Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
File:                     N4Dnho-7JhcXUGKl57nhwEnL33Q.mft (raw, json)
Hash identifier:          edLmleTGF6CdKa+lB3s23qnZqHrawStNyTsoAroiF2g=
Subject key identifier:   3F:78:94:56:7A:BD:7E:2F:B5:A6:E4:BD:74:72:26:CB:E9:A2:48:CB
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Certificate issuer:       /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial:       0193579BC5852A2DB7393FA92F44D9AFF7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
Manifest number:          080D
Signing time:             Sat 23 Nov 2024 06:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:46 +0000
Files and hashes:         1: N4Dnho-7JhcXUGKl57nhwEnL33Q.crl (hash: nY2IQJK5e25W4j+Pubsj4ylN2ta2EUl1hWuxnC4JLQw=)
                          2: zxlEwUWQfr2R9evisSY4_o06jyc.roa (hash: dnBvNrGyrkjezOcAL4atmQ30W4ObbQxgC2Fr8LOBxRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:c5:85:2a:2d:b7:39:3f:a9:2f:44:d9:af:f7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
        Validity
            Not Before: Nov 23 06:00:46 2024 GMT
            Not After : Nov 24 06:00:46 2024 GMT
        Subject: CN=3f7894567abd7e2fb5a6e4bd747226cbe9a248cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:f1:cc:13:ad:65:78:91:03:56:15:36:9a:
                    04:d1:8a:1a:03:82:94:98:57:16:9f:1e:1a:a5:a9:
                    3c:bb:3a:7c:c1:4c:69:e1:35:f1:5d:cd:ca:b7:ed:
                    8b:29:23:e6:ed:71:ae:1d:3c:91:a3:ff:90:95:00:
                    3a:40:dd:e3:c4:e2:8b:0a:3d:41:7f:4e:d2:dd:b7:
                    cd:3f:ea:82:62:b5:20:ba:ed:33:ed:a5:ad:a3:2a:
                    bc:9c:f0:59:06:d5:3f:26:97:e2:21:ef:10:de:e3:
                    75:1c:f0:c0:39:03:b8:d5:f6:96:10:81:51:9e:b5:
                    d6:2f:cb:e1:3d:3e:aa:d9:ab:13:ed:30:e6:27:ff:
                    56:04:e7:24:b9:bd:bc:d3:76:85:c5:e6:79:70:25:
                    2f:7c:cc:19:5a:5d:fd:20:7b:79:8c:b5:51:1e:9e:
                    d1:4a:a2:51:01:b4:2d:04:70:b3:eb:19:8e:75:d6:
                    eb:4e:18:65:bb:17:dd:25:22:9a:cc:f7:5d:14:7c:
                    29:da:ee:0a:fe:24:8f:24:e9:78:d6:1f:05:37:8d:
                    e3:30:b0:8b:00:ab:2b:c0:98:e9:fd:27:03:e3:bb:
                    a2:63:c0:7e:5b:67:00:57:8f:0d:eb:0f:f2:7f:4e:
                    b6:00:82:f8:a7:3f:56:c8:2d:f1:b7:83:b2:5c:72:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:94:56:7A:BD:7E:2F:B5:A6:E4:BD:74:72:26:CB:E9:A2:48:CB
            X509v3 Authority Key Identifier:
                keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:22:2f:ea:53:a7:b4:a7:fc:ba:5c:5d:b4:9f:8d:d2:98:7b:
         a7:75:5f:8e:66:8b:d5:cc:ed:55:5d:de:c3:54:a7:63:79:8c:
         1c:5f:60:86:46:cf:99:6e:50:b5:d9:73:b4:46:21:c2:f7:e6:
         4b:57:e0:8e:2e:dc:c6:53:8b:86:6a:94:a3:cb:20:7c:6c:37:
         40:1d:6f:a0:b4:a9:0a:b4:a5:95:50:46:7f:f2:a6:35:1d:3a:
         11:df:6b:95:7b:3b:ae:09:a2:18:47:5e:e5:42:62:28:29:47:
         24:63:62:1c:cc:41:84:ff:c6:56:29:d0:d3:36:1f:46:3d:09:
         62:2f:c2:ec:cb:67:b6:96:2c:78:3c:92:8d:cf:53:8c:3e:40:
         91:7b:50:a5:e9:57:f3:f1:c1:01:1c:8b:43:dd:66:7c:3d:0f:
         7e:d1:b5:20:ee:e7:81:0c:02:c8:05:0d:3b:11:b1:bd:2b:df:
         5d:03:b4:2b:5b:67:40:73:cd:c6:52:72:6c:e2:76:ff:00:cc:
         3d:b6:91:6d:a5:65:cc:d2:cb:cd:af:5e:6d:df:84:be:b3:62:
         7e:1a:88:08:90:8c:26:b2:4b:fa:a4:bf:3e:70:06:6c:36:3d:
         5d:2e:ba:03:df:b3:dd:23:aa:8f:f9:eb:3c:36:da:8b:e9:40:
         16:a8:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:28 2024 by rpki-client on console-fra.rpki-client.org