Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File:                     N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier:          oGdJMzA/LNxWYM9AickQnUjYUrUkp+yc5rJekcD46CE=
Subject key identifier:   8A:01:9D:1D:A4:B8:69:B1:22:C5:A1:7F:31:5D:57:C4:EA:4A:B6:47
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer:       /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial:       018F8C6EE106D52B9CFAE2CA3648005956AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number:          0CCF
Signing time:             Sat 18 May 2024 16:00:27 +0000
Manifest this update:     Sat 18 May 2024 16:00:27 +0000
Manifest next update:     Sun 19 May 2024 16:00:27 +0000
Files and hashes:         1: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: ID0cZRN4hLWA04DjntsDYLnszoAG86kuZ/I31Rf5g2Q=)
                          2: XujUZrII2x3zDc17mtA5J9DL3Tw.roa (hash: tMezirIJ7mwPeEOa8a6RekdwHK7mnOHQcGq/E/bvIKc=)
                          3: sh_eYhfDVqvY-i9y-Dg40J6280c.roa (hash: gKOWqPBXIT34yBtTw2CKl1kvj7r+1FAmj3/KkS6WJlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:6e:e1:06:d5:2b:9c:fa:e2:ca:36:48:00:59:56:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
        Validity
            Not Before: May 18 16:00:27 2024 GMT
            Not After : May 19 16:00:27 2024 GMT
        Subject: CN=8a019d1da4b869b122c5a17f315d57c4ea4ab647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:75:20:90:84:24:f0:9c:84:11:c4:05:4b:
                    87:b5:27:b6:8b:be:6d:34:66:fc:f1:03:62:ea:ba:
                    05:c7:61:b5:23:22:d4:c3:33:cb:ac:a8:f0:2e:cf:
                    4e:fe:25:8b:46:5b:59:94:9d:fe:e3:b2:eb:67:10:
                    a4:cf:7b:c6:d0:df:c8:1a:a8:07:a3:09:d5:87:09:
                    86:ef:9e:b2:b2:06:d3:65:9c:a3:10:aa:41:fb:d6:
                    9c:db:87:4f:28:88:d3:24:b6:1a:dd:30:d6:5e:57:
                    b3:cf:cd:d8:c3:a6:3f:6f:47:31:b9:36:84:9e:9c:
                    71:2e:c1:1a:af:50:35:66:a7:d6:8c:f2:f5:65:5e:
                    d5:12:87:a7:e2:96:68:ff:fe:a1:ec:72:4b:29:5e:
                    50:b3:b8:9b:db:49:ed:27:c7:b3:91:1a:37:fc:2b:
                    48:5f:4c:74:87:83:e3:26:52:7a:2e:c8:bc:98:e3:
                    66:79:b2:aa:f7:f0:02:e1:58:35:3e:56:a8:9a:d9:
                    00:09:4c:83:46:8c:ec:5d:7e:ac:42:09:7e:f3:e5:
                    4c:82:33:9b:92:43:d6:dc:c6:53:21:d5:13:ea:8f:
                    2d:8c:15:47:2f:3e:49:75:72:40:85:ba:dc:e2:4a:
                    a6:ec:53:af:86:72:96:08:08:62:7c:1d:f4:11:f7:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:9D:1D:A4:B8:69:B1:22:C5:A1:7F:31:5D:57:C4:EA:4A:B6:47
            X509v3 Authority Key Identifier:
                keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:08:3c:e6:6f:cd:02:cd:0e:f9:7c:34:d6:5e:61:57:dd:
         da:5c:d6:3d:20:be:48:d4:89:f8:e4:ce:73:c0:87:e5:bf:67:
         a0:ed:e9:11:90:e1:4d:17:d5:02:0f:b1:c2:72:34:06:d6:f0:
         19:34:50:17:95:b4:0f:ab:a8:ee:bd:46:54:80:cc:1d:9a:27:
         04:50:1f:77:fb:f6:bb:66:ef:15:b1:e9:3d:03:78:6f:94:2b:
         bb:17:b6:74:aa:34:08:84:05:26:5b:6a:99:c5:af:46:1f:a0:
         de:79:2f:f4:76:79:52:81:fd:a3:2b:b2:c3:95:25:cd:59:a8:
         c4:17:34:bf:1e:b2:f0:72:3c:23:ad:18:a9:15:cf:a1:0e:5b:
         87:97:a9:b9:46:dd:f9:3f:41:4a:11:2c:0a:d8:9e:d5:b8:54:
         ae:fb:16:4b:9b:ad:92:31:c8:42:0f:04:02:82:94:5c:6e:76:
         5d:6b:96:d3:a2:5b:b4:2b:df:a6:1b:73:88:55:1f:08:93:a1:
         f4:8f:91:3e:6b:0a:08:12:1d:e8:ee:f5:b4:27:2c:b6:cf:08:
         62:f4:a2:0e:af:11:b6:94:c1:62:09:5c:98:70:3d:73:1a:5c:
         cd:79:7e:fb:e4:64:3c:ec:b0:b9:de:6c:11:bf:8f:25:f7:3e:
         fb:59:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:45:42 2024 by rpki-client on console-ams.rpki-client.org