Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File:                     1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier:          OqbKvtj3AwN8Xoa8ycsGkzcs6k9ETA3pyuPSEX/4IZE=
Subject key identifier:   38:4D:D8:92:AE:31:C6:55:97:A8:CE:84:01:36:FE:F9:16:FA:68:C9
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer:       /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial:       018FA2541C15082614236FEC6F3536C1572B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number:          0E24
Signing time:             Wed 22 May 2024 22:02:52 +0000
Manifest this update:     Wed 22 May 2024 22:02:52 +0000
Manifest next update:     Thu 23 May 2024 22:02:52 +0000
Files and hashes:         1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: h8DO+udPmKLOfUoSMjP1JZL7z+gChWn++O9PAYKIdw0=)
                          2: QNstPQE9ZulDLKdz8jmTmvilx7o.roa (hash: Q8sF2hSBUCyfSRRRg9gV0DcvIyX77Fnorxv/6suBlBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:54:1c:15:08:26:14:23:6f:ec:6f:35:36:c1:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
        Validity
            Not Before: May 22 22:02:52 2024 GMT
            Not After : May 23 22:02:52 2024 GMT
        Subject: CN=384dd892ae31c65597a8ce840136fef916fa68c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:36:50:f7:93:81:9e:0e:c6:98:35:ce:03:
                    5e:e5:e3:bf:1c:80:64:a1:9d:ab:fa:99:4f:b6:1a:
                    b8:c7:42:3d:ca:d8:87:3e:5a:6b:9f:eb:63:3b:d5:
                    d7:6f:d2:15:e9:fe:8b:0d:95:d4:51:5e:71:17:f1:
                    41:65:ac:3c:a9:61:f9:f6:98:a6:41:85:d6:55:58:
                    15:66:17:21:e4:e0:b9:b7:c2:63:20:ad:f4:fb:4b:
                    37:12:01:d3:df:0e:af:24:0a:9c:5d:85:c5:3d:6a:
                    3b:1f:4c:da:95:e9:ce:bc:ec:58:9f:7f:d1:9b:2f:
                    9d:90:dc:49:e3:dd:e5:2c:21:52:a8:f9:16:9a:3d:
                    7c:ed:5c:de:4c:f2:6a:27:57:39:23:d5:ec:9d:8e:
                    fd:30:60:ed:3a:ed:c8:4e:92:a3:33:a5:bb:7c:f8:
                    a2:68:8c:3f:a1:2b:c4:89:8c:0f:1e:db:e6:bd:13:
                    16:8f:7e:64:6b:c7:31:bd:75:cc:27:6d:9c:b3:1a:
                    29:99:dd:e4:12:23:2b:0f:f9:60:4c:5d:cb:5e:77:
                    7d:13:9f:ae:f2:e2:73:cb:3f:1f:b2:8d:60:72:1f:
                    01:2a:89:5a:35:24:78:e5:ef:6f:3b:9d:df:33:93:
                    67:bc:e4:c4:10:12:12:5a:d5:e7:08:33:45:be:c0:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4D:D8:92:AE:31:C6:55:97:A8:CE:84:01:36:FE:F9:16:FA:68:C9
            X509v3 Authority Key Identifier:
                keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a5:98:be:61:46:72:40:28:c6:7c:df:b6:52:58:af:ce:e6:
         7c:26:2a:69:57:2d:65:fe:ac:d4:55:90:14:96:4f:c3:94:06:
         61:89:2b:40:fa:83:42:83:d4:c0:12:da:72:03:90:a1:09:89:
         f7:5e:97:00:2b:b3:94:2b:66:f5:b4:aa:07:4d:8c:eb:5d:17:
         c4:31:65:26:d8:40:c6:c2:28:22:37:99:c1:61:33:0f:90:28:
         cd:64:cf:58:1e:c7:4e:70:31:f2:e9:b5:22:20:6f:62:c9:db:
         39:b6:ef:b0:36:11:35:6f:da:0a:09:75:ff:00:14:f6:de:75:
         09:e6:d3:6b:f4:f0:83:70:86:9b:b9:9d:91:28:ff:c9:b4:bb:
         12:f2:66:f1:e2:d9:05:f5:9a:6a:80:56:75:39:bd:10:10:50:
         b1:77:4b:b4:2e:3e:e7:e1:86:ae:38:74:f8:25:60:cc:c5:d0:
         a0:bb:db:75:bd:81:84:29:90:ff:c9:20:74:e2:0f:af:e4:0a:
         df:8c:29:8d:0f:e5:f4:a8:9c:39:c8:6e:c5:e5:90:bc:6d:ef:
         12:b2:47:74:c5:c8:7b:85:37:30:5b:67:fa:eb:d1:f8:f5:22:
         e8:32:0a:b9:89:98:bf:9d:ce:7c:59:72:c1:3d:7a:5b:18:e6:
         d2:3b:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:26:07 2024 by rpki-client on console-ams.rpki-client.org