6a:c9:b8:
                    3e:63:5c:49:90:e6:41:9a:79:d0:48:d2:78:35:83:
                    45:97:a7:d9:8d:3f:61:77:6f:db:28:a3:5b:f0:2b:
                    92:36:2b:78:9d:84:7a:1d:59:6f:f5:2f:ab:17:ab:
                    a4:a7:fd:ab:29:24:5a:0e:f4:3f:8f:b2:ba:fa:15:
                    17:b2:eb:19:1b:10:a1:6a:2d:90:5a:a0:61:73:54:
                    0b:a3:9c:87:e9:09:7a:0f:53:e3:37:71:b7:21:09:
                    57:e8:17:08:46:86:bc:dd:ca:2c:59:63:cd:f8:9f:
                    7a:5d:2f:a2:b3:eb:38:fb:af:e8:d5:bc:91:62:92:
                    d1:26:15:12:ef:66:f9:ff:d3:88:56:a5:74:4d:40:
                    81:2f:a6:2a:eb:ee:7a:ac:eb:72:88:ba:6b:88:87:
                    1f:31:aa:92:12:93:c1:12:ff:eb:da:79:be:0a:bf:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2F:7C:BB:FA:1C:50:55:F6:83:AD:90:01:CB:10:F6:B9:C2:62:8F
            X509v3 Authority Key Identifier:
                keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:ed:99:cc:1b:6f:88:74:7d:54:e9:02:5c:73:f5:d4:97:
         64:43:07:18:13:a5:bf:7f:91:a8:16:40:bf:2d:0f:f8:dd:25:
         99:c2:05:96:b2:37:93:d6:26:d4:12:6a:1f:46:8f:fd:14:4f:
         18:57:11:45:5c:58:f3:c6:1e:32:67:1c:a8:07:5b:b4:47:ee:
         92:4c:83:34:26:39:00:f6:3b:d3:23:49:e6:5c:e0:2b:c1:41:
         f3:9a:10:a8:86:10:5f:98:ec:27:3c:6d:95:c4:2e:53:65:af:
         1b:8f:8b:5d:95:fe:2e:8e:08:e8:61:d2:fa:60:32:0e:45:aa:
         03:08:fa:8b:f2:0d:25:b5:f3:7e:6d:60:8b:8c:71:f8:f4:46:
         0f:57:c6:9e:26:75:a2:b6:51:75:26:fd:32:9c:cd:58:82:b2:
         5b:a5:53:27:f0:18:a5:84:31:d6:07:f0:fb:f4:4d:bc:6a:42:
         3e:f6:44:00:68:f4:82:dc:98:79:50:59:b9:ba:b6:d3:57:57:
         94:c3:72:e8:23:e4:d3:18:e3:bb:3c:d1:9d:d7:19:d2:01:0f:
         1a:90:72:7f:cc:0f:0a:17:7d:8c:45:cc:fe:b6:fe:ba:9e:ce:
         67:ba:01:a2:20:7a:86:42:30:e3:f9:bc:9b:08:de:ac:c9:05:
         bf:70:0e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:24 2024 by rpki-client on console-fra.rpki-client.org