Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File:                     NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier:          CM0MBmOVOxrC4PiBKg7c7hMkO192TLMFYoFTcbZbD/U=
Subject key identifier:   4E:8E:B2:EF:BB:94:52:17:38:AE:7C:19:AA:82:9A:A3:CD:3C:7D:69
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer:       /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial:       019368FD21B9DAC708ED1A0B57370F189E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number:          08EF
Signing time:             Tue 26 Nov 2024 15:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:39 +0000
Files and hashes:         1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: fEMZTFJrtBc5twkiDjxZ3YU+D08LzynHSA1UMI7iQ14=)
                          2: uSd010I99Uco3GYISmcxGeE48qw.roa (hash: z50p2xHxn27kYulFsRN+86sJUom892QrkbvEPOpqs4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fd:21:b9:da:c7:08:ed:1a:0b:57:37:0f:18:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
        Validity
            Not Before: Nov 26 15:00:39 2024 GMT
            Not After : Nov 27 15:00:39 2024 GMT
        Subject: CN=4e8eb2efbb94521738ae7c19aa829aa3cd3c7d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:9a:c1:77:82:00:29:0d:08:a0:70:a1:92:
                    a8:22:85:e1:d6:fe:41:4d:25:69:63:4d:be:99:0e:
                    4e:a4:20:fe:ab:be:da:d8:59:28:e5:84:64:3b:ec:
                    fb:d2:1f:e5:e6:ac:c2:56:12:33:e3:dc:57:15:ab:
                    07:cd:91:7a:46:70:7c:4b:c2:bf:71:3b:02:82:92:
                    18:91:94:01:c4:a7:c7:dc:fe:c8:e7:e9:bf:04:55:
                    bb:ce:7f:fd:49:aa:fd:0c:ca:34:bf:e8:8a:30:94:
                    ea:4b:37:f5:28:ed:38:f0:d9:ac:09:d8:0e:c4:d3:
                    7d:71:dc:e3:50:7d:54:80:10:8c:be:b7:5c:1c:c9:
                    d2:75:45:60:7e:af:84:4c:30:59:58:ec:5c:1c:a7:
                    83:2a:e8:c0:34:fb:98:c5:e4:d5:4e:11:90:9e:a8:
                    68:a4:fb:27:bb:23:9f:2a:64:c6:69:63:7c:f7:3d:
                    b5:24:aa:c3:a7:b7:b8:40:e9:9d:81:fd:10:a6:f5:
                    f8:6b:c8:06:51:26:ee:65:fa:7e:6c:d9:b4:39:c0:
                    43:d4:b2:31:b2:d7:e3:b1:4e:f9:b5:2b:79:15:29:
                    a5:84:28:6e:b8:05:c2:e3:2c:15:7f:41:b0:e7:0a:
                    c1:55:a4:25:f2:2e:e6:23:67:1a:47:a1:b2:14:ae:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:B2:EF:BB:94:52:17:38:AE:7C:19:AA:82:9A:A3:CD:3C:7D:69
            X509v3 Authority Key Identifier:
                keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:de:cb:90:ef:08:a9:11:b1:85:eb:c2:22:a6:e2:12:35:
         17:90:33:bb:40:67:9b:c4:5f:a5:ed:49:cf:03:66:a1:95:51:
         db:a3:4b:cb:3a:cc:71:21:4c:62:78:1e:5d:57:34:ed:99:31:
         2f:05:4e:e4:aa:17:70:58:bd:92:69:ef:70:50:b4:4c:77:e6:
         e5:f0:71:b9:a4:03:ec:17:1c:56:a8:a6:5d:37:2e:60:d2:2f:
         75:e0:54:33:c4:5a:46:b5:78:79:69:2f:9a:19:f3:38:4c:82:
         ce:19:e6:f5:14:bf:68:8f:59:5b:93:d2:36:f1:69:94:73:0f:
         75:a0:66:a6:b5:82:d7:1f:2e:a4:0e:dd:ad:e5:6a:a0:6f:ae:
         9b:b6:27:0a:5d:ed:ff:8c:5b:d7:4f:76:94:a4:c1:31:7a:0f:
         b5:4f:86:4e:5f:1a:4e:70:78:72:96:cd:86:4d:05:56:41:86:
         06:5b:45:95:c2:0d:d6:8c:f1:75:2f:dc:07:49:1f:09:b4:9b:
         14:48:a0:a7:fe:95:15:70:d1:ec:84:55:de:7a:66:28:8b:8e:
         89:b3:fd:f7:74:3d:49:8f:3c:8f:b7:44:ff:96:7e:c0:34:74:
         86:57:a7:06:df:fa:db:a8:95:ab:bb:b6:db:be:b1:64:57:a6:
         75:77:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:56 2024 by rpki-client on console-ams.rpki-client.org