Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          21yRTIKNN4OY+Ti4n/bTtSd/mW6m9w4WgLLl3qeUVe8=
Subject key identifier:   B5:98:7E:C8:10:1F:FE:DE:D5:DF:64:BB:98:BB:36:11:2B:3E:E1:1F
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       0193598A029521614032386BD00DE7B26268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          13B5
Signing time:             Sat 23 Nov 2024 15:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:36 +0000
Files and hashes:         1: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: zKJFbsiHhrx9+RwhGr7RUAPI1fTyC4cS6td8mgI+HZ0=)
                          2: PpJKwN7NrRhqxtfbOdE96xhI2LM.roa (hash: LJgI8TDpy4E9wZYDWURUXDyjdicwy6Ekek/CXlAIx0Q=)
                          3: Tnmwf58ZqiaSDbieiWisiJYOhdY.roa (hash: LsqUvWFvTKzgt4fEhCi44TOqnGXOLJAnWVNFSVMbUmo=)
                          4: Y924OVgloYlMoRdOWJ-EwA1bblQ.roa (hash: bUDa5iut7/Z0Xqm0fs3CLvy6ChJwyNoaz3TbedH3qpk=)
                          5: fVarUzhB1EXD0hzATQm55VPODDI.roa (hash: V0vnTonOo330FM0dDDRwKoTgYxb2Gc42y/VBCoYsKXo=)
                          6: zr2z9Od-TcJgIaOcguHaM377x2M.roa (hash: UxWczV8XLsUi0S8tvrZZEXSlN5BGbRp5dzqmjWk9KRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:02:95:21:61:40:32:38:6b:d0:0d:e7:b2:62:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Nov 23 15:00:36 2024 GMT
            Not After : Nov 24 15:00:36 2024 GMT
        Subject: CN=b5987ec8101ffeded5df64bb98bb36112b3ee11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:8f:bc:05:b9:38:c7:e8:07:f0:38:6a:45:
                    15:ef:2b:63:5b:db:33:c8:df:72:f1:3d:e8:8a:ae:
                    2f:1f:1e:ab:27:76:0d:b6:82:8d:04:96:bc:dd:57:
                    9a:4b:9c:c5:36:63:ea:31:27:b5:78:71:dd:1d:2f:
                    af:ea:d8:1d:b2:60:ae:26:70:c5:c4:5e:9e:f5:fb:
                    67:80:0d:4e:f5:bf:7f:6c:dc:8b:53:ac:ff:89:bd:
                    b8:82:a6:43:80:71:ec:a1:94:57:40:aa:ab:9d:7c:
                    75:93:e8:e6:4b:7d:b9:cf:07:ed:16:37:f5:bd:bd:
                    2d:ec:75:32:c3:49:9b:dd:90:ab:5a:10:a3:6f:c8:
                    b4:2f:1d:54:34:cd:d4:6d:3e:7c:79:80:bf:17:9f:
                    6f:fe:06:2c:b3:0d:89:8e:a4:85:12:ea:21:69:79:
                    fc:40:0e:13:fe:79:67:c8:a8:8b:38:7a:1a:46:30:
                    42:3c:22:41:46:45:0e:51:71:de:71:0b:52:0a:bd:
                    eb:8b:b9:2a:ea:c4:7f:27:5d:66:48:d7:a9:41:c8:
                    bc:ac:d4:ef:c7:44:7b:36:3f:ae:1f:3f:c7:26:25:
                    d2:b9:c9:16:07:d9:c0:63:62:b5:7d:01:eb:7b:6d:
                    3f:20:78:16:40:44:0a:02:48:e9:16:95:4c:f0:63:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:7E:C8:10:1F:FE:DE:D5:DF:64:BB:98:BB:36:11:2B:3E:E1:1F
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:d3:36:13:5b:89:41:78:51:91:c5:41:d9:37:b4:17:22:5d:
         24:a9:0a:f6:ea:e2:2e:01:8c:0b:65:c0:17:df:3d:cc:22:15:
         26:ba:14:87:e9:f4:ef:c4:cc:05:bc:30:90:fb:f9:d1:5e:2d:
         b9:80:f3:0a:b1:36:f0:e4:0d:3d:87:82:f6:97:b2:35:7b:7f:
         1f:c5:29:51:d4:76:8c:43:72:df:7d:a6:36:b6:ac:82:fd:68:
         55:30:4b:ab:bf:36:06:8e:ee:8a:a3:aa:f4:ad:8a:92:35:16:
         9c:42:18:85:b3:1d:1c:a2:dd:eb:3f:5f:c1:64:27:dd:aa:98:
         64:bf:35:12:4c:b3:a6:56:9a:f5:79:1c:24:ae:19:d3:d7:e5:
         8e:92:21:83:44:d9:52:c5:20:35:70:68:e4:99:35:a7:15:56:
         ec:01:25:f1:85:b7:81:5e:23:00:16:43:85:75:d0:e6:18:c6:
         13:fc:5b:9d:b9:83:6b:41:00:5d:e4:a8:c0:77:55:88:9d:88:
         74:2f:e4:a0:d3:34:9e:9f:4c:83:80:0d:c3:0d:57:d3:a1:0d:
         5f:e7:72:9e:73:33:4e:ea:6a:bc:fc:7e:71:fa:ff:a1:f6:dd:
         76:35:17:3c:f9:b1:ef:38:eb:07:21:22:03:41:f5:7c:eb:3e:
         ab:64:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:17 2024 by rpki-client on console-fra.rpki-client.org