Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File:                     NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier:          J1Q6j9NmVVmofYa/88fZiPxnP/ugF8WHvyzxI9iq9EQ=
Subject key identifier:   D6:92:88:B4:A5:E2:55:D7:92:F5:E0:8A:C8:F6:13:34:EC:66:60:0A
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer:       /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial:       018F98ABFE56C514CD2CEA12D2A895811C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number:          056A
Signing time:             Tue 21 May 2024 01:02:39 +0000
Manifest this update:     Tue 21 May 2024 01:02:39 +0000
Manifest next update:     Wed 22 May 2024 01:02:39 +0000
Files and hashes:         1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: 91nfY9gkxblqpiHjJbwuJ+5PRqtrrTQGCoVx3DtIeJM=)
                          2: w6NP0vFGOtJ-o6UQWWlI5pDLXWw.roa (hash: LyjnCJ/PsOxb7URLLvIDsU26zWxVpFUn+wMOW1eoCaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:fe:56:c5:14:cd:2c:ea:12:d2:a8:95:81:1c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
        Validity
            Not Before: May 21 01:02:39 2024 GMT
            Not After : May 22 01:02:39 2024 GMT
        Subject: CN=d69288b4a5e255d792f5e08ac8f61334ec66600a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:93:76:97:fc:30:07:71:31:b0:bb:3a:a6:9f:
                    dd:5d:3d:03:a6:e8:58:1d:b8:f7:50:e2:b2:c6:83:
                    4e:f7:56:92:28:3d:06:b1:6f:4e:6e:05:86:aa:85:
                    74:0e:13:78:eb:b8:fa:f3:6e:f9:d1:de:c0:71:68:
                    2a:8d:93:f3:d1:79:81:7b:8d:18:70:b9:60:e5:3d:
                    1b:54:16:25:92:7d:53:da:7c:b7:a6:41:da:95:1c:
                    05:8f:a0:4a:4a:27:29:bf:2e:79:4c:6e:ad:33:bc:
                    a0:48:4f:be:85:a5:81:f3:14:4d:46:2e:05:7f:4e:
                    64:8d:d1:a8:0b:16:fd:6b:75:84:f8:b9:b5:f4:a2:
                    01:17:0a:a7:c7:2d:f6:75:9f:d3:11:d7:a0:8f:0a:
                    5a:c6:9c:90:ef:f4:9d:9e:73:d9:95:2c:94:52:e5:
                    69:20:b5:a2:34:04:16:4e:1d:82:b0:9e:ea:32:d0:
                    05:86:59:79:b1:f8:2a:e7:dd:2d:5d:07:46:a9:47:
                    63:6c:36:1e:a1:5f:56:d2:b8:6a:cb:ad:e0:a1:7e:
                    5f:3f:1b:ea:fe:cb:1c:22:fd:c5:8d:05:22:c6:76:
                    d8:b7:7a:6c:23:2e:ec:99:d9:39:d8:99:4e:ca:24:
                    1b:5b:bc:d1:97:aa:aa:6c:e1:01:99:55:b0:7d:d5:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:92:88:B4:A5:E2:55:D7:92:F5:E0:8A:C8:F6:13:34:EC:66:60:0A
            X509v3 Authority Key Identifier:
                keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:38:cd:c9:d6:a2:7b:a8:20:15:eb:00:30:4b:f2:ad:2a:41:
         67:ca:b3:47:89:66:0c:58:44:66:97:f4:93:fe:58:f0:74:1a:
         22:e1:29:e6:d1:4d:7a:bd:76:70:70:7d:75:6b:4d:7b:7d:fb:
         56:4d:8b:17:82:58:03:b2:65:61:a1:4b:1b:1d:1d:b3:c3:f0:
         97:26:43:18:92:d7:83:b4:6a:03:b2:03:92:2f:da:14:5e:bc:
         6c:73:80:ac:93:82:21:43:da:61:3c:04:31:3f:c6:04:b5:d7:
         57:69:ca:b4:06:62:04:25:23:bd:bc:65:c5:51:d5:0d:88:ba:
         14:d5:dd:06:a2:0a:01:e8:5b:fe:8d:da:de:26:b7:27:d2:b8:
         0f:41:98:3e:06:0d:0d:d8:e7:e0:90:a8:45:a3:46:6d:b5:4e:
         35:08:d1:07:43:bc:bd:6f:1f:e0:d5:b9:7b:9b:21:01:e9:83:
         0a:68:18:32:c7:40:e1:f9:13:0f:61:17:31:d6:26:70:c8:f9:
         9f:63:8b:37:4a:e2:f1:26:31:5c:b7:5a:03:49:70:74:f1:db:
         f3:dc:f9:1a:9b:c0:81:f0:70:57:d7:0a:ee:81:8d:0d:91:67:
         06:7f:72:92:c5:1a:56:eb:72:87:be:ec:f7:78:f9:a8:df:09:
         fa:f1:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:01:30 2024 by rpki-client on console-fra.rpki-client.org