Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File:                     NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier:          AvpQmDQWwAYyh0iMjCMyxsktaSeAmZUvIP18T/qjMuk=
Subject key identifier:   E0:78:44:22:02:D3:31:1B:FC:2D:FE:19:95:CC:6B:14:49:49:B2:81
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       0193553F3D233B0AFA708986DB5D9B91A71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number:          0A9B
Signing time:             Fri 22 Nov 2024 19:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:27 +0000
Files and hashes:         1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: e4HZY2sujbbjJM0KMDSnIcBgjTMKesqCRZBCTIZZQK4=)
                          2: dPTd3p9KMf4R-_jJOih7sM1149k.roa (hash: 0tbKnznFjv0Madv4i/cDvAijN7SgVKtH8AXlIcdKPBc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:3d:23:3b:0a:fa:70:89:86:db:5d:9b:91:a7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Nov 22 19:00:27 2024 GMT
            Not After : Nov 23 19:00:27 2024 GMT
        Subject: CN=e078442202d3311bfc2dfe1995cc6b144949b281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:4d:97:34:29:b8:84:bc:7a:33:cc:41:a2:
                    87:34:62:e3:15:7a:7e:cd:be:8d:6b:09:8c:20:43:
                    f9:fe:67:c8:c0:e8:13:42:ea:4c:9d:0d:1a:fd:68:
                    e5:21:0c:d3:d9:67:f4:f9:2e:93:84:36:d7:1f:41:
                    27:9c:d5:ae:95:f2:30:bb:d3:3b:ba:72:15:14:95:
                    bf:e5:41:cd:66:fa:18:66:89:da:a1:9c:0f:77:45:
                    39:a0:dd:64:1e:72:5a:cf:1c:33:be:8e:35:30:e9:
                    1c:48:73:e1:b4:50:85:45:98:cc:f3:91:0e:d6:d4:
                    7b:49:1e:b5:dd:18:7a:88:a0:81:3c:bd:a3:8c:66:
                    2d:19:ca:76:f7:63:69:86:a9:d6:ec:ec:60:88:19:
                    97:4b:f4:f6:29:a1:a3:d1:5b:38:c5:2f:0d:17:d5:
                    3d:cf:3f:79:dc:fa:50:96:bb:b5:49:1e:1c:c0:4e:
                    29:67:89:b1:c3:30:f2:9c:ee:33:81:73:ac:02:3a:
                    00:f7:79:8b:f6:82:a4:e6:28:6f:8b:d0:57:f2:e7:
                    7b:54:8f:77:6a:26:a8:ba:20:87:52:cb:58:08:3d:
                    ea:06:d6:14:83:6b:06:a3:7e:20:f3:d0:f6:b2:1a:
                    a3:77:97:a8:59:12:37:17:f8:72:48:38:7f:2d:78:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:44:22:02:D3:31:1B:FC:2D:FE:19:95:CC:6B:14:49:49:B2:81
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:6d:8e:a6:b8:e5:94:38:1e:c0:a9:ca:c0:7e:5c:a7:d1:
         2d:90:02:29:ee:b3:06:30:80:3a:2a:c6:f1:d1:66:e5:f6:07:
         92:90:f6:b2:54:fa:bf:f4:64:4d:8f:02:da:03:d3:f6:a7:95:
         bc:bc:c3:54:f4:af:b8:61:80:e9:4b:a6:c4:a9:0e:c3:c5:ae:
         76:7b:ef:6b:ce:97:42:04:bf:22:20:30:56:75:d5:dd:7b:f4:
         18:c2:eb:68:cb:56:77:8b:b9:76:1e:39:e8:ad:ef:a9:b4:72:
         21:2b:61:15:21:b3:59:46:fa:c7:59:38:ab:1b:fa:d0:92:7f:
         ee:7b:fa:e7:93:00:c2:37:c9:74:e3:60:dc:04:93:18:41:35:
         bc:00:a3:79:24:3c:77:6e:26:3e:03:d3:fb:39:a3:47:7f:a3:
         b7:12:2a:a5:5b:7e:58:48:55:37:cb:0d:35:a0:cd:52:17:fd:
         23:1f:dd:e2:f5:6a:4c:0b:bb:d0:b3:66:91:82:16:02:38:62:
         14:8e:70:a8:3d:fa:60:35:e7:31:15:33:9d:3b:e3:ea:95:c6:
         9f:17:c4:5d:aa:b7:1e:58:18:37:6a:3c:4f:55:01:45:14:f9:
         98:72:10:cf:cb:7e:3e:91:e6:c7:33:5b:36:33:02:66:66:49:
         22:b9:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:42 2024 by rpki-client on console-ams.rpki-client.org