Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File:                     NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier:          yTsV/hD2aMVi2/JiQ0Gz9VEDR1cHGm05DUVphGKkXS4=
Subject key identifier:   E1:B8:5A:42:EA:EF:C0:4F:C8:4B:E3:7C:E2:5E:F0:46:B2:EA:DA:3E
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer:       /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial:       019356F6D8B9C778D99DBCBD3F9147367EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 03:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:38 +0000
Files and hashes:         1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: l2m2apdHJq++dr+gW2fXNt3CP6skjYyHi0Yz3cMkXWE=)
                          2: bt1xLFkblT5HtIL9wXPjqnC8pBA.roa (hash: CUwckqrlnWlbWRSXDH7QNyl/JRmqNysep9H9G+sEQ/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d8:b9:c7:78:d9:9d:bc:bd:3f:91:47:36:7e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
        Validity
            Not Before: Nov 23 03:00:38 2024 GMT
            Not After : Nov 24 03:00:38 2024 GMT
        Subject: CN=e1b85a42eaefc04fc84be37ce25ef046b2eada3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:63:3f:50:b0:a5:f4:76:04:3a:01:39:7c:
                    a9:e3:72:49:7d:a7:da:5d:19:9c:56:19:5a:03:3a:
                    ee:7d:c8:63:2a:ec:a3:c3:e9:c3:e4:5f:bd:e8:9b:
                    b7:14:0b:de:66:b8:d0:d2:51:5a:b1:a5:15:a9:52:
                    91:97:36:1e:e5:b2:77:7d:2a:66:f9:1a:99:ca:a0:
                    87:c7:b6:04:d3:09:c3:46:47:27:9e:4b:4f:4e:57:
                    72:06:69:6b:84:ba:2f:a7:dc:2d:ce:e1:70:1a:02:
                    ce:1c:eb:db:28:da:dd:39:4e:00:c4:a7:45:ad:71:
                    ee:5a:fd:b4:ff:1d:76:53:a8:40:ec:58:d7:6c:cb:
                    95:dd:7a:c0:89:9d:37:b6:18:9f:5b:cd:ed:38:a4:
                    d9:e4:65:22:0c:a9:ed:5b:eb:48:12:5f:20:1f:22:
                    70:9a:93:6c:ba:e9:f8:a4:36:7b:e6:5e:af:8f:52:
                    85:c4:42:a4:6c:6a:e5:41:e1:ea:09:14:c4:61:84:
                    28:b3:0d:11:d5:7a:2b:1a:3f:e9:67:30:cb:9a:c3:
                    37:46:2b:9f:2f:19:66:81:70:25:fd:8e:57:04:cb:
                    c7:3d:d5:3b:4f:07:30:e1:fb:f8:64:f4:2f:bf:80:
                    3d:02:ff:09:e8:8c:c8:36:76:f8:ae:d0:e4:b0:6f:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B8:5A:42:EA:EF:C0:4F:C8:4B:E3:7C:E2:5E:F0:46:B2:EA:DA:3E
            X509v3 Authority Key Identifier:
                keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4e:bd:2a:8f:52:af:e2:14:87:8b:c2:f8:af:9f:ad:a4:78:
         12:5d:2b:e9:b2:1e:4a:15:38:d4:7c:cb:6e:f5:17:bf:5f:76:
         0e:92:0f:18:9a:be:55:55:4f:35:fe:51:0d:a9:c1:cc:73:c7:
         37:cb:cd:e1:cc:30:08:c5:64:c7:88:30:ac:eb:87:35:31:ae:
         95:0a:75:62:23:f8:51:30:2e:78:2b:ab:f2:e2:df:ef:89:37:
         0d:9c:3f:5a:8b:f9:db:28:dd:41:5b:8c:c1:8b:bf:7d:ae:a9:
         b8:11:7f:5a:91:9d:f0:d0:d7:83:10:61:6e:50:4a:b9:c9:a0:
         a4:7c:48:a8:2d:0c:dc:02:b6:9e:1b:88:be:06:5c:35:f8:18:
         c7:73:d2:bd:28:e0:8a:14:a6:0d:1f:27:75:6f:fa:e3:0d:64:
         1c:6e:5a:76:ff:eb:43:3b:00:b0:06:dc:4f:09:4a:eb:29:5a:
         66:4f:26:db:38:7e:73:bf:b1:f6:e2:15:65:ca:06:43:09:f5:
         21:10:fc:b5:cd:b3:ee:8f:3a:2c:3a:b5:77:81:e7:c4:2f:f0:
         e4:81:da:39:16:da:76:a7:da:e3:ca:bb:c4:dc:6b:5b:f8:e3:
         fc:43:79:91:d1:4f:f3:59:13:34:24:ec:2a:09:21:b3:5b:11:
         f3:c1:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:26 2024 by rpki-client on console-ams.rpki-client.org