Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File:                     NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier:          oWfq5hpyYxO/QBpQNtk7y545f1WXiv19JoDDNSV394Y=
Subject key identifier:   45:4B:CA:18:00:16:2B:3C:9C:34:FD:C2:C8:5A:72:46:5C:A2:AE:BE
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer:       /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial:       019235128C2FB378EBACC504203184264B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number:          0285
Signing time:             Fri 27 Sep 2024 20:01:00 +0000
Manifest this update:     Fri 27 Sep 2024 20:01:00 +0000
Manifest next update:     Sat 28 Sep 2024 20:01:00 +0000
Files and hashes:         1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: N1gpzwhL5XqVTRG8QRBxYgCcnm6eMPoXQbF3oVdlT4A=)
                          2: zC4wLWpWUs5VbPsrsrUR6eFtR5M.roa (hash: OKeJYTpYoc/17j+UF+Fw52eXR8PQpI6OQTKwOSa30uA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:12:8c:2f:b3:78:eb:ac:c5:04:20:31:84:26:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
        Validity
            Not Before: Sep 27 20:01:00 2024 GMT
            Not After : Sep 28 20:01:00 2024 GMT
        Subject: CN=454bca1800162b3c9c34fdc2c85a72465ca2aebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:59:79:67:ec:9e:fb:4e:86:d3:e7:8f:f0:
                    34:16:0e:fc:36:76:b1:37:a2:4a:13:4a:e9:10:01:
                    06:09:aa:74:a0:1e:5a:70:d3:8f:ea:97:22:58:bf:
                    d7:86:b3:ad:25:66:97:08:cc:d6:b7:70:a6:11:73:
                    97:34:5b:32:d1:34:ac:b2:63:de:54:17:d7:a6:62:
                    da:b0:5d:5b:06:3c:17:e9:60:31:8b:5b:00:38:0d:
                    45:f8:f8:e2:04:6f:f2:6d:c9:00:c3:c2:37:c1:5f:
                    31:2e:bf:14:3c:66:9d:77:70:a5:d6:a9:c4:0a:05:
                    1c:f5:95:ee:9d:6c:e9:ad:67:c7:e4:76:94:16:07:
                    ff:02:41:56:5d:b6:38:4a:89:e0:f9:79:71:d5:02:
                    52:90:3d:c7:b4:29:8f:05:69:c0:cc:7d:2b:12:2f:
                    48:f5:c7:69:65:2e:5d:33:7c:fa:fe:ee:f1:2c:bc:
                    8a:5a:f0:5d:fb:90:d4:7b:4d:a9:70:28:e1:fd:e3:
                    b6:3c:1d:24:31:72:a2:91:ad:a6:5b:e5:54:7d:5d:
                    2d:bd:56:a6:b1:6a:ab:27:46:0e:9c:48:41:c5:cc:
                    93:1e:60:ce:48:55:13:61:a9:0e:96:35:2e:68:05:
                    63:1e:5e:c6:ce:18:16:68:54:dd:ae:96:e5:d0:61:
                    b4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4B:CA:18:00:16:2B:3C:9C:34:FD:C2:C8:5A:72:46:5C:A2:AE:BE
            X509v3 Authority Key Identifier:
                keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fa:a7:12:37:e5:2b:88:d1:55:e7:4e:2b:74:5d:09:85:28:
         9d:77:7c:3e:9f:ee:9d:09:b9:a1:f9:e1:69:aa:cd:24:58:9f:
         9a:db:af:53:c6:13:62:69:34:b2:0c:91:90:28:cb:e1:ca:3b:
         44:5e:60:f4:6c:f0:fc:cc:f7:50:75:7f:6c:4a:92:f6:4d:2d:
         8b:66:0b:24:c4:68:63:5c:31:c0:92:a2:ff:c9:d5:d6:b8:1d:
         2e:f5:c0:91:1f:68:b2:13:38:fe:32:97:1d:8f:2d:fc:bf:be:
         98:69:21:ae:17:d5:12:bb:70:f8:61:63:2f:8f:2a:c4:90:1a:
         2b:af:f4:9a:9b:a8:58:ed:55:16:dd:c9:63:d6:29:6f:c4:79:
         ff:d0:74:38:ed:b3:9e:65:51:d2:dc:87:da:07:1e:2a:4a:50:
         00:d1:6f:10:ce:de:21:3b:78:07:19:25:54:60:c1:4e:2c:63:
         e6:26:a8:8c:ed:6f:e2:7e:3c:61:49:e4:1d:ea:e9:35:ac:1d:
         81:1b:30:1c:0d:27:a7:2a:80:34:d5:3f:ba:93:e6:ec:2f:28:
         1b:72:dd:13:0a:9f:28:0d:d4:62:33:f7:dd:d2:82:4c:d4:5b:
         4f:8a:48:cd:1e:99:8c:2e:0a:0d:2c:46:9e:1a:e8:1d:1f:23:
         2b:ec:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:03:05 2024 by rpki-client on console-ams.rpki-client.org