Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File:                     Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier:          cyPiZX50IxIt+I86IPM864uLqAAT5s60txwHFtvbYPk=
Subject key identifier:   19:D3:7B:EF:CE:7E:C4:C9:D9:9B:8A:AF:E9:F6:00:C6:49:06:6B:34
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer:       /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial:       019238B853BAB32D1E7407347B567CB7F5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number:          12E5
Signing time:             Sat 28 Sep 2024 13:00:56 +0000
Manifest this update:     Sat 28 Sep 2024 13:00:56 +0000
Manifest next update:     Sun 29 Sep 2024 13:00:56 +0000
Files and hashes:         1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: i/cJEDAXwAfMr85EIKvxdDOmsmN+aR9cJqMuEnz5BJs=)
                          2: qWVliVVBTgtWvR6S995EryD8mZI.roa (hash: WX531gkMKeUHO0QFAvHR0PWkW+9FO+3+cojlfjhIlRQ=)
                          3: z3kb1jI0-Ixp5Z--g2mZmMnrAug.roa (hash: 2aFKtjT180vdykdIF32MvNfBg3KCcJW8GWaXxjW2/CM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:53:ba:b3:2d:1e:74:07:34:7b:56:7c:b7:f5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
        Validity
            Not Before: Sep 28 13:00:56 2024 GMT
            Not After : Sep 29 13:00:56 2024 GMT
        Subject: CN=19d37befce7ec4c9d99b8aafe9f600c649066b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:c8:af:1e:49:a1:48:5e:42:3c:30:7c:87:
                    f8:49:3f:73:4e:4b:e4:f5:ab:a2:04:57:e5:84:c1:
                    61:c7:0e:10:4b:ef:0e:81:97:01:07:fb:ce:81:db:
                    4b:af:d6:89:90:86:12:a1:ff:dd:27:32:91:7a:f2:
                    1a:68:96:37:76:93:bb:50:da:a3:42:f0:b3:e6:23:
                    7f:4b:6c:8c:91:81:15:10:38:b0:fc:d8:3f:a6:f1:
                    ca:23:88:53:27:f8:d4:47:3e:0d:d6:d2:99:82:58:
                    f8:70:df:cc:9b:5c:fa:57:8d:96:31:58:a4:35:1c:
                    0c:90:1e:83:2a:95:7a:22:ac:fe:35:98:07:52:ea:
                    1f:82:e6:a4:3d:4c:40:72:6c:c7:b6:30:b7:ef:ce:
                    91:6b:21:81:5e:3d:29:ff:d2:dd:7f:18:19:d0:b5:
                    54:f8:65:f1:1d:97:15:8e:78:73:28:47:27:91:29:
                    b2:cd:15:2d:84:20:93:fb:0b:11:2f:e1:68:39:1e:
                    63:27:31:d9:2d:f4:d9:07:d6:90:44:50:03:cf:cf:
                    0a:ee:bc:2f:8e:76:e0:9b:d9:40:35:cf:c7:25:31:
                    37:82:64:43:07:09:83:ec:5b:63:5b:61:f4:4f:a1:
                    7f:26:72:e2:44:ad:cc:c8:7a:42:87:d2:02:98:3b:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:7B:EF:CE:7E:C4:C9:D9:9B:8A:AF:E9:F6:00:C6:49:06:6B:34
            X509v3 Authority Key Identifier:
                keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:1c:fb:29:ff:f2:d6:cc:75:1a:8c:1b:f8:f3:5c:c7:4e:
         18:e8:e5:e0:21:b2:b8:fb:33:16:aa:df:d4:f9:8a:a1:20:9d:
         04:c1:bd:9f:27:71:db:66:d8:b0:93:aa:73:3f:7b:72:e8:09:
         f0:e8:a9:6f:f7:41:7c:bf:25:ae:b9:fc:8a:fd:e1:ce:62:4e:
         ed:30:1c:e9:fc:4c:fc:32:59:92:25:09:32:1f:de:a1:b0:9c:
         2c:07:5e:f4:48:27:47:f9:51:ad:f8:0c:e2:fb:97:e6:e3:f3:
         65:b9:3d:a5:9f:e1:09:00:e2:06:10:9d:f1:8f:3c:fc:7b:97:
         c0:c2:63:f6:c7:f2:2d:cd:fc:98:6b:ab:b0:b2:33:ec:0c:41:
         61:38:b8:11:99:c7:3c:6b:c1:08:28:ab:18:d8:3a:79:8f:e2:
         f6:f4:ef:eb:13:78:98:f7:a2:cd:2d:7a:02:9c:c6:08:50:7f:
         17:de:63:97:00:b4:c5:06:17:d3:fe:84:10:a2:a3:17:1a:81:
         e8:ba:3b:49:0f:28:79:7a:65:b8:44:9a:21:dd:e9:39:67:1e:
         69:42:d9:dc:8b:03:e8:5b:20:8a:e1:ae:92:9c:01:a7:d1:e1:
         80:52:b4:e2:42:de:0b:5e:f6:87:a5:03:84:68:5e:fd:60:e6:
         df:4f:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:52 2024 by rpki-client on console-ams.rpki-client.org