Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File:                     NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier:          HBsSiFtnFlq8SZmhYcY4+pJUQQDLXXG/t3uzwBPZtTo=
Subject key identifier:   8C:B5:8B:5C:22:ED:B8:91:21:4A:38:B9:98:05:F8:EE:41:85:7D:FE
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer:       /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial:       019369D897AD510C10D40E97EF94B18ED646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number:          0E7A
Signing time:             Tue 26 Nov 2024 19:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:22 +0000
Files and hashes:         1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: BCJSlozdlhZovPoKrX8HIOxv1Zy+VhCxOP5VpWR1dTw=)
                          2: eZTV43h-dhm2H5hXCSDi1aYvGIY.roa (hash: lOllEi8XPgyfqXg4rcbc5UDmGjN0mYWty1af5ireHE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:97:ad:51:0c:10:d4:0e:97:ef:94:b1:8e:d6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
        Validity
            Not Before: Nov 26 19:00:22 2024 GMT
            Not After : Nov 27 19:00:22 2024 GMT
        Subject: CN=8cb58b5c22edb891214a38b99805f8ee41857dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:50:fd:1f:8b:c6:e4:1a:d7:99:07:c9:1d:
                    28:41:b2:72:ed:40:f1:0c:20:d4:32:ea:f5:56:fa:
                    04:a4:9c:4c:45:09:24:75:7a:e1:3f:a2:64:b2:80:
                    01:c7:a8:e7:ff:e4:1b:5c:04:be:05:59:2a:b0:d1:
                    7d:8d:90:0d:cf:dc:aa:95:8a:a8:b6:70:1c:0a:66:
                    25:53:4a:ef:4c:94:5c:20:db:bc:0f:d5:1d:4f:5e:
                    71:9c:4f:97:9f:2b:6c:f4:25:d9:b8:b6:cc:6c:81:
                    75:3a:a7:9a:d3:07:7c:df:8f:0d:e0:47:35:3b:aa:
                    c2:cb:f7:40:a3:57:5b:b0:f6:2b:af:ee:83:96:1c:
                    83:ea:60:94:95:ff:98:7b:b1:62:05:84:e2:79:ee:
                    c9:5f:6b:74:e2:75:2b:cb:3f:ac:1a:8b:88:45:c5:
                    64:bf:ae:0f:3f:f4:aa:27:48:28:ce:fa:25:6c:44:
                    8f:74:e9:69:a3:13:98:b3:68:54:26:6a:7c:2c:05:
                    52:e4:65:52:4d:91:02:9b:0b:f9:3b:ce:9a:0c:6d:
                    1e:71:2b:76:c9:29:72:3a:79:bf:5e:06:fa:77:1a:
                    78:9d:6a:de:aa:71:5f:f5:5e:eb:bf:80:72:36:f7:
                    ef:07:e2:32:38:6a:3b:f7:ce:7b:44:b6:d4:3e:7b:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:8B:5C:22:ED:B8:91:21:4A:38:B9:98:05:F8:EE:41:85:7D:FE
            X509v3 Authority Key Identifier:
                keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:f3:d9:b0:a7:51:98:14:aa:b1:0d:79:44:db:26:be:84:
         18:c2:3c:e8:07:e8:2f:df:b1:5f:a2:5d:29:e8:0b:bd:54:7b:
         f3:68:60:7e:7d:29:59:ba:2f:a6:f8:0e:78:73:c5:11:c5:19:
         c5:d2:3e:47:79:69:20:3e:71:09:f5:f0:e0:4b:32:e5:86:98:
         37:c6:89:e8:4f:a5:0c:e6:07:26:6a:ab:23:2d:ff:61:b7:bb:
         65:f7:bf:24:d4:1d:16:d1:d3:e3:32:91:e1:5b:fa:9c:ce:1a:
         b3:cc:7f:42:40:40:c3:08:e2:ed:df:08:de:c5:6a:0e:10:60:
         36:3b:3d:09:94:3e:78:a7:89:ec:5e:51:d2:5f:54:94:96:3f:
         24:21:7a:40:5e:e2:a8:0c:e7:0f:8a:09:06:65:76:61:51:6c:
         ef:93:2c:f3:b3:4e:1e:de:ff:24:6f:bf:10:84:9a:2b:31:dc:
         6d:5e:12:a7:31:16:77:23:73:73:e4:6e:e2:66:5f:61:6d:2f:
         88:cc:ef:47:97:42:51:f3:36:1e:4a:ac:72:35:7b:a9:8d:fc:
         6d:ed:30:93:10:38:27:81:f2:df:d8:1b:a3:d5:5f:3b:6a:0a:
         f9:7a:18:e9:79:ee:be:5f:51:20:d8:15:ab:96:21:af:1e:8c:
         88:c8:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:22 2024 by rpki-client on console-ams.rpki-client.org