Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File:                     nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier:          o1JMv+gETewmtdG55lrLn+r4OHS9T7Zuf/uqegftFoI=
Subject key identifier:   A9:4C:2E:A9:74:56:05:87:27:06:61:67:3D:1D:59:09:72:E4:7F:01
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer:       /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial:       019365FDC64FAD30F1B58E56755FA8CF3206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number:          0872
Signing time:             Tue 26 Nov 2024 01:02:30 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:30 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:30 +0000
Files and hashes:         1: iJoN4ZOaBPwlON0IdFus3fbeKIA.roa (hash: 683qCvzwFFdWttSNS0Y8v3OYCAIF5dNmGaqkaPHzJrs=)
                          2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: 8fxooaYURd/OfSKdrP0n45465XGEwWq4V8J3yjXTghg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:c6:4f:ad:30:f1:b5:8e:56:75:5f:a8:cf:32:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
        Validity
            Not Before: Nov 26 01:02:30 2024 GMT
            Not After : Nov 27 01:02:30 2024 GMT
        Subject: CN=a94c2ea974560587270661673d1d590972e47f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:95:3f:ea:5f:ec:2a:a9:5a:67:4a:92:86:
                    83:d6:33:61:af:fc:a3:bd:42:f4:bb:15:80:4a:7d:
                    31:29:62:9b:87:ea:46:79:e3:42:e0:76:24:eb:db:
                    3e:0a:fc:b4:bd:89:7b:73:ee:d1:71:8e:62:3b:59:
                    da:90:6a:d1:6f:8b:d1:09:e7:6c:70:62:8b:1b:9a:
                    3d:c4:29:7d:0b:46:6b:d8:1d:5f:c4:2f:f6:5b:e5:
                    be:c8:b1:d1:bb:33:70:1f:1a:af:b5:79:5e:b3:70:
                    f2:4b:65:c1:4f:5a:e2:bd:1a:09:f8:5b:85:b9:5e:
                    23:63:a9:2b:7b:d2:f3:63:b4:29:09:53:c5:e4:d8:
                    5b:55:ce:47:b4:ef:df:03:8a:b2:b9:bd:d9:b4:65:
                    fc:a5:70:d9:80:a3:d5:4e:1a:4b:db:92:e3:08:98:
                    7c:91:6a:b9:ea:48:07:04:7d:aa:34:dd:ff:18:d5:
                    6b:7f:26:99:40:db:a8:54:3a:b0:bd:dd:74:cf:fe:
                    ef:05:ed:fa:26:ab:7c:fb:15:63:9a:9b:cd:b2:78:
                    bd:60:b8:3b:ff:b7:0a:fd:f6:a6:a2:ee:41:7f:5b:
                    96:b6:1c:72:ca:df:fa:d9:36:97:ba:5b:0f:96:4e:
                    9a:75:d4:9f:31:15:25:5e:12:cd:48:fd:ff:b4:e3:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:2E:A9:74:56:05:87:27:06:61:67:3D:1D:59:09:72:E4:7F:01
            X509v3 Authority Key Identifier:
                keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f8:1d:90:1f:88:10:0c:c9:63:47:5d:4f:bc:77:c5:0c:0c:
         a5:25:9c:07:da:88:12:aa:63:5a:35:04:f7:79:28:29:8f:10:
         8a:1d:0f:43:13:8a:a6:bd:00:37:e3:62:36:8a:5d:8e:44:bb:
         31:4c:ca:d1:3d:4f:14:21:ba:62:fc:96:6b:c6:4c:83:37:ca:
         ed:59:ff:16:3d:42:34:8b:63:73:52:6f:64:05:2c:8c:2b:ee:
         cc:ab:4b:6f:48:8c:ea:d5:f3:71:64:26:bf:2e:c2:a4:45:1a:
         01:23:ac:49:18:2c:b9:32:cb:14:4d:c2:1a:9b:b8:ab:5f:6d:
         ee:f4:44:7b:95:7d:68:8f:67:3b:7b:b4:a7:d7:d2:68:59:c5:
         f5:bf:da:b6:c4:1f:17:0d:20:97:6d:8e:9b:e2:b1:49:92:6c:
         61:18:9f:44:06:8e:92:08:d0:e6:e8:64:2d:9c:0b:f7:a9:4d:
         8f:36:70:fd:63:18:f3:fc:49:90:94:cd:0f:9d:8b:73:57:d3:
         d4:8d:7d:99:64:53:a3:cd:c9:b1:2a:df:a2:30:b7:38:e5:8a:
         ea:d6:e2:59:7c:cd:fe:7b:9a:b9:5b:f7:c1:d8:ce:ca:15:3b:
         a4:da:c2:0e:98:ec:36:5e:63:42:15:d9:cc:02:0b:cc:77:11:
         88:2e:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:18 2024 by rpki-client on console-fra.rpki-client.org