Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File:                     mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier:          p9I8arLu6mXv2LiZ7jBYFyZ9nzzct3xB8RDNkGwBq0s=
Subject key identifier:   75:76:3F:22:27:D9:E9:D9:31:E1:5C:D8:F2:DD:69:C9:2F:A2:4A:ED
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer:       /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial:       019368C65975919D9BB04B9150D4943C75C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number:          063E
Signing time:             Tue 26 Nov 2024 14:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:49 +0000
Files and hashes:         1: NDqyDtWAEo6ZM2ceSsa7GHByinQ.roa (hash: 3p9CyZSCc87dqU2cpaI6sW2UNCYgaQF1+fbTjK4uQF0=)
                          2: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: sX1lsHexBTrghvdOgDi95kIJt1gcc96EJzX8hrQdido=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:59:75:91:9d:9b:b0:4b:91:50:d4:94:3c:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
        Validity
            Not Before: Nov 26 14:00:49 2024 GMT
            Not After : Nov 27 14:00:49 2024 GMT
        Subject: CN=75763f2227d9e9d931e15cd8f2dd69c92fa24aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:8a:ee:df:a9:24:59:a8:0d:60:ce:fa:02:
                    0f:d9:7d:83:c7:3d:73:49:10:b5:d6:a2:4a:e5:d2:
                    13:32:b6:06:34:8a:57:24:37:df:d0:0b:9b:9a:62:
                    7d:a3:ff:ed:43:5f:50:47:c8:b6:fc:83:8d:d6:c5:
                    12:3f:07:1b:0e:b5:cd:b4:3c:59:84:2d:0d:f0:29:
                    92:94:bc:e5:39:9b:57:59:72:3e:3b:9f:d5:0d:87:
                    32:9b:ed:e1:66:42:44:a1:0c:9b:60:4b:58:49:12:
                    11:35:b2:67:70:67:6a:f1:7f:44:3c:e1:82:a1:61:
                    b9:13:5d:d8:17:a1:fa:76:c7:cf:8a:28:c2:b5:49:
                    13:cf:18:48:16:0b:b8:8b:17:1d:a2:ed:c5:76:f6:
                    67:ab:05:94:86:78:fd:a0:d5:89:1c:b6:ce:c7:54:
                    a8:20:78:05:91:8e:a0:bf:71:3a:e1:b9:38:5b:d2:
                    e4:ff:01:8f:70:83:bb:cc:34:36:05:ac:d2:ee:84:
                    bb:26:1c:1c:3f:a3:2f:27:f1:8c:90:82:bc:97:ea:
                    9c:17:f0:4b:29:62:24:ab:dc:51:0b:b2:4f:17:74:
                    e8:e3:1d:a6:b1:41:5a:84:af:3a:0e:b8:35:b4:b4:
                    14:8a:78:67:8d:f5:74:30:5d:5a:4c:fd:56:d8:9d:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:3F:22:27:D9:E9:D9:31:E1:5C:D8:F2:DD:69:C9:2F:A2:4A:ED
            X509v3 Authority Key Identifier:
                keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:f8:fd:1b:b4:9d:29:12:1e:e8:66:47:ea:b3:c5:2b:3d:
         3f:72:c3:31:d9:5c:9c:d6:01:8f:9c:37:4f:ad:1d:cd:26:6b:
         f1:43:35:88:04:fc:8a:89:1d:b9:3c:82:0e:d4:ea:2f:c9:91:
         f2:c7:37:ac:24:b1:a5:56:38:c4:a4:f0:6e:f4:ce:90:21:95:
         47:1c:d7:97:57:b8:f0:d0:86:6f:c6:1a:83:58:ba:5d:dc:d2:
         b1:43:a7:34:d1:68:8b:17:89:00:5e:e2:1d:8d:f9:90:b1:1e:
         5f:ca:a4:d7:67:3c:07:dd:68:9f:16:f6:a1:e1:ea:7a:3a:59:
         d0:fa:18:02:04:20:e7:f6:bb:4b:9b:7c:bf:40:ae:31:21:5f:
         43:9a:85:f8:b4:82:91:d7:32:68:21:3c:8b:80:4d:4a:34:64:
         d9:4c:07:c1:72:f9:4c:3c:c0:6e:28:1d:0a:9f:91:11:d6:54:
         4f:ec:40:4e:0f:a9:95:40:b7:95:4e:ca:67:a3:25:57:63:e9:
         23:81:46:55:2a:b3:15:a3:a5:80:1a:64:ed:6d:a9:6c:56:a5:
         63:81:40:e7:67:4b:3f:bc:ac:4a:83:70:5e:bc:cc:95:1f:60:
         ef:c2:bc:3d:69:ac:f5:cc:9b:d4:61:bd:6d:62:bc:4d:15:50:
         23:d1:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:28 2024 by rpki-client on console-fra.rpki-client.org