Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File:                     NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier:          tx5Z9BCrGLBSgwK/WiInAQtJ7R19N3Q5H06KX1RVCx4=
Subject key identifier:   A3:24:6E:96:C1:60:EF:C0:B7:A6:9C:86:FE:0D:BE:C6:27:A5:04:F6
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer:       /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial:       019356F6FFC1EDB5237F968CE706611B6730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number:          0EB6
Signing time:             Sat 23 Nov 2024 03:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:47 +0000
Files and hashes:         1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: JGexB1wIMXZQZt5Mq9cBkEYtq+I1v2z/EWwoFxN2aa8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ff:c1:ed:b5:23:7f:96:8c:e7:06:61:1b:67:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
        Validity
            Not Before: Nov 23 03:00:47 2024 GMT
            Not After : Nov 24 03:00:47 2024 GMT
        Subject: CN=a3246e96c160efc0b7a69c86fe0dbec627a504f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:9e:ac:1a:b9:c2:c7:15:86:56:97:31:87:
                    38:c2:2e:c5:44:55:59:b4:4a:05:1a:9e:7d:67:de:
                    ec:4f:5d:31:0b:2b:da:d3:c5:1d:4a:c2:69:d0:51:
                    93:e5:7e:ad:56:4a:3d:0e:b3:53:3a:05:e2:03:4e:
                    c6:07:77:20:ba:a9:a4:38:e8:66:74:cf:4d:3a:96:
                    17:fa:a6:3a:75:9f:63:a2:97:e3:fb:df:00:07:f2:
                    c7:76:58:83:e6:09:1e:e4:ce:a7:2a:2b:45:81:05:
                    4d:67:dc:08:09:9f:15:48:c4:29:fc:14:86:d9:58:
                    66:2f:42:d2:3d:e3:0d:28:cc:6d:10:fb:c6:0a:b0:
                    b2:d7:42:16:e2:f5:06:ba:5c:04:d8:47:f8:3e:72:
                    21:7c:5a:5f:ef:65:b4:27:21:f8:38:d0:64:aa:72:
                    71:1e:2e:03:84:54:fb:d1:73:58:62:85:7b:92:72:
                    dd:67:ec:b0:8d:3b:3f:e9:db:9a:6b:54:80:e1:e5:
                    2d:83:b1:ac:40:05:8b:a8:79:e5:8f:14:86:2a:6e:
                    8d:c3:5c:b7:89:5e:61:78:55:3c:da:60:16:c3:fb:
                    cf:3b:5a:20:93:80:03:9d:f8:85:e0:81:4e:55:f5:
                    41:3d:1e:a0:fe:f2:60:00:42:ea:d8:e9:04:29:c4:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:6E:96:C1:60:EF:C0:B7:A6:9C:86:FE:0D:BE:C6:27:A5:04:F6
            X509v3 Authority Key Identifier:
                keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:86:7b:7c:55:0e:62:ba:b2:d7:29:82:ba:6f:15:0b:67:89:
         14:2c:20:d2:cf:23:de:9b:c3:a3:c2:03:47:70:13:6d:dd:fa:
         cd:e9:bc:da:78:8c:88:00:b4:b9:69:c0:85:50:30:6d:54:8f:
         06:d0:94:2f:82:44:f3:43:85:d0:46:e3:ab:b1:48:c5:5d:27:
         42:6c:72:39:88:3b:85:9a:f9:b3:f5:1f:e8:2e:a1:d7:89:23:
         fd:53:44:a2:6d:a7:ef:08:54:44:31:db:96:1b:25:ed:55:c8:
         5f:be:a6:04:92:d0:70:19:b5:f3:03:9c:13:74:1a:21:de:b0:
         46:90:ce:43:12:04:5d:9d:15:0e:f8:fe:b3:26:47:3f:a2:82:
         29:94:14:1d:83:8d:5f:01:97:6a:c2:20:ab:81:fa:24:f7:85:
         d7:4f:54:a0:81:67:f3:dd:8f:25:35:9f:ac:c3:28:31:40:91:
         0a:70:44:ae:29:e3:42:50:00:3e:ef:0d:60:5a:ed:94:ca:63:
         50:80:fe:28:3e:09:fa:8c:00:66:1d:33:36:10:70:d0:d3:12:
         d7:6e:00:8f:79:65:55:e3:7e:12:7d:9d:23:73:11:b6:ed:a9:
         2a:57:1f:bf:97:a7:73:f2:91:72:23:88:00:c5:b3:31:3e:8f:
         e7:43:78:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9v/B7bUjf5aM5wZhG2cwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0N2EwNGUxYWMyNGM3OTc3NjM0NzgzOWU1MTM0YzlhYWEz
OGJmNTcwHhcNMjQxMTIzMDMwMDQ3WhcNMjQxMTI0MDMwMDQ3WjAzMTEwLwYDVQQD
EyhhMzI0NmU5NmMxNjBlZmMwYjdhNjljODZmZTBkYmVjNjI3YTUwNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygaerBq5wscVhlaXMYc4wi7FRFVZ
tEoFGp59Z97sT10xCyva08UdSsJp0FGT5X6tVko9DrNTOgXiA07GB3cguqmkOOhm
dM9NOpYX+qY6dZ9jopfj+98AB/LHdliD5gke5M6nKitFgQVNZ9wICZ8VSMQp/BSG
2VhmL0LSPeMNKMxtEPvGCrCy10IW4vUGulwE2Ef4PnIhfFpf72W0JyH4ONBkqnJx
Hi4DhFT70XNYYoV7knLdZ+ywjTs/6duaa1SA4eUtg7GsQAWLqHnljxSGKm6Nw1y3
iV5heFU82mAWw/vPO1ogk4ADnfiF4IFOVfVBPR6g/vJgAELq2OkEKcSjlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMkbpbBYO/At6achv4NvsYnpQT2MB8GA1UdIwQY
MBaAFDR6BOGsJMeXdjR4OeUTTJqqOL9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQt
YzQ0OTc0YWRkMjMwLzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQtYzQ0OTc0YWRkMjMw
LzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4Z7fFUO
Yrqy1ymCum8VC2eJFCwg0s8j3pvDo8IDR3ATbd36zem82niMiAC0uWnAhVAwbVSP
BtCUL4JE80OF0Ebjq7FIxV0nQmxyOYg7hZr5s/Uf6C6h14kj/VNEom2n7whURDHb
lhsl7VXIX76mBJLQcBm18wOcE3QaId6wRpDOQxIEXZ0VDvj+syZHP6KCKZQUHYON
XwGXasIgq4H6JPeF109UoIFn892PJTWfrMMoMUCRCnBErinjQlAAPu8NYFrtlMpj
UID+KD4J+owAZh0zNhBw0NMS124Aj3llVeN+En2dI3MRtu2pKlcfv5enc/KRciOI
AMWzMT6P50N4pA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:08 2024 by rpki-client on console-ams.rpki-client.org