Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File:                     nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier:          JRd8lKED3ElaWwUyU4pUlD2GXPv3MGxq4wf761hnnQ4=
Subject key identifier:   57:7D:14:FE:FC:B6:08:62:9A:F7:35:C2:0A:C5:F0:30:2B:DD:D3:C9
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer:       /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial:       01935A677B2341379A06004D07DB52E25A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number:          10B4
Signing time:             Sat 23 Nov 2024 19:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:31 +0000
Files and hashes:         1: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: xlWV4DQ7uospi4B/iNCJD7SvPj8sXNvBLos6STUZy3M=)
                          2: rlmFc7ewYJYj76dOBtYBUnKpLLY.roa (hash: dofM/4e70ddHS6mpl7g+RuHvt/RQuUUD4bSsHWM/Fdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:7b:23:41:37:9a:06:00:4d:07:db:52:e2:5a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
        Validity
            Not Before: Nov 23 19:02:31 2024 GMT
            Not After : Nov 24 19:02:31 2024 GMT
        Subject: CN=577d14fefcb608629af735c20ac5f0302bddd3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:e2:11:59:70:89:15:f9:17:87:e0:55:55:
                    ed:77:e6:92:69:c6:f3:72:fb:d1:d4:3c:6e:50:0b:
                    3e:1e:ff:7c:52:19:39:3b:11:f9:58:fe:e8:e1:45:
                    85:2e:4d:a6:f7:8d:4c:6e:ce:37:cc:96:a2:bd:76:
                    2d:c9:ab:db:a2:3e:5f:ea:04:e0:30:ee:7d:6e:80:
                    0b:9a:78:a1:68:64:d9:11:b0:26:b8:49:c5:96:6c:
                    c1:2f:94:af:d2:e0:e2:d4:89:6a:d6:21:02:c4:3f:
                    d6:ff:ea:fb:f9:12:37:87:4f:0c:79:33:bc:33:e3:
                    cd:0a:ba:22:24:f2:e8:45:93:94:1c:48:f2:da:38:
                    c0:1a:49:54:f0:f9:d0:59:7e:71:a4:b1:da:61:78:
                    a1:03:30:18:8c:21:dd:01:77:d5:47:97:54:1d:2b:
                    86:d7:ea:8c:58:fa:3e:a2:23:eb:cd:4e:f9:e0:e2:
                    73:38:34:79:90:cd:75:f7:0f:63:2b:b7:42:ea:3f:
                    a5:04:aa:88:4c:a1:e5:1d:a1:8a:b9:9a:7c:24:c4:
                    d0:64:08:29:73:f8:03:aa:80:1a:e2:26:b7:0e:92:
                    86:d7:6a:cc:b3:14:6f:50:e9:53:13:83:a2:5f:0b:
                    7b:fc:a3:89:9d:2f:1d:e8:66:85:80:59:94:23:1f:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7D:14:FE:FC:B6:08:62:9A:F7:35:C2:0A:C5:F0:30:2B:DD:D3:C9
            X509v3 Authority Key Identifier:
                keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d7:c3:a9:ac:d5:71:e9:3a:a8:45:2c:4b:06:85:07:85:89:
         15:6f:32:ee:a5:23:b3:28:c3:fa:e2:67:52:6a:f7:ef:da:f8:
         8b:85:ca:d4:eb:c2:8b:85:8a:39:f2:74:33:48:fb:64:29:1d:
         15:56:00:11:39:cb:93:fc:39:01:71:da:61:15:a7:1b:60:63:
         2c:30:24:eb:d4:5a:8f:38:1b:7f:b7:46:76:4f:3e:51:7a:48:
         08:3c:26:68:99:29:62:c4:27:ca:a9:06:63:1f:e1:ae:bb:2f:
         9c:6e:5d:69:05:94:93:e8:22:d9:09:08:b5:31:c5:96:c0:4c:
         45:b7:23:90:db:c0:e7:fb:ab:00:94:cd:62:03:6c:04:69:46:
         72:21:85:08:70:35:0c:a1:4d:2b:30:f5:2d:a2:20:df:29:20:
         02:ef:0f:2b:82:89:57:74:a6:30:e3:ab:a3:be:56:16:20:b9:
         80:1e:6d:9c:85:e8:96:db:57:56:a9:c8:e4:69:86:d3:8a:48:
         68:6f:a0:0c:d0:52:f7:8c:83:73:73:f2:64:66:ad:22:90:59:
         22:83:41:7c:b9:48:0c:73:91:cf:2a:8d:3a:37:b5:5c:b9:dd:
         c2:7e:b3:51:34:9c:dd:a8:6b:42:a0:a9:e3:33:e6:60:3a:f6:
         9f:9b:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:42:44 2024 by rpki-client on console-fra.rpki-client.org