Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File:                     NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier:          KDuWG0Qi0kCAgfmgabXxsaW+ll/lRwLdgI0EHJr0owg=
Subject key identifier:   F6:C6:3D:5E:DF:93:F8:47:F4:3A:E4:89:E9:8A:C5:05:DE:5B:66:BA
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer:       /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial:       01923436DC3FF474BC98136A8130B686BDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number:          0D7E
Signing time:             Fri 27 Sep 2024 16:01:03 +0000
Manifest this update:     Fri 27 Sep 2024 16:01:03 +0000
Manifest next update:     Sat 28 Sep 2024 16:01:03 +0000
Files and hashes:         1: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: 0n9CURh8JgLALFmgVu6EzT5ipFND7jgd9PdqCdcYdN8=)
                          2: q2QhCHxdEbhnorzun6Pd-lsuiIM.roa (hash: jH8JuUIrhI3KRx0Cx0S0WCyyFiv8qToKMgVEh4WihoY=)
                          3: wonbylIhbF-4-ZTO_vsK8pKjJeo.roa (hash: 9XY/BCwXkiiZYNfxQVeWaOJ6gRmfc2Lfxc3rdIWbjAE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:36:dc:3f:f4:74:bc:98:13:6a:81:30:b6:86:bd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
        Validity
            Not Before: Sep 27 16:01:03 2024 GMT
            Not After : Sep 28 16:01:03 2024 GMT
        Subject: CN=f6c63d5edf93f847f43ae489e98ac505de5b66ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:20:7f:a3:88:a4:9a:93:90:50:32:e3:d3:
                    36:8d:49:4d:0f:ea:d9:ca:da:82:8b:cc:62:89:a6:
                    79:59:d2:78:60:3f:9b:a9:d5:ca:b2:cc:53:0e:14:
                    30:36:f7:cb:c4:43:c5:9d:31:60:bf:2b:9b:54:6d:
                    c2:b0:55:eb:63:32:41:36:7a:0b:54:f9:dc:74:38:
                    31:00:92:04:a3:0b:4a:a3:07:cb:80:62:b0:40:76:
                    97:79:c8:2f:e6:70:37:20:34:6b:f6:5e:ba:5a:37:
                    0b:4d:cd:33:29:a0:25:28:be:e8:30:4b:fd:1d:5a:
                    cc:35:10:c0:9e:dc:10:96:ff:88:a6:8a:54:54:11:
                    bb:ae:90:03:35:f3:1d:b3:78:c5:7d:71:2f:d2:29:
                    5e:4e:9a:a6:f0:bb:47:99:8d:de:ef:4c:bc:82:4a:
                    9f:8a:e6:16:ba:4c:91:a2:08:bb:bb:6e:40:19:5e:
                    3c:43:08:aa:04:92:7d:6e:3b:be:d1:3b:8c:bc:97:
                    74:de:85:06:d5:f6:57:2e:b8:bb:97:6e:19:29:23:
                    b8:4a:92:78:1a:51:9f:79:e3:07:34:c0:f1:fa:d0:
                    ab:69:2a:67:4e:39:62:b4:54:ce:ae:ff:ff:2c:27:
                    f5:38:42:0b:41:fb:ac:a6:2e:aa:e9:6d:4f:57:9e:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C6:3D:5E:DF:93:F8:47:F4:3A:E4:89:E9:8A:C5:05:DE:5B:66:BA
            X509v3 Authority Key Identifier:
                keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:4f:f4:2c:e7:28:88:c0:6d:45:e1:b4:75:40:8a:f9:dd:
         99:77:7f:f3:5b:9c:4d:23:96:9c:26:ac:c4:6e:6b:6b:ba:0d:
         90:6c:89:f2:47:b1:ed:ca:3a:a4:7e:67:01:00:f8:e5:b8:52:
         6a:93:1a:85:02:ce:49:83:2f:c5:9a:f8:c4:a9:62:20:18:f7:
         c3:a5:70:94:2c:da:f5:24:97:19:e0:15:14:83:15:8a:fa:d4:
         1d:b8:15:44:3d:e5:3c:f9:77:1a:9d:f0:60:61:e0:95:db:19:
         44:5a:d6:a9:17:6e:d0:2e:7c:74:21:e0:89:f3:25:7b:a5:5d:
         62:df:bf:46:ab:00:8e:85:4e:3e:3c:2d:b9:c8:c6:06:a7:42:
         02:ab:6e:9b:3d:49:ec:6f:0b:1b:23:b9:0f:10:85:20:11:34:
         6b:c9:bc:b1:1b:99:e3:7b:bd:bb:3d:3d:a9:de:6b:e6:ac:51:
         7a:d3:59:0a:1a:7e:0e:1c:3d:a7:9f:21:a2:40:22:9b:ff:dd:
         ea:5d:5b:79:f0:ca:62:2e:26:fd:08:43:0d:e8:a1:e6:5c:67:
         09:d5:ec:04:e0:77:c8:c6:9c:50:b0:5f:fe:8e:8d:b5:8b:36:
         9c:c0:e4:cd:d5:ad:e4:95:af:5a:05:55:c7:1c:1b:ee:1e:ff:
         c8:34:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----