Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File:                     n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier:          n7t8NrfVwL9ZAQ3D671lxjey9ndLmI4TZAgLRZE7nSI=
Subject key identifier:   29:AE:F8:03:7C:7A:86:FA:49:1D:4D:22:36:00:A9:E6:75:92:66:00
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer:       /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial:       0193549B1464AB02D7976314D6ADE54555B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number:          077D
Signing time:             Fri 22 Nov 2024 16:01:09 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:09 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:09 +0000
Files and hashes:         1: CqPoSsRfKHuaSkc1Ipwx70oyPjQ.roa (hash: Fd60Rz6v5GUJGOyXU0KvbPsDq6bUqOrf7sXfcUSIOJ4=)
                          2: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: j1pjZa+VwhgcoHbMA1NBrNxWNn4goxUvT028+kStSNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:14:64:ab:02:d7:97:63:14:d6:ad:e5:45:55:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
        Validity
            Not Before: Nov 22 16:01:09 2024 GMT
            Not After : Nov 23 16:01:09 2024 GMT
        Subject: CN=29aef8037c7a86fa491d4d223600a9e675926600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:a0:5b:a1:b9:cc:a0:b7:22:0e:6a:d8:3d:
                    4b:e9:fb:32:d6:5e:47:fe:fa:01:46:5b:7d:f3:17:
                    14:b9:66:5a:f2:00:f1:e1:43:b3:6c:15:27:24:4b:
                    6e:e7:30:6e:48:69:5e:88:dc:97:8d:e8:55:49:95:
                    26:8a:a9:a1:fb:e3:42:83:13:70:2b:e9:be:23:66:
                    e3:b2:09:a5:dd:b9:e4:4d:d7:7d:4a:fc:b6:52:3d:
                    b4:a8:d4:1a:e0:8c:5f:c1:7a:e7:77:4c:57:0f:e7:
                    37:3f:a2:fa:04:5a:bb:b1:a9:d3:37:a2:c6:75:63:
                    3c:97:8f:2b:1c:ff:79:d8:a6:1c:dd:22:7c:12:af:
                    e6:f5:33:9c:b2:cb:bb:7f:d0:9f:ba:e7:50:4b:8c:
                    89:5b:1d:21:fd:52:c0:ce:70:6c:df:be:68:61:83:
                    e1:50:1e:ac:a8:5c:25:5e:6d:04:87:d1:14:74:ff:
                    31:6d:4f:29:15:e0:f1:f8:f8:ed:89:18:ec:46:f8:
                    5c:de:d1:57:2e:98:21:cb:76:08:c9:a1:f4:63:b8:
                    74:96:3e:f9:d9:64:79:ee:b8:50:f0:fa:56:db:61:
                    80:25:84:6f:b0:08:fd:a2:5c:63:9f:5b:97:cf:32:
                    0a:e1:a9:9a:28:60:87:cb:05:81:2f:fc:60:ce:0c:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:F8:03:7C:7A:86:FA:49:1D:4D:22:36:00:A9:E6:75:92:66:00
            X509v3 Authority Key Identifier:
                keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:b2:ff:fa:8c:9e:dd:11:2d:b2:79:0a:c2:3a:fb:32:76:
         02:04:11:81:aa:19:af:a8:09:1c:61:fa:66:39:20:47:18:09:
         89:04:8c:fc:19:1b:c6:be:6f:f5:63:1a:e9:90:ed:e0:4d:5b:
         65:5e:98:a3:00:4c:d7:29:c9:5f:6f:a3:a0:0a:81:92:70:ce:
         ff:a3:33:c1:c0:a5:38:c7:ef:36:0a:28:ee:46:74:d7:ed:7c:
         3d:61:3a:3d:cc:9e:4b:a2:72:38:b8:90:32:e5:5f:3e:51:e4:
         56:23:c5:ad:eb:92:4c:67:a6:a9:d4:0a:87:2b:67:3a:43:4f:
         4a:1e:35:17:d8:95:0a:1c:a6:52:29:86:f2:bd:6d:f8:0c:af:
         8f:3f:b1:61:ab:67:27:47:b6:19:5a:9c:45:b8:6a:23:62:e8:
         64:c5:49:c7:7e:ef:6c:a1:7e:48:d5:66:bb:13:b5:17:22:14:
         af:91:31:27:c1:a2:20:69:e9:d7:ba:b7:3a:12:ca:49:23:35:
         84:ca:77:f4:a9:5e:ec:d9:33:00:86:cc:89:aa:84:7f:2f:c6:
         33:ed:b3:c9:6d:93:c4:8c:42:8b:ef:28:41:74:8a:c9:aa:cf:
         d8:02:26:3c:b1:a4:b8:30:d6:6d:31:0e:fb:8c:93:2b:91:98:
         73:83:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:30 2024 by rpki-client on console-fra.rpki-client.org