Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File:                     nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier:          5o95z6tM9FzWK6/zkmlrJeFuCoX54D3SMnSvnb6PLxM=
Subject key identifier:   D2:DA:A1:6F:47:35:3A:41:70:26:28:F6:3B:69:DA:C6:C7:8B:44:50
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer:       /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial:       01938B5213E5DA7C799755784CDF343D9356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number:          13A9
Signing time:             Tue 03 Dec 2024 07:00:32 +0000
Manifest this update:     Tue 03 Dec 2024 07:00:32 +0000
Manifest next update:     Wed 04 Dec 2024 07:00:32 +0000
Files and hashes:         1: dfPalV_anGX3J7YlBX8ybdnhfDw.roa (hash: IUOOxKu7NIQindq0ds08D0kkHK5I1b/RWZ4XwI5F4sY=)
                          2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: UOrb31YfStqXqWHmNf9tTT7Bk6dluDwyI4letAE2xIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:52:13:e5:da:7c:79:97:55:78:4c:df:34:3d:93:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
        Validity
            Not Before: Dec  3 07:00:32 2024 GMT
            Not After : Dec  4 07:00:32 2024 GMT
        Subject: CN=d2daa16f47353a41702628f63b69dac6c78b4450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:2b:ff:5e:34:04:0f:b5:59:90:4f:67:f9:
                    3d:37:55:4a:c6:10:b8:91:34:cc:36:59:08:25:b4:
                    c9:3d:d9:54:5a:dd:27:c3:5d:03:b0:db:04:64:b9:
                    fb:77:e0:57:76:d2:9c:be:b9:bd:07:f4:28:fe:0f:
                    37:0c:db:d8:e4:22:ec:85:b1:82:b2:9d:23:66:e1:
                    4d:99:14:89:b1:a2:21:74:00:12:c7:d7:bc:2a:02:
                    e0:80:35:8e:96:65:b2:2b:f6:43:f0:56:54:c9:e6:
                    60:be:09:03:d6:cf:24:35:7d:5c:95:c8:62:bb:c7:
                    31:93:ac:bf:7b:59:35:33:00:fd:54:45:c9:95:3e:
                    a4:01:00:f4:6b:92:07:e5:0d:94:30:e9:b3:aa:6b:
                    1e:c4:16:81:27:bd:3c:03:88:ca:36:14:7f:48:69:
                    50:ed:87:9b:d9:cc:52:a3:33:d5:93:9a:80:36:6e:
                    6f:a3:26:19:11:8b:48:9c:2a:05:e1:f3:be:c1:a6:
                    e4:3b:bb:e4:9d:92:8a:52:0b:37:b1:58:76:7a:c1:
                    82:ba:4e:7d:7a:78:f0:a4:df:67:5f:a2:ab:f4:3f:
                    68:04:ac:8c:7c:2c:4b:83:66:1f:a9:1c:e9:ab:d2:
                    9a:9e:55:53:4a:92:b0:4d:f8:81:e0:86:df:d1:f9:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:A1:6F:47:35:3A:41:70:26:28:F6:3B:69:DA:C6:C7:8B:44:50
            X509v3 Authority Key Identifier:
                keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:ed:70:d9:46:7a:89:c6:f4:d8:24:cc:dd:94:67:86:87:
         03:e2:96:50:1a:14:51:52:89:58:85:76:03:c9:40:71:d0:14:
         7b:f8:95:5f:58:98:3b:9b:bf:b0:f3:8a:21:42:ce:f8:49:48:
         34:9d:0a:77:75:85:c6:97:c0:e3:ba:74:9a:c8:80:f2:90:8c:
         8d:2c:17:cc:4d:3c:34:d3:89:26:b2:1f:b2:ea:f7:b7:2b:9c:
         33:ed:53:dd:5d:2a:d8:3c:ed:a2:4a:f6:a7:20:e7:db:2a:21:
         f5:3e:8f:d3:9d:b2:72:8c:b2:84:1e:75:b3:fb:75:25:4b:30:
         97:c5:d5:dc:37:05:04:ef:63:fc:9b:05:7a:05:50:b8:44:6e:
         9e:f1:0f:44:f6:f4:2c:eb:d8:11:6b:37:ae:93:36:f6:de:17:
         9c:38:96:66:65:c8:3f:46:65:dd:67:c8:34:2f:b3:3f:2c:6a:
         6a:32:5b:cf:30:06:2f:b0:a4:26:ce:30:20:9b:4e:65:78:ce:
         b1:b6:04:ca:9a:fe:fa:6c:e1:96:bd:de:25:65:c0:bf:7e:1e:
         a1:70:49:ce:d2:39:ba:3a:81:4b:ef:24:ee:0a:3c:37:fe:d0:
         87:6c:ed:70:18:a7:05:54:f3:ae:91:5a:79:f0:dd:6a:92:bb:
         24:f7:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:39:52 2024 by rpki-client on console-ams.rpki-client.org