Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File:                     nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier:          vx20ZN+YYMRAAtR+YxtEakszVEUIx6L9bRZv349s4Ck=
Subject key identifier:   BD:B0:47:32:9B:27:43:05:8D:CD:BF:67:48:39:0C:37:B6:29:E3:16
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer:       /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial:       019357D27C61FA5B264424DD13359B62919B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number:          0962
Signing time:             Sat 23 Nov 2024 07:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:32 +0000
Files and hashes:         1: jS0tJg3MpFo_OoYJjkgIR9MttaQ.roa (hash: qhJIjLzvLfDbuXdlBEhtzrbgJkELFDvi/HwtSuKj7bQ=)
                          2: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: KxIFBl33rlNBEBSOnxwTTGXm27JCar3qA45wlSea00Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:7c:61:fa:5b:26:44:24:dd:13:35:9b:62:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
        Validity
            Not Before: Nov 23 07:00:32 2024 GMT
            Not After : Nov 24 07:00:32 2024 GMT
        Subject: CN=bdb047329b2743058dcdbf6748390c37b629e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:ad:10:18:ea:13:4e:22:6a:7f:8e:ab:10:
                    b5:7e:14:7e:97:2c:4c:81:8d:ff:7b:56:5b:a6:c9:
                    4b:81:15:c2:37:d1:90:e6:86:a6:0c:0d:35:04:c0:
                    02:0e:d3:d1:ef:c6:b9:1c:38:34:0f:35:08:e7:4f:
                    58:d6:54:8e:53:83:4e:49:1b:e2:51:c4:11:c8:6d:
                    0e:5c:68:b5:7a:92:b4:fc:88:49:21:49:41:f5:ae:
                    6d:35:25:4c:7d:91:9f:29:44:04:84:b8:31:79:e1:
                    1e:3a:3e:63:cb:f1:a3:59:2e:80:8e:56:00:9e:0c:
                    a7:b2:f3:43:fe:3a:70:af:6c:d2:b3:88:80:57:77:
                    90:75:03:c5:bb:94:b4:07:2d:78:b3:17:ed:0d:b5:
                    b2:86:49:f6:11:be:bd:dc:94:b6:79:b7:5c:d9:32:
                    73:2c:47:c6:97:cb:e4:ee:11:47:76:64:ac:c3:5e:
                    2c:28:43:5c:a3:2c:bf:92:ad:97:19:60:f6:fe:8a:
                    00:73:5f:8a:b4:de:c7:5d:fd:fd:81:d2:92:ce:f3:
                    ad:10:24:22:72:5c:38:ed:29:92:25:16:9e:80:de:
                    75:53:ee:a1:8f:82:3e:39:1e:b3:b2:0d:64:ad:c9:
                    b6:74:de:46:2a:98:d3:d0:84:5b:51:1d:21:82:eb:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:47:32:9B:27:43:05:8D:CD:BF:67:48:39:0C:37:B6:29:E3:16
            X509v3 Authority Key Identifier:
                keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:40:7d:06:f1:71:ea:01:6b:70:54:91:b0:30:e8:93:e2:
         b4:72:99:98:b1:e5:d9:2a:b6:5f:32:b7:de:4d:59:bf:8f:f7:
         5f:38:53:c6:84:37:91:4f:11:e6:2f:ea:bb:28:ee:75:8a:ee:
         51:4b:2e:ac:9b:d2:9c:d2:40:43:31:2c:61:ed:da:39:ae:57:
         0e:f6:3e:18:58:f8:4d:c9:34:9f:b6:7e:f3:2e:18:0d:bc:f9:
         4a:4e:e3:b5:db:f0:3f:7b:63:d1:b8:5c:50:eb:ea:fe:ca:a1:
         82:34:b8:40:2d:bb:02:bf:85:8d:6f:df:58:b8:f7:16:b4:d4:
         0a:5b:1a:69:11:97:a3:cd:c4:0b:24:8d:27:87:23:f5:06:88:
         8a:ec:f4:c6:3a:fc:95:e6:85:70:79:fa:91:19:4e:9d:28:be:
         78:e5:30:b9:f7:fc:29:e8:88:05:22:b8:83:03:5f:fe:46:20:
         a3:64:e6:63:ae:8d:0f:25:b6:e6:3e:7d:15:fa:79:53:19:d4:
         fc:06:6e:fa:28:bd:64:8f:69:e2:63:be:f6:ae:05:15:af:84:
         cc:5c:c7:e2:92:0a:4d:d8:82:5c:ee:0e:e8:ce:d7:5f:33:ba:
         0a:7c:80:a7:80:84:1c:fc:95:99:7d:a9:1f:5e:00:be:24:8a:
         dc:08:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:46 2024 by rpki-client on console-ams.rpki-client.org