Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File:                     NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier:          H2lOUay8+7byZ8j9Pzag4KIqO7fx3jOzlTxOA/Yjq/I=
Subject key identifier:   8A:43:2C:DE:0B:E5:D5:C8:40:2E:A3:9A:E6:0A:A8:E3:5D:84:46:E2
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer:       /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial:       018F8891DA330B118A06C6B14D9447A59797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:10 +0000
Manifest this update:     Fri 17 May 2024 22:00:10 +0000
Manifest next update:     Sat 18 May 2024 22:00:10 +0000
Files and hashes:         1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: Fuf7Byd/7UMhfMdAIp3A8UNYtYOZwIEcUnE1JtA+C2E=)
                          2: hbOKd48_O5kgb12UFtw5mwyxIrA.roa (hash: bcVbtkwyZd7Esqow1XPv6GvgWcfmItLEmjilfJJmgfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:da:33:0b:11:8a:06:c6:b1:4d:94:47:a5:97:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
        Validity
            Not Before: May 17 22:00:10 2024 GMT
            Not After : May 18 22:00:10 2024 GMT
        Subject: CN=8a432cde0be5d5c8402ea39ae60aa8e35d8446e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:a7:4d:ab:2c:92:27:05:8c:21:05:67:f3:
                    f4:a2:a3:7e:3d:9a:fe:23:3e:ac:b4:4e:50:39:f5:
                    19:bd:45:9d:70:0a:09:74:bf:1d:05:3e:f2:02:9c:
                    a4:33:92:c5:1a:2a:ba:05:86:3a:d3:c3:0c:14:1f:
                    9f:75:1c:41:b7:ff:c5:12:57:56:29:ee:4c:ad:e0:
                    58:a5:bc:c4:d2:78:8f:77:45:c9:ba:86:7d:d6:74:
                    b4:21:2f:88:a2:4c:54:aa:e0:9a:a8:b1:1b:a7:c0:
                    ac:bb:ea:1f:7d:18:0f:4b:88:28:da:fe:85:bd:3e:
                    19:99:05:28:29:af:ed:5a:8d:27:6a:e5:90:68:ec:
                    a3:5b:43:05:3d:a4:85:ad:b7:5b:13:35:5f:03:06:
                    68:fb:2d:b8:01:ac:b4:5e:3c:9d:55:14:25:d9:b8:
                    b9:3c:38:f4:91:04:a8:56:ee:0a:79:69:98:d1:1b:
                    c9:27:f3:5d:ec:67:03:f0:f7:37:1d:a9:99:0e:47:
                    23:5f:77:f4:35:5d:d5:6b:5d:cf:8f:25:cf:12:40:
                    dc:f0:f8:af:b1:a4:d9:65:67:7c:f3:55:b8:40:3d:
                    58:1e:49:89:a3:e5:04:e1:62:bc:91:23:19:0d:c6:
                    0e:57:37:59:60:0b:11:33:ba:b5:ec:b9:32:c8:f1:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:43:2C:DE:0B:E5:D5:C8:40:2E:A3:9A:E6:0A:A8:E3:5D:84:46:E2
            X509v3 Authority Key Identifier:
                keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:76:b1:22:92:19:ad:24:ac:ea:8d:33:c4:78:8c:cc:b1:
         86:48:9e:5c:61:e1:00:08:1e:42:46:8d:8f:a8:db:8e:21:03:
         ad:3d:e6:f5:2e:8c:d5:5e:fe:59:01:e1:59:c4:78:7a:3d:0d:
         e3:da:82:f9:64:cd:2c:60:eb:c4:ff:41:5c:23:e8:b6:a4:5f:
         bf:9c:81:74:5e:37:cc:32:d2:f7:94:04:0f:d3:66:3b:12:c3:
         53:24:a9:81:0e:b0:c0:08:7e:6b:6d:e2:a0:a6:a9:12:65:de:
         22:c8:de:94:3e:e1:e7:10:7b:6b:09:d2:1e:f6:6b:b4:2f:11:
         8e:66:f1:89:02:61:6c:50:9b:58:f0:eb:01:39:49:f7:3d:45:
         31:ce:53:d8:0c:f4:e3:64:58:5a:c2:da:26:52:93:ba:c6:c9:
         cb:51:4f:cd:de:ac:e0:19:db:cd:5a:69:ec:12:f0:81:75:e2:
         fd:bf:99:9a:58:5f:cb:da:f9:b4:d3:41:b2:c4:1f:fc:27:bc:
         da:5b:d9:79:08:e4:d3:1f:da:3d:4f:6a:03:2d:9d:d0:4c:43:
         cc:73:1d:df:c8:9a:85:a6:92:0e:f1:70:4f:51:40:d7:de:ea:
         6d:38:31:30:17:ec:c4:57:cb:f9:50:13:d1:c0:e7:b9:55:73:
         4d:fe:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:57:42 2024 by rpki-client on console-fra.rpki-client.org