Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File:                     NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier:          4LFez526gAs1Dvbhnb83N92H0N8rGUeh2vKXUanHWxE=
Subject key identifier:   B0:1E:85:79:ED:58:AE:57:12:96:A2:C4:20:98:C5:43:D2:13:73:44
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer:       /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial:       018F874B48F19F4F73A958688C037B198150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number:          0BDB
Signing time:             Fri 17 May 2024 16:03:28 +0000
Manifest this update:     Fri 17 May 2024 16:03:28 +0000
Manifest next update:     Sat 18 May 2024 16:03:28 +0000
Files and hashes:         1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: UwfldTnmrUfjGmph6tZYcYQ9X42SozxMDhW8UfeJ5G8=)
                          2: eqhReVJTlY_C_xmKTdiAHpsjp2k.roa (hash: 8R66GB5XeslDd3ICxIE78YHmDgzaezPZTchKnZuHBtw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:48:f1:9f:4f:73:a9:58:68:8c:03:7b:19:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
        Validity
            Not Before: May 17 16:03:28 2024 GMT
            Not After : May 18 16:03:28 2024 GMT
        Subject: CN=b01e8579ed58ae571296a2c42098c543d2137344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:76:d3:e4:32:43:f7:2b:18:0f:d3:35:48:
                    0d:21:de:b8:52:51:c3:3f:b6:ce:ea:f4:80:50:ba:
                    6a:02:70:cc:32:27:2f:6e:1c:ee:ff:25:b1:3c:bc:
                    d3:f9:53:c5:6d:ca:a1:9d:da:df:56:90:3c:9c:85:
                    1e:73:16:50:c1:86:e7:ff:fe:f9:24:6e:be:39:ee:
                    6e:7e:72:f2:f6:17:92:a4:19:83:12:93:45:90:86:
                    42:52:9f:07:40:54:1f:1a:2f:eb:72:c2:d1:d9:14:
                    d0:24:93:21:06:cc:ce:97:c6:5b:2b:70:2a:a2:7b:
                    b9:8a:76:8e:6a:93:d1:d0:4e:92:6d:5f:ba:3d:a8:
                    37:ff:63:77:0d:56:0a:cd:1a:f0:29:62:4e:87:6c:
                    13:a0:b6:8f:4e:32:c6:68:dd:92:23:7c:86:d5:34:
                    7d:7b:e2:9b:07:3f:0e:0e:5f:91:7b:c5:db:40:70:
                    00:a1:66:92:a9:c7:c3:55:99:9e:30:f2:cc:96:ba:
                    9e:71:8e:be:0c:90:a0:a6:7c:dc:33:28:07:48:17:
                    bf:4a:4f:6a:5d:d2:5f:e7:63:4f:c5:8b:01:f1:e6:
                    f3:05:59:96:54:5f:63:cd:f8:63:33:1e:35:07:94:
                    aa:9a:b3:22:dc:94:54:59:ba:d3:f2:b0:8b:19:95:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1E:85:79:ED:58:AE:57:12:96:A2:C4:20:98:C5:43:D2:13:73:44
            X509v3 Authority Key Identifier:
                keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:ac:78:d2:a7:7b:6e:0d:43:26:5c:d0:97:18:2c:cd:07:
         dc:5e:ee:51:02:dd:0e:83:ba:1d:a1:c0:01:e3:0f:79:59:e4:
         9d:14:63:0f:fd:d0:0b:91:f6:9b:fc:06:e2:16:57:c8:92:2b:
         79:82:bb:6b:ce:aa:74:0d:5b:29:c6:27:bd:75:81:c0:66:34:
         ee:12:d0:e7:2d:c0:ac:b5:cd:39:16:85:f4:2c:38:c7:04:3a:
         36:ed:fc:d2:1a:63:27:67:30:c5:23:4c:80:35:71:d5:35:b0:
         7a:02:0a:3f:67:9c:b7:f7:92:5c:bb:d3:52:d8:3c:55:94:03:
         f4:ac:b4:75:ba:a4:77:90:f9:dd:cd:7b:b1:a4:27:17:f5:8a:
         ad:e5:5f:13:8b:8e:9e:ab:12:05:01:89:8d:60:a5:07:af:36:
         44:b4:ef:27:f2:f1:23:74:ff:03:7c:50:47:8f:6f:34:14:36:
         0b:7a:58:de:06:af:cc:ea:87:ef:27:1d:cf:98:d9:c1:36:e7:
         1f:65:64:89:c0:a5:ab:b0:3a:de:af:9a:6f:85:09:78:12:f0:
         53:c4:b7:8b:9e:e5:c9:65:64:31:5c:e6:b8:dc:ee:d1:67:2e:
         4b:fe:01:0a:bf:14:b8:06:16:6c:84:26:41:eb:a3:17:41:3a:
         ce:ea:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:38 2024 by rpki-client on console-ams.rpki-client.org