Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          pafEIAlb8/YWId9eCDPtAcJlr3FZroMXH+1o6Y/4Khg=
Subject key identifier:   27:C0:46:F8:33:87:A5:FD:BF:3F:50:CC:8F:CC:AC:C0:68:AD:F2:F5
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019350F491529F9263DFD2931DF02605FB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          090B
Signing time:             Thu 21 Nov 2024 23:00:25 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:25 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:25 +0000
Files and hashes:         1: 9gsIWXGcmspdLmH_nQxhmXoWCAk.roa (hash: Egy4i6HoGjr40ly0fWEZuoVTUZq8+s2FyZM7NZMYo0o=)
                          2: FpR6nSObsz8_qlNWftqMaiVPtH8.roa (hash: LEdWkSRfg8RN+x+MwVcFfMW92WJu9XbBkNT+OAvwKMk=)
                          3: VgQTziAHvh63c4Yffx92ALMvuss.roa (hash: ltLDcFp3AE/e4dPwiYHGVvkU/mfQGnlHFWEKPBnB5OE=)
                          4: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: +1ouwJe6gGMlc3T9sdxvON33yLiRsQnKbTtcRuNo9ig=)
                          5: lZqe5XA_dnTRRCXrpa_IbbGalE8.roa (hash: JjmEWi4EASeEY1luQr7sUn0IZ7opQFJcCrrHgAi5DYw=)
                          6: sN4N1yeaLKMJorp6FjKiIymx9Jc.roa (hash: 4suuL/yxK6nMWEwK/gyxYIJ1Hqk7tTVKTg5KQ7oIzzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:91:52:9f:92:63:df:d2:93:1d:f0:26:05:fb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Nov 21 23:00:25 2024 GMT
            Not After : Nov 22 23:00:25 2024 GMT
        Subject: CN=27c046f83387a5fdbf3f50cc8fccacc068adf2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:cc:a6:68:a6:e7:e8:28:9d:9d:26:2e:c4:
                    be:ce:ef:a8:51:49:08:19:c3:c3:03:2c:15:3c:2f:
                    53:7a:d3:f9:ba:29:26:30:0b:6a:a5:7f:22:41:5f:
                    c4:39:98:80:b3:59:0f:7d:71:11:18:64:56:3c:f8:
                    c3:b2:73:bd:12:6a:37:87:d3:a6:99:37:fc:e5:0c:
                    cf:77:02:37:d4:92:33:97:6a:bc:8b:2e:a9:48:60:
                    a6:3c:2f:35:2c:5d:21:39:64:c4:3e:b4:44:12:c4:
                    64:93:2e:c9:12:4c:7a:4f:0a:20:ba:7f:49:fc:17:
                    ae:95:d0:49:d7:37:fe:78:b3:dc:a5:6c:94:4d:ed:
                    cd:84:7e:b4:fe:62:1c:bc:16:e3:85:e0:2e:4d:20:
                    cd:f3:44:7c:21:dd:4d:8e:4a:7e:a9:b6:72:54:1e:
                    cc:6a:54:3a:99:2e:f0:ab:64:dd:33:8b:38:af:67:
                    ab:9d:52:0b:27:79:d3:e1:b8:e7:e9:bd:90:cc:85:
                    78:38:4e:2f:9a:4b:ff:fa:15:1f:9c:cb:8d:75:ed:
                    ba:37:53:4b:c5:b8:cd:ef:fe:1f:b7:b3:07:93:72:
                    88:fb:4a:c5:94:86:49:db:45:95:74:e8:6d:f2:c4:
                    46:07:ad:8c:3a:37:88:ff:e6:41:67:04:65:d5:d2:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C0:46:F8:33:87:A5:FD:BF:3F:50:CC:8F:CC:AC:C0:68:AD:F2:F5
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:a9:8b:4c:52:a7:95:d9:7f:ad:74:40:ad:4f:15:7e:51:
         72:2d:51:c9:b8:1d:76:0e:e4:70:25:4c:72:9e:55:40:0f:27:
         fe:c8:6c:6f:da:4e:db:ae:d4:1d:06:e2:26:78:db:96:e0:94:
         d3:e0:7f:a7:f3:56:5f:9f:91:d0:79:9d:11:33:98:c4:8b:c2:
         a6:12:ad:7a:ab:3f:e1:9b:2e:37:bf:ce:20:3b:77:91:2a:2a:
         d6:fd:e2:fc:3a:1b:c6:51:49:7b:a4:a5:9f:40:70:57:ca:1a:
         b9:da:c2:b1:e5:8d:8c:43:db:d7:70:57:64:37:46:2e:97:e4:
         41:5d:38:a8:3e:1b:0a:80:69:8c:f2:b2:4c:ab:c8:3f:2c:7f:
         fa:a1:aa:55:26:7e:4d:ee:c6:6e:da:ef:8c:d2:ca:68:a2:44:
         e8:d5:ff:31:f3:23:bc:d9:9d:e2:8b:fe:4a:89:a0:a4:5f:5b:
         eb:d1:a8:2c:c6:be:21:58:e5:30:25:ff:81:3d:f9:ae:59:5c:
         31:1f:12:53:4d:d9:3a:25:f2:8c:eb:f8:44:a0:1e:00:d6:5c:
         00:d8:22:d1:df:cb:c0:84:07:3f:b2:d7:10:77:16:ff:99:aa:
         46:45:83:67:ba:ee:a5:11:07:42:25:2e:e0:44:e6:41:55:ed:
         af:22:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:50:31 2024 by rpki-client on console-fra.rpki-client.org