Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File:                     NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier:          0epUKEar+tb+2Il6e5c2iTL5sKwg0fRH26V9KLjso30=
Subject key identifier:   B6:D8:58:F4:CC:04:E1:E8:99:76:13:5D:ED:55:39:6B:FE:91:0D:0E
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer:       /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial:       019357D23A1DCC404BED129DFF06E50F7885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number:          032F
Signing time:             Sat 23 Nov 2024 07:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:15 +0000
Files and hashes:         1: LF1xLwuHMm2giTo-0D9bSAQNKt4.roa (hash: g+X3JqiPNjDCxJupPxbJnybOpy9wkqQD6/uLbOSV32M=)
                          2: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: zX0+9hJTnXVOhcpmN4AXV9T542hID87htholt3gyM2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:3a:1d:cc:40:4b:ed:12:9d:ff:06:e5:0f:78:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
        Validity
            Not Before: Nov 23 07:00:15 2024 GMT
            Not After : Nov 24 07:00:15 2024 GMT
        Subject: CN=b6d858f4cc04e1e89976135ded55396bfe910d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:63:bb:b0:3c:c3:a6:67:aa:40:60:40:54:
                    b2:54:97:a4:61:06:a9:a1:db:b7:3d:e3:1a:2f:79:
                    8a:7e:71:4a:8c:34:6c:0f:36:41:73:90:0a:00:43:
                    09:52:d9:30:76:cf:54:44:cd:4a:c5:df:75:e6:b7:
                    06:45:19:9d:31:6b:76:54:8a:0c:82:e4:3f:99:76:
                    4b:ac:ce:ef:a1:e7:9d:c6:16:31:28:e6:88:3b:88:
                    eb:03:fb:87:f7:92:7d:00:aa:09:1f:00:14:9d:8a:
                    ea:fa:ce:f9:56:3e:e1:89:65:9f:5f:48:e3:f5:bb:
                    8c:93:d6:2b:90:b0:8b:b2:0f:e4:d8:05:4b:47:fa:
                    d6:12:e8:bd:5a:c0:02:8c:a5:1c:69:19:81:b0:9e:
                    57:31:85:9a:7a:28:3f:ee:08:4f:69:c6:00:67:13:
                    65:33:87:f7:58:52:fd:36:a5:cf:9d:31:4f:64:80:
                    09:0f:1d:b7:52:e9:7f:d4:2b:a5:5d:c5:c9:60:81:
                    2a:a3:cf:9e:c2:fc:f9:e6:9f:fe:8b:94:c8:f7:dc:
                    1f:19:fc:15:bc:d6:83:72:1e:26:36:f9:29:c3:08:
                    de:22:dd:d3:9b:f1:db:5c:63:1a:84:ee:21:ab:62:
                    c1:67:8e:33:ee:db:a0:81:0b:d8:ce:33:ab:f7:a8:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:58:F4:CC:04:E1:E8:99:76:13:5D:ED:55:39:6B:FE:91:0D:0E
            X509v3 Authority Key Identifier:
                keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:b7:19:2c:a2:b1:93:a6:d7:7b:0b:57:bd:ad:1f:18:99:
         48:6e:91:a4:45:6b:df:ac:8c:f8:2b:bc:9d:0f:f2:f1:e7:43:
         1f:76:8c:ba:b1:98:76:75:4e:7c:7e:dc:73:42:53:ba:7c:b2:
         54:78:c5:af:5f:3f:d5:3b:c1:13:be:d3:6b:84:8c:f7:d9:6f:
         96:2d:c3:48:cd:7b:2f:53:ab:79:1f:a4:ae:71:39:a6:11:d6:
         cb:9d:12:54:74:e9:bf:c1:22:6a:50:c0:9a:12:a5:1a:38:9e:
         51:44:e3:b5:5f:c3:c2:7b:88:1e:43:27:de:59:f6:2c:ed:fd:
         3d:21:db:d9:90:da:d2:af:11:8b:c2:b2:5c:b4:1b:48:5a:bf:
         6d:1a:57:38:18:d5:f3:54:7d:e9:1c:25:8a:c9:34:3b:78:5a:
         a9:a4:93:67:a0:c5:f8:40:2d:fd:12:3e:fe:f6:a3:6b:08:1b:
         9e:c0:24:db:01:b1:0b:a0:f7:17:09:14:11:50:d6:49:46:03:
         80:58:d6:1b:29:e2:2a:78:3d:f2:c9:7d:e2:94:4f:46:e4:93:
         94:1f:85:5d:7b:c3:e8:c9:d5:0f:93:63:a2:34:a0:26:a1:95:
         eb:e0:aa:53:5b:91:5c:db:6a:56:42:69:10:0f:e4:b9:31:ae:
         e8:0e:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:38 2024 by rpki-client on console-fra.rpki-client.org