Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File:                     nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier:          cfS+CHVDMIl+zIEdf0fQNMUIQtxQzF4VrAaZpOeFtPY=
Subject key identifier:   02:A1:52:42:69:FC:F9:00:2D:8D:FB:7E:05:59:0D:BD:7B:BF:58:03
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer:       /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial:       01936B22B776D039E8E5716D4903B0FCCE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number:          0D75
Signing time:             Wed 27 Nov 2024 01:00:57 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:57 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:57 +0000
Files and hashes:         1: 12V-ISoS_8heaKX5GVsktWG5jQU.roa (hash: x/j+2Uxnmul+iqExmOasaa5vyjxKzpPF3D0EwCnqqzw=)
                          2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 0/ELfwlWBpdQNEHHqPKoBfO8nZojHQZP6JuseQj5b8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b7:76:d0:39:e8:e5:71:6d:49:03:b0:fc:ce:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
        Validity
            Not Before: Nov 27 01:00:57 2024 GMT
            Not After : Nov 28 01:00:57 2024 GMT
        Subject: CN=02a1524269fcf9002d8dfb7e05590dbd7bbf5803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:3d:cc:84:00:af:0a:a0:da:74:06:bb:ae:
                    9d:b3:8a:8d:7c:41:96:7f:63:ee:7c:8d:e5:a3:54:
                    7d:2e:d4:de:fb:65:7e:75:31:ac:26:8d:66:fc:23:
                    f2:e6:18:03:fc:31:21:44:0b:ab:5a:a6:26:05:3a:
                    54:4e:c1:c0:63:cb:e5:c8:a6:58:cb:29:65:d6:bc:
                    1a:7b:ce:09:13:e2:04:2e:db:22:f9:77:76:34:0f:
                    0e:89:73:ae:96:1b:de:f4:11:78:38:f8:df:8e:56:
                    e9:89:1c:21:58:0e:d9:2f:98:aa:72:23:a9:e1:1f:
                    fe:0b:64:49:ef:36:4f:6a:59:e9:57:4b:7f:7d:d0:
                    7e:06:0b:c9:a6:eb:23:2f:0e:bc:63:67:b7:e7:b1:
                    06:49:a9:ad:93:3e:04:da:b4:2d:4e:9c:89:2b:7f:
                    3a:68:26:93:0b:3f:9b:65:54:f0:9a:3e:45:01:93:
                    d4:30:f0:f8:da:09:04:8a:a4:cd:45:a8:2e:03:d5:
                    0d:53:7d:72:9b:c8:71:08:ba:4a:89:b8:fc:61:9f:
                    9a:16:92:5c:ef:2a:26:b1:e4:87:90:f8:69:86:77:
                    0e:9e:3b:fc:59:a7:79:bc:48:a5:ca:3b:32:19:89:
                    c8:0c:7b:f5:83:e8:ba:5f:6b:96:33:69:5d:c1:36:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A1:52:42:69:FC:F9:00:2D:8D:FB:7E:05:59:0D:BD:7B:BF:58:03
            X509v3 Authority Key Identifier:
                keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:01:d2:4f:c2:5b:07:e6:ad:40:b0:a2:61:d4:be:a9:40:74:
         e9:ff:a2:f6:5f:3c:5f:9a:e8:c9:5d:62:39:ab:39:37:6c:8d:
         88:61:49:da:44:52:51:87:38:26:e5:c3:1e:ef:7a:68:73:22:
         1e:d4:00:15:33:39:23:8e:86:73:79:58:cd:15:91:0d:67:29:
         85:6e:a9:b0:1c:43:ec:51:e9:d1:3b:b3:b3:83:e7:d8:d8:61:
         6e:5a:ff:4e:9b:fd:25:f3:1a:bc:08:eb:a0:f3:3d:b2:b8:b6:
         7d:4e:48:6f:0f:a9:8f:65:6e:30:c8:9b:73:1a:f1:42:db:0c:
         f8:1b:7f:bc:e2:40:0d:1c:f0:04:76:17:bc:27:ab:b4:c0:77:
         4e:fc:3d:95:b0:23:03:c0:0f:6a:13:2c:55:a9:8d:44:cf:d5:
         93:83:11:ee:7f:ec:8f:80:f4:22:78:db:04:41:ff:1b:da:2c:
         56:ff:5a:64:e3:8d:d6:e3:48:77:4c:04:f8:2e:3a:29:38:ad:
         7f:bb:48:20:8d:68:b2:ea:aa:41:7f:0f:b0:85:91:fb:5d:c8:
         b6:98:37:60:29:90:be:cc:32:db:0c:36:55:34:69:11:98:0e:
         a6:f3:05:4b:5d:ff:fe:d6:6c:9b:b8:73:46:d3:f4:15:49:c9:
         ec:81:5e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIrd20Dno5XFtSQOw/M4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZmM2MmVjZGM5MWQxMTk3OWNjMWQyMWE0N2M2ZWMzNzhk
ZmE0MzYwHhcNMjQxMTI3MDEwMDU3WhcNMjQxMTI4MDEwMDU3WjAzMTEwLwYDVQQD
EygwMmExNTI0MjY5ZmNmOTAwMmQ4ZGZiN2UwNTU5MGRiZDdiYmY1ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyY9zIQArwqg2nQGu66ds4qNfEGW
f2PufI3lo1R9LtTe+2V+dTGsJo1m/CPy5hgD/DEhRAurWqYmBTpUTsHAY8vlyKZY
yyll1rwae84JE+IELtsi+Xd2NA8OiXOulhve9BF4OPjfjlbpiRwhWA7ZL5iqciOp
4R/+C2RJ7zZPalnpV0t/fdB+BgvJpusjLw68Y2e357EGSamtkz4E2rQtTpyJK386
aCaTCz+bZVTwmj5FAZPUMPD42gkEiqTNRaguA9UNU31ym8hxCLpKibj8YZ+aFpJc
7yomseSHkPhphncOnjv8Wad5vEilyjsyGYnIDHv1g+i6X2uWM2ldwTZgnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKhUkJp/PkALY37fgVZDb17v1gDMB8GA1UdIwQY
MBaAFJz8YuzckdEZecwdIaR8bsN436Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4Nzgt
MjE1NTEyNmIxNjQzLzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4NzgtMjE1NTEyNmIxNjQz
LzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgHST8Jb
B+atQLCiYdS+qUB06f+i9l88X5royV1iOas5N2yNiGFJ2kRSUYc4JuXDHu96aHMi
HtQAFTM5I46Gc3lYzRWRDWcphW6psBxD7FHp0Tuzs4Pn2Nhhblr/Tpv9JfMavAjr
oPM9sri2fU5Ibw+pj2VuMMibcxrxQtsM+Bt/vOJADRzwBHYXvCertMB3Tvw9lbAj
A8APahMsVamNRM/Vk4MR7n/sj4D0InjbBEH/G9osVv9aZOON1uNId0wE+C46KTit
f7tIII1osuqqQX8PsIWR+13Itpg3YCmQvswy2ww2VTRpEZgOpvMFS13//tZsm7hz
RtP0FUnJ7IFexA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:34:40 2024 by rpki-client on console-ams.rpki-client.org