Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File:                     NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier:          q3wa6Lpbkp4Fn5793MqrQV5RGQqmMwilSR713NG01JA=
Subject key identifier:   87:4B:6A:49:DB:2B:99:4C:00:58:79:5E:86:70:47:60:55:F1:0E:CD
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer:       /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial:       0192399422576F66219C1BE23AB48616E9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number:          0FDF
Signing time:             Sat 28 Sep 2024 17:01:02 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:02 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:02 +0000
Files and hashes:         1: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: K4L3a4qdHCvdS0wRijONqTyDbKHCR78IlkbEMGC1bBc=)
                          2: mcc1sb9IxdbsFjtdxlnw4JKt7Eg.roa (hash: EvNyatMQ6X9zI1JE0AAp+3IciYX334q0dDS26MFes5o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:22:57:6f:66:21:9c:1b:e2:3a:b4:86:16:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
        Validity
            Not Before: Sep 28 17:01:02 2024 GMT
            Not After : Sep 29 17:01:02 2024 GMT
        Subject: CN=874b6a49db2b994c0058795e8670476055f10ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:6c:cf:ad:be:c5:f1:39:e7:f3:a2:15:99:
                    45:0c:ba:2f:77:d5:74:93:1f:c2:4e:af:4e:48:63:
                    3e:44:7f:0a:d4:02:66:74:aa:7b:4e:0a:cb:12:c7:
                    ef:57:a1:fb:66:12:ec:6c:16:c1:4b:16:48:36:21:
                    dc:22:6f:a5:89:9a:92:bb:02:82:8a:81:d0:ac:90:
                    da:78:35:26:70:1a:c5:0e:8b:60:6f:72:83:83:89:
                    17:76:28:c7:b4:53:18:06:7a:00:9f:78:28:26:6c:
                    b0:ae:87:25:9a:bc:8e:89:26:ca:9b:34:6f:5a:ad:
                    e9:26:a1:e5:74:9b:93:c7:e2:19:da:57:72:9f:d2:
                    86:8c:c2:c3:c6:29:56:53:ca:72:aa:a6:68:e0:7f:
                    32:b2:9d:92:93:91:32:c5:9d:70:a1:9d:bf:30:71:
                    ce:7c:41:45:1a:a6:a0:39:69:2d:76:51:f8:c6:5d:
                    c4:f7:4f:99:86:a6:f6:a9:75:4b:43:3e:8f:fc:af:
                    bc:ad:99:ed:b0:54:de:f2:86:12:24:f4:ee:3a:1a:
                    c5:8c:b0:a5:0a:5a:fa:63:d5:3f:c9:9d:0c:1c:0c:
                    53:c9:dc:a3:f9:a2:5e:d7:eb:5d:7f:c0:cc:9a:d6:
                    2a:cc:b4:c3:22:c8:b8:0f:8a:79:89:e9:c0:6e:92:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:6A:49:DB:2B:99:4C:00:58:79:5E:86:70:47:60:55:F1:0E:CD
            X509v3 Authority Key Identifier:
                keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:81:85:ca:22:5e:7f:42:03:b6:7e:8c:a9:35:fb:43:79:
         59:82:54:54:da:90:03:21:30:e2:81:9f:5e:39:3c:e3:87:70:
         36:ef:ee:ba:55:09:43:b5:cb:6d:2c:21:24:ef:ef:47:a4:20:
         8d:3e:7d:28:54:9e:f3:e1:d6:da:44:82:98:f8:b7:2e:52:18:
         e0:01:b8:4c:a9:b2:89:63:b6:df:bd:99:c8:a8:bb:91:63:44:
         d2:fe:0f:1b:22:24:51:63:07:5b:bc:45:97:58:2a:7d:7b:97:
         0f:c7:9c:0b:73:3b:fc:dc:4f:d1:ae:3e:a1:2f:1a:17:37:6d:
         fb:43:8d:47:12:ea:62:28:8b:0c:34:54:24:d2:ca:6c:36:98:
         7b:f6:83:8a:13:46:2b:b4:d3:61:1d:37:ba:65:7c:bb:f2:c3:
         23:58:59:1f:9d:68:5e:a2:03:88:38:6e:d6:53:43:f7:28:10:
         53:e3:70:a3:22:02:0f:4e:27:fc:ac:0f:53:57:63:48:f1:86:
         21:3e:f9:9a:e6:97:af:29:40:b0:b2:d4:53:71:6d:6a:fd:33:
         fb:f1:1e:cc:6c:6f:50:b3:9a:17:05:55:fd:48:32:a4:d8:fb:
         2b:17:e1:5a:94:a3:50:79:b2:33:5f:8f:a4:57:ae:54:0f:0b:
         8a:f7:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:41 2024 by rpki-client on console-fra.rpki-client.org