Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File:                     N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier:          EmtFiH4t+qNAu7Zt4oYM9R+6rO/u4AScv5rlP3U28Po=
Subject key identifier:   A9:B0:3F:A1:F6:C5:88:91:B9:44:A7:83:95:6C:59:13:94:4F:E2:FF
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer:       /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial:       0193579B723D3E1E283F03528D377909FEFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 06:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:25 +0000
Files and hashes:         1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: 3YfmLipLE8y7Ld5uZqg76VkPyh2uABDYrJovUqdjKaU=)
                          2: RVE2fOEYG1omnNzNsdsDbZY7jTQ.roa (hash: /KqiypmUlDQ0LAta02Vs3sjZTUOSJJfJK4J70nbqeqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:72:3d:3e:1e:28:3f:03:52:8d:37:79:09:fe:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
        Validity
            Not Before: Nov 23 06:00:25 2024 GMT
            Not After : Nov 24 06:00:25 2024 GMT
        Subject: CN=a9b03fa1f6c58891b944a783956c5913944fe2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:00:ad:ed:fa:51:28:9b:a8:11:64:0a:79:
                    0e:41:a1:9f:28:61:d6:88:c4:cf:25:41:1b:e8:e1:
                    8c:3b:84:1e:5e:e2:20:80:27:bc:0c:d6:c1:9f:a3:
                    40:61:f0:43:70:8d:8f:9b:ba:e8:34:64:63:3e:64:
                    59:c9:cb:c0:32:22:cf:81:89:22:9c:8b:5a:59:af:
                    c0:8f:4d:36:5f:f8:76:c3:37:3d:ac:72:27:3e:e9:
                    01:cb:78:83:f2:a3:67:42:50:15:05:4e:54:6b:d3:
                    00:46:1e:91:92:26:52:2c:52:6b:d2:40:d4:12:0a:
                    ad:f1:db:6e:39:9f:02:01:63:78:05:2e:98:bb:10:
                    69:79:d5:6a:97:be:54:01:c2:ab:a5:79:e2:00:5e:
                    30:17:d8:8a:4e:93:1b:30:d0:60:99:d7:ff:72:15:
                    a3:84:a5:c1:64:3e:84:25:b4:12:5d:e3:26:8d:1b:
                    79:72:05:53:14:cf:d5:cd:e4:f9:e8:ce:05:c3:5e:
                    40:14:05:fc:58:a1:d3:71:b4:51:e2:f0:43:4b:99:
                    38:82:78:df:18:33:a3:7d:35:f3:06:59:e2:5c:c1:
                    a7:99:52:91:3f:8d:ba:16:a1:43:e7:07:73:d5:80:
                    d9:1b:ef:75:0f:22:ae:bd:e3:90:0f:56:1f:0c:0f:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:3F:A1:F6:C5:88:91:B9:44:A7:83:95:6C:59:13:94:4F:E2:FF
            X509v3 Authority Key Identifier:
                keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:19:90:7a:be:6f:8b:6d:aa:4a:48:a2:00:f7:68:57:2b:7e:
         4d:85:e1:54:20:3d:67:46:90:69:3e:9f:6b:82:27:17:78:53:
         2f:03:a1:c4:d6:41:cc:f1:92:16:08:f0:56:1f:ff:e1:d5:ae:
         31:78:b8:ad:36:a8:67:cb:18:81:a1:a3:a0:50:9d:97:ba:0d:
         e9:b7:24:85:df:83:e3:ea:b8:a2:53:c2:ed:94:17:dd:a3:f2:
         2b:3d:65:97:0c:2b:21:0e:df:72:ad:78:5a:b4:dd:1a:3d:a0:
         f3:e4:40:8d:a8:cb:b3:3d:57:f8:26:dc:ae:c9:2c:50:ba:e7:
         a4:81:2e:b6:1b:67:fc:db:7d:80:3c:90:d9:2b:74:06:6e:eb:
         19:1f:88:9d:42:97:c5:5f:d0:ea:ed:c0:4d:95:9c:34:4f:75:
         d4:51:39:58:1c:a0:3b:a5:06:74:f7:82:04:05:92:39:e8:6f:
         11:9a:f0:69:81:57:72:e0:53:1f:c2:b7:13:da:4d:27:15:dc:
         1d:57:9b:e8:cc:33:11:24:b5:b1:a2:01:9a:df:a0:ef:46:40:
         5e:ae:28:b6:30:92:63:3d:63:e5:c9:12:19:eb:ba:2c:7d:5a:
         f6:20:fd:08:21:1f:ac:f4:f8:93:69:dc:8d:6b:39:8a:4c:75:
         17:9b:95:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm3I9Ph4oPwNSjTd5Cf78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTViOGNkZmQxZDc5N2Q4NjA2NjBlMzRiZmExYTJhZDg1
ZmY5ZDkwHhcNMjQxMTIzMDYwMDI1WhcNMjQxMTI0MDYwMDI1WjAzMTEwLwYDVQQD
EyhhOWIwM2ZhMWY2YzU4ODkxYjk0NGE3ODM5NTZjNTkxMzk0NGZlMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFYAre36USibqBFkCnkOQaGfKGHW
iMTPJUEb6OGMO4QeXuIggCe8DNbBn6NAYfBDcI2Pm7roNGRjPmRZycvAMiLPgYki
nItaWa/Aj002X/h2wzc9rHInPukBy3iD8qNnQlAVBU5Ua9MARh6RkiZSLFJr0kDU
Egqt8dtuOZ8CAWN4BS6YuxBpedVql75UAcKrpXniAF4wF9iKTpMbMNBgmdf/chWj
hKXBZD6EJbQSXeMmjRt5cgVTFM/VzeT56M4Fw15AFAX8WKHTcbRR4vBDS5k4gnjf
GDOjfTXzBlniXMGnmVKRP426FqFD5wdz1YDZG+91DyKuveOQD1YfDA+EUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmwP6H2xYiRuUSng5VsWROUT+L/MB8GA1UdIwQY
MBaAFDeluM39HXl9hgZg40v6GirYX/nZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUt
ODExNDRmZDAxNTY0LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUtODExNDRmZDAxNTY0
LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxmQer5v
i22qSkiiAPdoVyt+TYXhVCA9Z0aQaT6fa4InF3hTLwOhxNZBzPGSFgjwVh//4dWu
MXi4rTaoZ8sYgaGjoFCdl7oN6bckhd+D4+q4olPC7ZQX3aPyKz1llwwrIQ7fcq14
WrTdGj2g8+RAjajLsz1X+CbcrsksULrnpIEuthtn/Nt9gDyQ2St0Bm7rGR+InUKX
xV/Q6u3ATZWcNE911FE5WBygO6UGdPeCBAWSOehvEZrwaYFXcuBTH8K3E9pNJxXc
HVeb6MwzESS1saIBmt+g70ZAXq4otjCSYz1j5ckSGeu6LH1a9iD9CCEfrPT4k2nc
jWs5ikx1F5uVIg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:53 2024 by rpki-client on console-ams.rpki-client.org