Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File:                     nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier:          p6q4LKMXQ6XFnHRcsRyMJbQYyY48XmPdzJS7w1FbL2c=
Subject key identifier:   B7:90:1A:27:3B:55:F9:1C:9F:E0:07:5D:3D:A7:F1:AA:5E:22:BA:63
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer:       /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial:       0193579B7BA1441E37306FE06896D246CF87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number:          0C75
Signing time:             Sat 23 Nov 2024 06:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:27 +0000
Files and hashes:         1: 4Oz2bzKcj7ryJx-Yi4XIbgTA_p4.roa (hash: LPk0Z2clPAQSP3iw+RzHo229JXs0OZzzD9noiBRedv4=)
                          2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: NX9c4yFnve3LRFbOHJ5CWx4wPeorRwkLeqRV9uvnrGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:7b:a1:44:1e:37:30:6f:e0:68:96:d2:46:cf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
        Validity
            Not Before: Nov 23 06:00:27 2024 GMT
            Not After : Nov 24 06:00:27 2024 GMT
        Subject: CN=b7901a273b55f91c9fe0075d3da7f1aa5e22ba63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:8e:ce:e9:04:39:11:95:57:92:6f:52:ae:
                    c7:4e:39:0b:81:a0:8d:40:91:c4:15:60:0b:b7:b0:
                    8a:09:dd:a5:d6:6c:c2:2f:c5:1a:d9:08:56:14:06:
                    c8:6c:d5:6a:80:79:dc:a5:ca:2b:51:14:f3:f0:01:
                    70:c6:25:e2:13:be:5e:f4:fa:08:46:7b:79:e9:3e:
                    1f:ba:5d:5e:fe:96:20:13:32:23:f5:4e:d8:b9:75:
                    f5:fd:f1:b7:be:1f:6d:6c:eb:d9:28:b0:bf:9d:f1:
                    9e:e4:87:95:c9:cf:fd:8a:e4:d4:aa:fb:bd:52:ea:
                    8f:25:9d:e5:38:ba:f1:e8:97:ca:3b:a3:8f:a2:c5:
                    b9:09:0a:13:61:86:91:6f:39:84:c9:16:2e:13:7c:
                    f4:94:df:e5:9e:e3:4f:b1:77:71:31:11:8d:ce:e2:
                    2f:d7:7f:2b:15:f0:6e:24:40:c3:b4:37:85:68:39:
                    fa:d0:e3:60:de:63:a2:4a:6d:ee:8d:5e:fa:53:98:
                    89:6f:51:28:ac:2e:12:47:c0:a0:7f:f4:d7:7a:a2:
                    ab:73:a9:c3:e0:53:0e:3c:eb:6c:3c:05:57:51:de:
                    4a:4f:6e:8c:9b:ad:b4:d4:54:5f:6f:2f:8c:35:14:
                    cd:00:64:94:9b:5a:4a:bf:ae:d0:ce:eb:98:b2:ab:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:90:1A:27:3B:55:F9:1C:9F:E0:07:5D:3D:A7:F1:AA:5E:22:BA:63
            X509v3 Authority Key Identifier:
                keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:42:09:8a:8f:6b:03:9e:47:e0:bd:8c:3d:b9:9c:36:27:4e:
         0f:6e:a6:b2:e2:03:54:41:69:61:6e:45:c1:76:7a:11:2e:9a:
         cf:95:68:ac:2d:75:23:77:f6:0f:5b:93:8a:26:d4:72:9b:e1:
         78:93:64:8e:c1:79:3d:bb:b0:a5:12:fc:38:1a:72:28:13:1a:
         83:be:0c:aa:6b:0c:5d:eb:d0:b7:a2:8e:7d:19:d7:48:c1:fa:
         cc:04:7b:57:2d:da:ff:e6:2b:43:7a:50:29:69:3f:b7:ec:d7:
         0c:ac:4f:63:3b:36:8c:93:4f:67:ee:c5:31:53:c9:e8:7b:a1:
         29:56:a8:ef:3a:2a:ec:8b:88:d3:14:70:f4:0c:b7:5e:33:cd:
         29:69:e6:27:27:4a:48:da:e5:90:74:f2:28:21:f9:e5:df:83:
         4d:78:e0:b4:6c:ae:7c:4d:45:85:91:40:3c:48:0b:7e:0c:e6:
         b4:18:05:55:08:3b:42:6c:6c:a0:66:9c:06:43:cb:3f:8b:b5:
         8d:b9:6e:01:ff:45:d3:11:1d:ea:2e:df:82:95:7a:7b:a5:f8:
         e7:19:18:87:8e:8f:e1:1b:0c:62:74:f3:c6:35:96:6d:77:65:
         fa:76:49:8c:d0:0f:82:c8:47:99:a0:95:73:f7:73:3f:87:34:
         8b:9d:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:53 2024 by rpki-client on console-fra.rpki-client.org