Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File:                     NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier:          jQ0t1rji07KUAwnRBFPohq0iEOXmA6rwxe/4jtSaI9o=
Subject key identifier:   A9:56:AC:6E:99:20:39:35:2F:89:87:A6:FF:C2:A1:B4:7E:DE:74:CA
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer:       /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial:       01935688F2DC95B9B4DA436AD7A8ACF4E75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number:          0D6B
Signing time:             Sat 23 Nov 2024 01:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:35 +0000
Files and hashes:         1: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: tg8NZRXx15upByHnJ32cKy1nrKgfDfyQDaYOS3YB1hE=)
                          2: QSTDBe_OkfhehLr-MUEN1rXYCyM.roa (hash: 695BcYv5tl3OeHB6c01DB33BURZq+u6IfDQZSJVfSMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:f2:dc:95:b9:b4:da:43:6a:d7:a8:ac:f4:e7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
        Validity
            Not Before: Nov 23 01:00:35 2024 GMT
            Not After : Nov 24 01:00:35 2024 GMT
        Subject: CN=a956ac6e992039352f8987a6ffc2a1b47ede74ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:b7:97:5d:bb:2d:0a:ee:36:93:3f:78:51:
                    11:bc:c1:e5:b6:9f:31:6e:54:42:1b:52:60:bb:87:
                    f8:50:34:a6:30:90:d5:9e:bd:a7:5e:d3:34:25:6f:
                    40:8c:82:29:f2:e3:ad:a0:c2:85:4e:e0:7f:14:81:
                    a1:a1:78:8f:25:42:08:b9:6b:c7:07:cf:75:8e:d2:
                    2e:66:a6:05:03:ae:41:c9:b6:c8:2a:a9:35:5a:de:
                    77:da:b6:fc:19:74:32:39:b6:be:75:21:2d:84:ee:
                    57:fa:bb:a5:c3:d3:85:75:f3:68:d4:b6:c8:89:d1:
                    8f:8b:22:71:9a:6b:c5:43:eb:fa:a5:17:0e:fd:c3:
                    0c:5b:01:8f:89:78:22:55:e2:5f:3c:4e:96:33:0a:
                    0c:15:4d:61:56:10:59:76:71:50:72:4a:a9:e1:76:
                    e0:2d:8b:ae:d9:a2:49:fc:af:04:88:3c:d0:07:b9:
                    b2:fc:41:77:45:de:fc:a4:bb:7f:32:18:96:bf:00:
                    89:66:5b:ad:20:9a:03:01:f1:6f:ca:6d:60:cf:6a:
                    2a:00:60:e1:29:fe:bc:4d:10:56:aa:23:da:4d:41:
                    24:80:82:a1:ae:1a:db:cf:22:1c:58:85:bd:ba:d4:
                    91:8c:23:b2:5c:1e:97:12:3b:ef:f3:82:7d:a6:4b:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:56:AC:6E:99:20:39:35:2F:89:87:A6:FF:C2:A1:B4:7E:DE:74:CA
            X509v3 Authority Key Identifier:
                keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5b:e5:b3:70:08:3b:30:62:04:6a:35:a5:90:49:73:cb:1f:
         40:31:15:17:46:10:79:25:cf:d1:fe:91:eb:12:c2:7a:a3:be:
         c7:db:95:ba:a6:43:7e:da:ce:55:87:22:a5:56:6a:23:6d:92:
         37:78:dc:17:55:20:fc:59:d7:3b:63:bd:2e:84:70:5c:6b:76:
         1d:9f:e4:1a:b9:5a:22:1c:99:74:be:63:8c:c3:44:6b:d3:c3:
         cd:9f:12:f3:25:91:2c:19:bf:c6:29:89:66:e1:f3:a5:bf:06:
         d9:43:f7:70:9f:f1:b0:a6:a0:b4:81:be:bf:77:84:9f:c3:b0:
         7f:93:6b:b0:6e:fd:05:2c:80:01:7a:1a:03:9e:7a:68:d8:dc:
         fb:17:fc:df:ed:58:72:a0:02:42:5a:8d:7a:37:13:3e:90:16:
         73:9e:07:cf:a5:a1:3f:e2:bb:42:51:15:96:3b:41:e5:5d:c4:
         9b:47:41:8f:7d:35:d9:ce:06:85:c8:eb:c1:5b:55:23:c8:42:
         3b:3c:4e:5f:06:f3:f2:2d:16:47:2e:f4:1e:bf:9b:f0:10:94:
         36:54:99:aa:c8:a6:61:ec:8b:1d:9f:d8:09:cf:22:da:24:e8:
         f0:8e:b0:ab:b8:1e:db:86:dc:a1:c1:07:b8:5a:f8:ed:bd:e2:
         38:20:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:40 2024 by rpki-client on console-ams.rpki-client.org