Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File:                     nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier:          xJlIDswp3uu1QkFb6ObhMtRL/GzhO5hjUOY3zjM6z+w=
Subject key identifier:   B6:E5:BA:DD:A4:5F:8B:C1:B9:D4:5F:16:DE:F0:42:37:FA:8D:1E:CC
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer:       /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial:       019356899301491437573F6A46E654935FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:16 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:16 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:16 +0000
Files and hashes:         1: mxli_m-Z8XYc0U1D8BPUdOB3au4.roa (hash: bVmYC04Aa44GtGL5MErW2NcK0TccOTAShaONSwrwZJ0=)
                          2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: od4O+8BwH0IyyDqgE/n9LG/BzRToHzJmPjABUKz5dI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:93:01:49:14:37:57:3f:6a:46:e6:54:93:5f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
        Validity
            Not Before: Nov 23 01:01:16 2024 GMT
            Not After : Nov 24 01:01:16 2024 GMT
        Subject: CN=b6e5badda45f8bc1b9d45f16def04237fa8d1ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:18:34:6a:4b:77:e0:30:0b:5c:13:e3:0e:
                    e1:c9:7d:e4:d5:97:91:07:62:7a:31:40:8e:48:58:
                    9a:b1:52:29:12:5c:cb:be:57:d2:17:1c:2f:db:1f:
                    25:50:63:55:0b:9f:53:e1:df:19:58:03:df:e5:dc:
                    a6:c2:8b:8e:24:a7:8e:81:60:0f:4c:d7:81:e3:da:
                    aa:bb:af:a0:43:e0:3f:86:18:90:7b:3c:e2:6e:d3:
                    7a:be:12:f1:df:82:79:66:35:df:57:23:a1:9d:6a:
                    89:d2:6a:23:7f:82:7e:be:c3:ca:37:7f:ed:60:60:
                    42:8e:a3:aa:9c:99:69:b0:48:dd:a7:1d:92:34:49:
                    9b:3a:ce:57:c3:52:b0:ac:27:d4:83:14:45:72:d9:
                    b5:4b:88:07:01:a6:01:66:77:6f:4e:74:2c:bf:99:
                    50:b8:35:09:ee:fc:0f:f8:d3:a7:7d:eb:15:da:6d:
                    bc:7d:4f:75:25:92:32:9a:86:7b:40:cb:ca:1a:b3:
                    1a:fe:05:87:90:73:85:0a:54:d1:10:44:a8:19:4f:
                    d7:0f:ae:db:06:81:cc:72:7b:73:c7:1e:ed:4f:29:
                    be:18:dc:9f:fb:bb:4b:07:17:f8:99:cd:13:bb:6d:
                    43:b7:00:d8:54:79:83:44:b5:59:90:18:60:31:38:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E5:BA:DD:A4:5F:8B:C1:B9:D4:5F:16:DE:F0:42:37:FA:8D:1E:CC
            X509v3 Authority Key Identifier:
                keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:98:da:00:40:ae:a4:10:6a:a5:2b:c5:9d:e9:e1:1a:f2:14:
         54:07:4d:e8:6f:7d:35:2a:28:7d:45:48:3f:80:25:ba:24:3e:
         84:ea:bf:97:12:93:c1:cc:3d:36:c3:a4:91:da:c9:0d:24:75:
         ff:67:52:12:b9:63:cb:80:b7:b8:73:19:50:8c:13:43:d0:67:
         3f:be:d4:39:2e:64:27:62:f0:8b:7b:40:ca:51:c5:e3:b1:53:
         71:f8:97:09:96:58:ba:51:48:2f:bd:bd:17:15:bd:53:aa:2a:
         20:7a:db:7e:b2:11:2a:d5:cb:6c:91:9b:e6:d5:a0:07:a5:60:
         49:26:5c:22:6b:b2:1d:82:99:26:69:5f:2e:25:50:60:eb:bb:
         2e:60:ba:2a:4f:c9:87:82:76:54:90:4e:1e:48:c5:9c:51:c2:
         5a:ec:ba:e7:66:66:5f:7c:05:0e:e7:78:e3:43:9c:1e:65:b1:
         a4:fc:a8:66:37:60:b4:d9:33:2a:4f:0a:7a:8e:93:ff:97:05:
         8c:f4:0b:15:44:dd:aa:b8:54:da:22:cf:eb:0f:af:5e:8b:38:
         7b:5b:ba:cb:13:43:58:19:22:ee:29:b8:81:bd:26:7b:43:be:
         21:d4:c3:a4:26:70:8a:72:5c:d7:48:63:b3:24:ec:56:9b:7b:
         30:45:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:02 2024 by rpki-client on console-fra.rpki-client.org