Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File:                     N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier:          +IaNmE/RA6NBfiwiiybpe+jgHP08HfBHFpaQ+Ieo2RM=
Subject key identifier:   6E:39:3B:13:F8:14:9C:2E:37:08:CD:55:F4:CA:E3:3A:A5:9F:1B:63
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer:       /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial:       019512474C1E23EDEC8D87F3303EE5B46493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number:          115B
Signing time:             Mon 17 Feb 2025 05:00:17 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:17 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:17 +0000
Files and hashes:         1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
                          2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: T0Nr2rjAB8XP7vYLEunQiv3T5xH4ck90QcsZ7UUOIsc=)
                          3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:4c:1e:23:ed:ec:8d:87:f3:30:3e:e5:b4:64:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
        Validity
            Not Before: Feb 17 05:00:17 2025 GMT
            Not After : Feb 18 05:00:17 2025 GMT
        Subject: CN=6e393b13f8149c2e3708cd55f4cae33aa59f1b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fc:df:02:72:4f:d3:fd:40:93:57:8f:54:b3:
                    93:a0:55:a2:94:89:3c:a2:a8:1e:3e:6b:5a:55:40:
                    53:1e:94:bb:2f:fd:79:50:ed:ff:dc:03:07:ef:15:
                    27:e7:41:5a:2b:9c:58:e2:60:9a:6d:2c:8c:70:66:
                    47:a9:52:d9:4b:cf:6f:11:23:b1:46:d0:d5:c6:dc:
                    d9:d3:a5:09:90:bf:b8:e8:be:34:e7:61:f5:23:d4:
                    21:c5:b4:cc:03:eb:70:66:28:c2:09:43:32:24:01:
                    22:9b:2c:29:8c:8d:dd:9c:6e:8e:f2:c6:3b:45:56:
                    55:f4:2e:9e:bc:08:e2:1d:76:eb:88:14:eb:c1:db:
                    66:e7:00:7f:b6:12:c5:dc:a5:be:db:7d:0a:e5:dd:
                    80:82:17:a7:35:a1:8f:e5:99:65:cc:51:41:a7:e4:
                    90:48:28:3e:c3:bb:23:48:e5:f8:2b:4a:84:f7:24:
                    5d:ea:3f:36:51:06:9e:86:74:2a:cf:f9:4a:15:ed:
                    e3:1b:d5:86:6b:e1:b8:1f:1b:0d:33:ec:2b:c9:87:
                    d8:30:77:f1:88:e4:d0:ec:54:5e:7e:98:da:e6:ef:
                    b8:a3:6b:d9:e3:e4:7a:c5:53:07:10:a7:2f:0e:35:
                    f6:7c:4b:ee:18:ef:7f:6b:31:17:04:c1:04:73:0c:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:3B:13:F8:14:9C:2E:37:08:CD:55:F4:CA:E3:3A:A5:9F:1B:63
            X509v3 Authority Key Identifier:
                keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:8d:e1:ec:9b:7d:3f:12:5f:37:56:c1:af:42:0e:02:56:
         59:80:dc:be:eb:02:6d:2a:2f:d5:25:95:b3:c3:88:5d:c1:42:
         6b:c4:70:b9:fe:e1:b0:33:6d:25:0f:f1:f7:ab:e8:bb:13:de:
         de:70:96:d2:f6:76:5f:5a:19:21:37:cd:a5:42:c8:e9:1d:7f:
         77:49:22:86:19:62:0f:b7:a5:9c:4b:d9:b5:9b:c4:c3:47:04:
         94:69:4c:34:b0:23:e3:c5:67:2f:0e:33:cb:4c:9f:23:66:1e:
         95:62:aa:42:25:7b:67:13:c0:c3:da:9e:6a:7a:fc:df:48:25:
         75:12:1d:69:d5:34:68:5a:6d:d2:6e:50:37:5c:bb:b6:cb:ea:
         73:93:24:7b:9a:96:fc:30:78:90:93:fa:9c:b1:c1:f7:ed:dc:
         f6:f7:2e:58:ab:54:f4:44:3c:c7:f2:ce:3f:41:2f:fe:0d:3c:
         a0:09:05:ce:63:34:8a:fc:74:6b:b3:b5:86:e2:13:63:91:b6:
         6f:00:46:5e:23:93:3f:1d:3e:78:ff:c3:06:e5:14:74:3d:0f:
         b9:7e:2c:bd:4a:4f:b6:b3:ab:09:5c:a8:1e:89:52:c5:34:45:
         df:3d:4d:9d:a5:66:7b:13:24:23:bf:6f:0d:90:d9:5a:12:0c:
         cb:01:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:49 2025 by rpki-client