Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File:                     nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier:          l3Kn5AqAGG07oTP88maF0xPYbnKNKX3s2x0Po0Ezj5I=
Subject key identifier:   10:CC:D9:8A:26:9A:CB:A2:D7:36:CB:C0:85:20:C7:A1:45:EA:53:D1
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer:       /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial:       019369DAC433105C692355A15B67A2BF77E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number:          0C29
Signing time:             Tue 26 Nov 2024 19:02:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:44 +0000
Files and hashes:         1: KRo1xXsHejqb_b2yKlfn5DPEJ6A.roa (hash: HdLsLHRbw24kWJjx2Dv94UeehnQ5pnK8Ui9lxc1swbI=)
                          2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: QAHzVR7/IrvNM6CAhPpO2+5b1i06yHMzqVXii73Jpfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c4:33:10:5c:69:23:55:a1:5b:67:a2:bf:77:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
        Validity
            Not Before: Nov 26 19:02:44 2024 GMT
            Not After : Nov 27 19:02:44 2024 GMT
        Subject: CN=10ccd98a269acba2d736cbc08520c7a145ea53d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:4a:7e:f9:0b:26:93:88:52:38:65:b3:2a:
                    35:2e:a4:f7:30:bf:e1:35:4f:8f:64:e6:fd:0a:a8:
                    14:c2:88:5a:ca:ca:32:eb:38:1a:75:89:28:1e:12:
                    7b:ef:57:b8:c4:23:1f:18:37:44:a2:20:92:2e:84:
                    3a:b9:6a:e9:87:77:10:a3:50:fe:d0:3a:09:7e:31:
                    41:c4:49:c9:94:5c:96:7f:0b:31:64:df:97:a7:09:
                    46:b9:77:87:c0:b0:6c:3a:4a:74:76:6b:12:48:ab:
                    9c:cb:5d:94:80:25:02:50:53:f6:d3:c4:3b:e4:39:
                    d3:6d:07:7d:f5:28:29:d1:05:0b:ed:8c:f8:d1:8f:
                    cc:f7:49:d2:05:cb:57:86:e9:7e:1a:95:ce:8c:13:
                    c7:8a:b9:72:75:f9:ac:fa:f5:19:9e:01:58:d1:c4:
                    59:3b:50:83:85:4d:29:b2:cb:99:bf:a7:e3:80:2a:
                    c2:9d:d2:28:12:6b:ba:07:57:31:68:ab:63:9d:b7:
                    ea:78:7d:75:86:a9:16:8b:a2:56:a7:a0:84:2c:f1:
                    05:27:3b:41:6d:03:ea:8c:93:60:09:78:ab:80:22:
                    d0:b3:9e:f8:fa:74:5b:86:fa:e1:b2:80:2c:e9:bd:
                    5e:9a:fb:78:22:19:9b:9d:c1:07:2b:11:52:08:0d:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:D9:8A:26:9A:CB:A2:D7:36:CB:C0:85:20:C7:A1:45:EA:53:D1
            X509v3 Authority Key Identifier:
                keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c7:97:0b:43:75:6a:30:14:92:14:10:06:e2:61:12:dc:5f:
         fa:a0:c5:41:c8:ef:12:e5:a4:02:ed:13:fd:ae:26:86:c4:4b:
         62:2a:9c:32:88:48:e2:7b:6c:21:70:fc:2a:d3:d8:e1:bb:a0:
         f5:2a:ab:3b:7f:87:c9:1e:83:07:58:23:4b:68:bd:a6:79:86:
         52:90:48:fd:88:75:3a:91:8a:6f:7f:75:7a:7b:3a:21:1c:93:
         87:20:a0:58:9a:aa:1d:b7:73:f1:49:8b:6f:04:ce:ac:7f:3b:
         86:8c:80:aa:5b:25:fc:09:ac:9f:fb:e5:4f:41:d9:d0:92:97:
         4f:06:1a:6e:04:52:5a:37:01:5b:fa:5d:72:b2:16:a6:ac:5c:
         b3:45:90:da:98:66:0c:5a:d6:0c:70:77:56:90:aa:4c:d2:ca:
         a5:52:33:28:45:ed:74:6c:50:01:45:c5:2a:4f:ad:9c:87:46:
         a0:31:43:b2:49:18:05:54:f4:45:92:1f:16:70:2f:3a:f3:ac:
         53:72:11:a5:bf:25:87:f4:c2:31:45:8e:09:ad:c8:66:2d:29:
         f3:39:14:5e:27:9e:f0:e8:df:7a:ca:39:3c:29:43:34:92:80:
         71:2f:95:89:bf:84:12:d1:b3:18:f8:cb:cf:a2:71:16:d5:b1:
         2c:8c:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:12 2024 by rpki-client on console-ams.rpki-client.org