Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File:                     nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier:          D/yzo2H/RQnQcEAgd6Ivf6rO8L6/dFlL7OwQ1pjTB6I=
Subject key identifier:   0A:8B:56:94:8F:BC:2F:25:FD:7B:CB:AC:9B:12:F5:EB:16:E3:9E:05
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer:       /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial:       01936857E94D962D70AB348215AAB3A977AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 12:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 12:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 12:00:11 +0000
Files and hashes:         1: AfUGdNix6Up009F8-QXtvXLae2k.roa (hash: qCVY+yYOexIzOGMoB1CuYA1zNQ3UHA1ezNz3vclywVY=)
                          2: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: bEEzg+phFbX/hlC8u5UAQMNRotefVrC2jfpHqzHOENw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:57:e9:4d:96:2d:70:ab:34:82:15:aa:b3:a9:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
        Validity
            Not Before: Nov 26 12:00:11 2024 GMT
            Not After : Nov 27 12:00:11 2024 GMT
        Subject: CN=0a8b56948fbc2f25fd7bcbac9b12f5eb16e39e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:12:fc:ee:c0:52:00:e0:16:70:c1:29:3f:
                    e1:96:9a:8b:be:87:1d:d4:af:a2:aa:6c:33:42:a7:
                    9a:5b:e2:9a:98:53:58:6d:98:c0:42:93:f3:30:c8:
                    62:7b:2f:c8:96:88:02:d0:af:0d:85:8b:0a:4f:54:
                    5d:6f:c7:dd:56:c8:a5:f2:be:de:ec:2a:16:ff:b8:
                    b7:4a:0b:17:bf:1e:01:75:a3:6b:ff:1e:8c:05:fe:
                    c6:fe:56:a9:1b:83:49:74:31:b8:50:4a:05:1b:78:
                    3f:a8:cc:fc:dc:27:7c:36:ee:7d:20:78:ae:51:4d:
                    d9:56:bc:39:73:da:cb:d5:2e:d2:c1:a3:15:d6:29:
                    78:01:04:42:bd:a2:29:0e:49:0d:a0:a8:5a:c6:1f:
                    09:0b:03:21:fc:dc:66:ff:b1:fb:f9:4c:41:75:e4:
                    61:16:a3:fb:c4:28:2e:e5:1b:f7:88:2b:41:39:2f:
                    bf:78:43:36:68:a8:0e:ca:2d:b1:aa:82:f5:c9:98:
                    75:4a:bb:e8:0f:62:b8:9e:8b:be:19:43:e5:45:6d:
                    18:ec:8f:7e:3e:da:d0:01:d4:2a:63:3d:89:b7:1a:
                    3d:cf:cb:8a:37:1e:d8:5c:63:d5:3e:d3:ac:cf:6f:
                    67:8c:8c:a2:34:c5:04:5d:46:1a:20:21:1e:85:cd:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:56:94:8F:BC:2F:25:FD:7B:CB:AC:9B:12:F5:EB:16:E3:9E:05
            X509v3 Authority Key Identifier:
                keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:a8:44:19:9c:10:9e:e5:ff:61:14:d0:cd:f8:37:9b:5c:
         74:3f:0f:e3:60:ff:b2:72:1f:7e:6c:92:65:d4:9a:be:44:b9:
         57:da:0d:48:30:8a:43:1e:28:85:e5:c4:11:b8:ba:7f:71:96:
         cf:c2:bd:89:1c:ca:1a:e6:d1:4c:21:30:46:35:78:2c:2c:55:
         44:ff:73:0b:50:03:2e:1f:0d:d6:57:bd:55:ee:8f:f1:f4:de:
         b7:0e:a2:df:42:21:7e:2b:1c:8a:e8:ac:3e:72:c2:2f:ce:b1:
         11:6e:0c:64:17:f9:f7:7a:dd:53:94:a0:bc:ef:3c:0c:4b:22:
         06:d2:8c:78:45:89:95:3e:14:b5:4b:7f:fe:d7:0e:c4:74:6c:
         eb:91:0f:a1:e0:53:41:fd:06:5e:c3:04:4a:60:15:34:a2:70:
         02:2f:6d:e5:d4:e5:a8:fd:d6:eb:84:cd:35:7d:fd:a7:1b:4d:
         2a:3c:46:c0:2d:f6:6c:e7:ab:47:b4:86:78:ec:77:49:40:84:
         b1:d9:a2:b1:73:ce:70:45:b9:95:17:06:fb:a1:ce:3b:64:a5:
         07:f2:ec:c1:96:ba:1b:6a:c0:dc:4f:27:6c:62:48:1d:54:0a:
         61:bb:1a:d0:ee:bd:8c:1b:2b:85:0c:3a:0a:52:bf:15:53:64:
         a4:bc:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:55 2024 by rpki-client on console-ams.rpki-client.org