Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File:                     NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier:          0oL9j/emCA7Np3LJ4csLH90w7R+6z48dGrGFSXCkFHw=
Subject key identifier:   28:82:BE:4F:70:FD:9D:C7:C3:20:0A:45:46:FD:32:A8:81:AC:AC:77
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer:       /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial:       019234377B8CA63C7904048C949DCBD68874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number:          0B9B
Signing time:             Fri 27 Sep 2024 16:01:44 +0000
Manifest this update:     Fri 27 Sep 2024 16:01:44 +0000
Manifest next update:     Sat 28 Sep 2024 16:01:44 +0000
Files and hashes:         1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: SCVEJGjCgrZDnESMlaMczscqzmBd6VIaWA3U/2nOsuc=)
                          2: WfJaksAmXQQrDdzFH5nfx_2oTt8.roa (hash: brNkwfutAXrSL8oQrUP2lzeSp9whMU3NCAB1wqUX96o=)
                          3: cGAcnya9tpWRusG8AgV4cWKAYk8.roa (hash: HTqgy9ow/utJkGxnmqmU1CMEoTtvcClIXxQPvIV4Q+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:37:7b:8c:a6:3c:79:04:04:8c:94:9d:cb:d6:88:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
        Validity
            Not Before: Sep 27 16:01:44 2024 GMT
            Not After : Sep 28 16:01:44 2024 GMT
        Subject: CN=2882be4f70fd9dc7c3200a4546fd32a881acac77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:e5:a9:35:55:a5:72:2c:b9:53:97:ce:af:
                    a0:11:23:c2:e4:f6:48:6d:fd:82:33:19:11:24:40:
                    ab:7b:56:2d:40:0d:08:f2:44:96:84:7f:68:10:45:
                    2e:f6:d7:08:85:bf:d3:b6:4a:31:39:59:8e:82:79:
                    5d:69:6f:45:75:60:db:41:95:8a:4b:67:55:ba:e2:
                    d6:a8:7f:b1:f3:0a:de:fc:59:1d:ca:be:03:1e:30:
                    07:4d:ce:cc:8a:a9:1d:0a:f9:72:78:f2:9c:0d:a6:
                    85:87:ce:1d:29:47:d9:69:c9:50:f6:db:e6:37:b6:
                    d2:05:82:6d:25:c7:13:10:19:43:8b:6d:fd:f2:6d:
                    5b:8b:c8:0e:30:23:f6:a3:7f:db:61:43:c7:05:95:
                    04:c9:ef:0e:16:b7:f6:63:a9:64:fd:db:4c:2a:79:
                    23:b7:dd:89:96:2b:6e:8c:5f:0f:c8:7c:26:29:34:
                    21:56:7f:4d:94:49:d4:af:e0:e0:bc:a6:6e:eb:91:
                    fe:f0:37:a6:6f:8b:12:e5:4d:da:81:77:8e:be:dc:
                    ae:ae:2b:d7:1b:e0:f6:e1:4f:fd:f7:b3:da:7f:ff:
                    82:c4:3f:93:ab:8b:fd:91:1f:99:30:78:6a:50:79:
                    14:ed:da:7f:24:0b:19:09:99:ff:ee:a2:9e:db:de:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:82:BE:4F:70:FD:9D:C7:C3:20:0A:45:46:FD:32:A8:81:AC:AC:77
            X509v3 Authority Key Identifier:
                keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:dd:9f:83:e1:a7:25:29:9c:d3:a1:4f:95:10:66:43:e8:
         3b:0d:7a:c0:46:b1:8d:02:b9:3b:ab:9f:dd:14:4f:50:d3:58:
         b4:45:77:99:d6:2c:23:6a:23:59:41:6f:db:31:7c:0b:95:a8:
         df:80:a6:d6:99:e5:b6:ca:35:47:fa:b7:b9:64:ed:e1:60:af:
         c2:a8:e2:11:ec:e3:ea:6b:29:ba:b6:10:79:c3:00:c6:94:d3:
         98:2b:b6:aa:80:95:f7:9b:e8:2f:60:2b:2a:75:e9:63:c4:d6:
         20:85:fa:e0:61:73:a0:60:aa:81:26:0c:45:86:15:5a:e0:d0:
         29:06:35:b2:df:33:f9:70:e8:0b:d1:32:58:e1:81:c1:ef:8c:
         5b:9b:f3:79:40:cf:cb:84:c2:2b:fb:1f:95:39:3f:a5:24:b2:
         40:da:00:13:20:45:17:2a:ee:1e:bc:c8:64:6c:8f:fe:9e:31:
         34:04:0e:92:de:d1:a8:e4:97:a6:70:b6:c2:67:f4:9b:88:72:
         21:73:d7:b9:50:91:b6:7f:51:be:cc:23:ea:37:fe:22:39:26:
         f4:80:75:7d:c6:f2:44:fd:a4:10:31:1b:b7:31:5d:45:7f:b1:
         47:4f:68:1a:9b:14:55:8a:25:9b:0f:8c:c5:ba:31:3e:4f:06:
         49:c3:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:05:42 2024 by rpki-client on console-fra.rpki-client.org