Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File:                     N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier:          A2ouqXl0Ve4TeIBz9xnyOrBOfGt58JjzY0H/eYDKdSM=
Subject key identifier:   D8:95:DE:FF:91:F9:29:0D:78:08:3F:F1:48:6D:23:B8:84:02:5B:87
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer:       /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial:       018F87483D2D65E513F1EC3EAF9BB460BF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 16:00:09 +0000
Manifest this update:     Fri 17 May 2024 16:00:09 +0000
Manifest next update:     Sat 18 May 2024 16:00:09 +0000
Files and hashes:         1: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: sDeOdJS55GMie+N7QNoaao4we6avloDVqarxOfeC/as=)
                          2: YOCDV5HoGQZZby8BJZ8nPhr2lMA.roa (hash: 28fd+Sv5NRgjUHeC2elK216Vs+lhZfMJQ/AisVHCrDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3d:2d:65:e5:13:f1:ec:3e:af:9b:b4:60:bf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
        Validity
            Not Before: May 17 16:00:09 2024 GMT
            Not After : May 18 16:00:09 2024 GMT
        Subject: CN=d895deff91f9290d78083ff1486d23b884025b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:29:02:3d:c5:42:55:2c:7a:d4:70:db:3f:
                    c4:02:32:29:63:b4:10:02:bb:e2:53:c5:d7:7a:dd:
                    19:f4:e4:03:0b:7f:7e:b7:81:58:13:4c:6a:a3:4f:
                    c2:c4:89:37:04:6b:67:6b:14:c5:b6:56:8f:a7:fd:
                    a5:87:f0:82:20:ad:c0:7c:4b:68:0c:f6:53:b0:c2:
                    13:37:81:7c:e9:13:5f:d9:d2:b5:a4:50:82:76:cf:
                    ef:03:81:5f:6d:0c:ba:05:a5:57:d6:2e:45:ff:9c:
                    7e:28:14:25:b9:7b:2f:d9:e9:aa:50:e6:9a:b0:65:
                    3a:e5:78:ec:92:d3:20:e8:9c:75:7b:8a:db:40:03:
                    cc:af:aa:37:cb:27:9f:0c:ae:06:75:28:cf:fb:06:
                    ab:e3:e8:27:c9:26:1c:77:35:a5:ab:84:b4:15:d2:
                    af:dc:23:ef:15:12:57:49:3e:4a:fc:11:16:36:c9:
                    43:c6:67:f7:1a:f2:57:c5:58:17:a1:75:81:8b:a3:
                    a2:3e:8b:c1:2d:7e:5b:13:08:76:69:5b:d7:b8:ee:
                    21:56:0f:60:30:ce:12:5d:1f:0e:e7:5c:28:80:39:
                    a5:7f:f6:ce:a0:75:a6:ac:5a:fe:ae:b9:c5:96:fd:
                    45:27:9f:d5:c0:57:9e:23:a1:1d:9c:a4:d2:b1:0e:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:DE:FF:91:F9:29:0D:78:08:3F:F1:48:6D:23:B8:84:02:5B:87
            X509v3 Authority Key Identifier:
                keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:6e:bb:e1:de:58:47:9f:5c:88:db:03:9b:c2:17:40:ab:
         34:11:db:65:46:b0:2b:2c:4f:52:89:3a:ce:3b:35:3a:b9:33:
         e0:d8:36:53:33:60:7d:2b:62:ff:ea:15:fc:1d:7f:ec:95:5c:
         a7:de:ea:70:a2:e8:5e:7f:cd:db:36:a4:aa:6a:be:3c:cc:57:
         c8:35:85:b0:b3:76:95:0a:88:04:63:58:f8:43:93:51:72:f6:
         b4:71:cb:3f:c3:1b:bf:fa:55:57:1e:df:fe:e1:1d:94:37:94:
         6f:f0:6d:38:48:1c:24:47:00:14:98:d3:fc:6a:ec:9a:a1:ce:
         1d:ef:b3:f4:9a:3c:d3:f0:82:c1:09:61:d7:2a:5d:c6:02:b6:
         97:ea:65:04:03:7e:f9:ec:4e:ec:94:9d:c1:d9:0b:fe:65:dc:
         b1:c8:7a:17:68:37:af:76:4f:98:9f:16:17:f3:02:33:a9:20:
         84:89:9f:8e:b2:cd:41:e6:c3:9d:2b:6e:2e:6d:dc:aa:8a:98:
         59:f9:c4:20:c6:6e:dc:48:08:83:c7:be:fb:5f:5d:dc:7c:d1:
         81:b6:22:34:f8:21:7b:f2:14:64:7a:99:fd:36:c8:87:83:74:
         a4:65:84:0d:1c:b8:f2:1a:bb:1d:ef:58:72:26:a4:ca:ae:cb:
         31:c8:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:07:26 2024 by rpki-client on console-ams.rpki-client.org