Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File:                     nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier:          dGQvwyMMu6Nt7FLXYa5J9zVlCxC9t8OYxeY3XzZCZK4=
Subject key identifier:   2E:E3:2A:69:B4:63:61:A8:AF:CB:61:D9:87:6F:9F:08:80:67:21:40
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer:       /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial:       0193603242AA41F01AD15D96D74F4D7FEAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number:          1375
Signing time:             Sun 24 Nov 2024 22:02:06 +0000
Manifest this update:     Sun 24 Nov 2024 22:02:06 +0000
Manifest next update:     Mon 25 Nov 2024 22:02:06 +0000
Files and hashes:         1: IxD1mp8vaQhY3xhjXFEXF8jLsrM.roa (hash: sip53eZPe6STi3qQ8f+32pXvKbENUw2kpoLhpWIxh2w=)
                          2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: TVgW8/Ir2C2/1iz6TvjtwhCBs4OKT/wKhSxLWDoerIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:32:42:aa:41:f0:1a:d1:5d:96:d7:4f:4d:7f:ea:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
        Validity
            Not Before: Nov 24 22:02:06 2024 GMT
            Not After : Nov 25 22:02:06 2024 GMT
        Subject: CN=2ee32a69b46361a8afcb61d9876f9f0880672140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:b1:5f:cc:f9:fc:a2:40:7b:5b:4a:a3:6c:
                    2c:4b:48:c1:73:54:64:f0:1e:e2:12:dd:27:ed:0e:
                    32:ab:68:33:41:26:03:e3:9c:47:b1:f4:df:9d:5d:
                    39:87:a9:a0:b5:ce:8c:86:b5:37:cd:15:18:c1:85:
                    b2:14:b3:3e:8c:ad:47:ab:45:71:96:d6:d0:15:58:
                    2d:e9:79:4a:0f:97:3e:65:a9:fb:e0:c4:2a:a0:5f:
                    99:bf:da:94:f6:6e:cf:b3:a5:4e:1e:ad:8c:f5:8d:
                    a7:d3:7e:bd:90:c1:ad:f8:d7:ee:6d:da:9e:f1:ef:
                    82:d8:44:08:e8:a7:df:ed:3a:6c:8c:80:3c:65:b4:
                    87:19:89:85:dd:8c:d9:c0:13:2e:e4:03:78:b0:0e:
                    83:aa:9e:30:84:b8:d2:da:7d:84:a0:26:de:47:9f:
                    33:16:2b:f6:c3:8d:c7:b7:19:64:b7:41:fe:dd:78:
                    b9:7d:d9:aa:5a:0d:64:c5:e6:df:65:50:35:ac:51:
                    2e:a8:16:fe:96:af:60:5e:2d:82:eb:e8:e1:40:2d:
                    02:a4:86:27:f5:4a:58:6c:a2:19:ae:7c:d0:1a:53:
                    72:34:31:63:2a:f9:36:e5:75:d9:1b:0a:4a:1f:57:
                    01:27:59:3a:f3:be:4c:94:a1:cb:be:59:2a:8a:dc:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:2A:69:B4:63:61:A8:AF:CB:61:D9:87:6F:9F:08:80:67:21:40
            X509v3 Authority Key Identifier:
                keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:86:e7:52:bd:9f:3e:bd:83:0b:44:25:06:e0:13:fd:54:7e:
         b9:7a:93:fb:d6:5d:42:10:e4:cb:c2:75:9c:4a:c8:19:99:0c:
         d0:bb:98:b0:22:e2:72:07:b7:9f:ef:f6:ce:2d:3a:d7:a1:6a:
         c7:2a:c3:a9:1f:9a:ba:81:78:81:36:f0:8f:03:84:0a:eb:c7:
         1a:07:23:f2:81:2e:0c:28:b3:d6:e0:2d:f2:85:02:b9:61:18:
         9e:54:18:56:31:67:01:cc:ed:69:f8:53:f8:10:f5:de:fa:96:
         22:8e:8f:78:b1:be:6d:94:5d:71:c7:ef:23:18:26:5c:ab:74:
         b0:27:bc:cf:88:44:aa:24:64:1c:ff:e0:cf:a9:4d:70:0e:a6:
         10:01:ad:c0:04:f4:40:c0:89:64:fe:25:4d:04:c5:7f:04:15:
         2e:29:e6:66:fd:36:5a:c2:37:83:10:18:7f:b7:ec:18:ed:4e:
         85:09:ee:df:9c:c6:04:55:d4:ca:7b:4c:83:fd:5c:2c:8d:1d:
         a1:c6:ad:90:61:8b:f5:e3:6b:ee:cd:db:eb:b9:be:71:1b:cc:
         7f:0d:e9:6a:89:5f:16:c0:0b:45:de:b6:4a:d7:0f:56:cc:64:
         6f:d4:ca:5b:c2:9c:d8:6d:ef:86:26:e5:bd:0d:9e:fd:58:69:
         ed:43:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:46:55 2024 by rpki-client on console-ams.rpki-client.org