Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft
File:                     Nd8c221FfxrbM-u94BnqWyHftCw.mft (raw, json)
Hash identifier:          3Pvdn/cFfM8hBf+ptcu4zSQERnpJdOHkkpGYscQ/1y4=
Subject key identifier:   6A:B0:32:CF:C9:32:64:DE:F7:F9:85:A5:BE:5B:1C:90:81:7B:8F:1D
Authority key identifier: 35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C
Certificate issuer:       /CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
Certificate serial:       018F874A59890D7A4A215DBA6A35D93ED33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft
Manifest number:          033A
Signing time:             Fri 17 May 2024 16:02:27 +0000
Manifest this update:     Fri 17 May 2024 16:02:27 +0000
Manifest next update:     Sat 18 May 2024 16:02:27 +0000
Files and hashes:         1: Nd8c221FfxrbM-u94BnqWyHftCw.crl (hash: 13jeh318pGyzugJB19kZGpsTlsBstZSTHOTUsqs/aOs=)
                          2: ha-S9w-adorj0OKakUteh61kenA.roa (hash: XYuhU/BwHUu+ULaYw1sKB/Q9TAYetm0dNHNrwQbT7hA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:59:89:0d:7a:4a:21:5d:ba:6a:35:d9:3e:d3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
        Validity
            Not Before: May 17 16:02:27 2024 GMT
            Not After : May 18 16:02:27 2024 GMT
        Subject: CN=6ab032cfc93264def7f985a5be5b1c90817b8f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:cf:b5:72:48:53:51:b7:0e:f4:2a:18:2d:
                    4f:0b:13:ed:67:13:5c:7c:05:f8:3a:75:bb:f4:9a:
                    e2:ec:b8:aa:54:cc:f5:71:dc:e8:27:4f:23:c6:ea:
                    f6:9c:0a:51:de:e3:6b:d6:c7:b8:7b:e8:5d:39:92:
                    0e:c1:34:39:44:ad:86:14:40:c0:0e:1f:15:d0:c3:
                    2b:8b:ab:93:46:ba:43:3c:0f:f6:bc:d0:af:f6:f1:
                    a4:63:58:e9:5c:32:96:4c:49:17:83:c6:78:3e:aa:
                    8e:ef:d6:fc:39:a0:90:b6:a2:95:75:b9:bf:85:1f:
                    3b:9e:28:6d:29:5e:bb:90:25:b9:24:bf:a2:7b:cd:
                    c5:bc:0f:b9:b0:60:9e:65:0f:b9:19:55:9d:cd:d1:
                    4f:b1:bd:7c:4e:7c:23:75:8e:0f:6a:3d:2c:f8:51:
                    b3:21:8e:86:b6:c4:23:67:64:1c:4f:d5:b3:0d:05:
                    5c:ab:ff:67:77:83:34:df:93:a0:d2:3d:3c:97:17:
                    a9:2d:d3:9d:9f:14:c0:5e:ee:4d:fb:8c:0b:29:5c:
                    f9:2a:f9:43:04:a8:9b:55:fe:8c:19:d2:fe:2f:4b:
                    11:99:06:83:b7:56:3b:80:7a:49:71:3e:d1:5c:dc:
                    37:0c:29:95:14:c5:85:0f:9a:fe:dc:9a:5d:4f:12:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:32:CF:C9:32:64:DE:F7:F9:85:A5:BE:5B:1C:90:81:7B:8F:1D
            X509v3 Authority Key Identifier:
                keyid:35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:5d:6c:c4:12:e7:94:b3:49:ff:52:33:d4:f5:6b:c2:e9:
         a0:ad:71:11:30:2e:2d:5e:3e:c1:85:1f:c7:a2:fc:6f:94:51:
         2b:99:15:cd:20:bb:56:e3:08:2d:1b:07:85:58:da:27:96:dd:
         6c:26:b8:72:a2:3a:33:79:84:53:ca:55:09:a2:00:37:fa:93:
         37:80:26:f7:4c:ec:a7:f1:4c:6d:12:ff:5a:b8:03:9f:66:28:
         2b:da:96:15:67:a8:b9:36:4b:90:8a:f0:1b:72:a3:fd:4f:de:
         a8:b1:31:0d:5e:e8:a0:59:5b:ae:b2:5b:da:c8:02:69:9b:ad:
         c7:be:03:be:56:1f:1e:c5:0b:c1:9f:e1:ad:93:26:b7:d4:85:
         18:37:5c:24:80:14:ec:03:be:d6:59:a5:39:77:1f:34:b3:05:
         d4:e6:be:66:e3:ed:96:0f:6f:60:0d:93:02:9c:ac:25:98:ee:
         41:9b:5d:8a:24:9f:f8:66:69:eb:51:de:d5:7d:fc:70:21:b0:
         bd:73:71:01:bc:61:83:c6:22:3f:61:65:da:85:a6:33:1d:87:
         f3:d3:bb:05:53:d3:97:0c:b6:ac:f3:17:f7:64:0b:ed:16:3f:
         aa:a7:11:53:5f:2f:c0:4e:a1:e9:17:8e:62:fa:67:04:83:5c:
         1e:b3:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:13 2024 by rpki-client on console-ams.rpki-client.org