Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File:                     N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier:          npHEpnYV6DWw/xHBuaRjJmfEE19IvAK1dLnmvoZNYCA=
Subject key identifier:   9B:F7:DC:02:BE:BA:95:56:70:65:F6:DB:B9:07:A8:1E:D3:21:13:10
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer:       /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial:       0191FA104808EFE0E3C5026B592D3519AC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number:          E1
Signing time:             Mon 16 Sep 2024 09:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:56 +0000
Files and hashes:         1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: KJUiUI8hkvThKUqE/iQ1PnefDsnd1Dwr1p8AwMZVfKs=)
                          2: wzJmOlO0oXPIvEjHg2En07mccws.roa (hash: gIpVcqwJdV1hhK08tzVXKkKPdk7wDeINmMt+QhhlpEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:48:08:ef:e0:e3:c5:02:6b:59:2d:35:19:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
        Validity
            Not Before: Sep 16 09:00:56 2024 GMT
            Not After : Sep 17 09:00:56 2024 GMT
        Subject: CN=9bf7dc02beba95567065f6dbb907a81ed3211310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:a3:9a:5c:18:cc:5b:ad:3b:9a:fc:21:cc:
                    f1:8f:79:d8:63:0c:57:a7:ad:cc:40:65:63:bb:41:
                    9a:20:a7:17:ac:9d:90:fa:05:df:cc:ad:2d:74:5d:
                    5c:c1:84:57:b4:bd:33:35:d5:82:06:dd:eb:7a:dd:
                    f1:4b:2e:ab:8f:42:51:83:6b:a1:c7:7d:4d:e2:c9:
                    59:bd:b4:fd:a4:79:50:83:54:1a:d9:8a:13:53:f5:
                    cf:cc:d5:71:fa:bb:30:6e:dc:63:b2:99:78:29:af:
                    bf:3b:12:0c:c1:d0:86:6f:a8:6d:e5:d7:6a:a1:62:
                    8d:d8:e7:f6:f7:6a:61:5c:e2:5f:b6:28:af:80:d2:
                    7a:5e:ca:3e:1a:c1:55:b6:a5:e0:c2:69:da:20:f3:
                    8a:c7:cd:4b:82:bc:63:8f:65:cb:18:7a:77:bf:77:
                    2a:9b:1b:ef:11:f3:65:24:51:0b:8f:f8:05:c6:24:
                    ac:74:12:c3:fd:f3:83:15:4f:bc:6a:13:8d:56:eb:
                    02:79:4b:d2:ef:60:a4:ea:99:c3:19:81:23:33:72:
                    e8:16:c1:a4:96:2a:bf:0d:4e:92:df:69:81:1f:3f:
                    98:ae:e3:94:52:2c:46:79:ea:e7:a8:8a:8a:a3:2b:
                    8c:9e:64:15:a7:20:c3:a2:ef:9f:dc:26:c4:f2:75:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F7:DC:02:BE:BA:95:56:70:65:F6:DB:B9:07:A8:1E:D3:21:13:10
            X509v3 Authority Key Identifier:
                keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:ee:fc:46:e8:8e:be:e1:f7:88:dc:92:b7:24:1f:8b:ca:
         67:83:fd:5d:25:5a:ef:b7:4d:39:ce:b6:98:13:5e:fc:18:ba:
         84:97:8b:48:7f:d0:40:1e:4c:83:10:63:31:43:22:82:ab:5f:
         63:38:e0:99:16:85:8e:ef:26:c1:fa:e3:92:c6:10:4d:8c:2f:
         93:54:f2:23:dd:88:8b:d1:90:e4:4f:1f:9c:b1:27:ea:1f:88:
         10:68:67:a7:38:4e:5a:4c:41:f6:36:e3:8d:c8:11:db:85:db:
         22:4d:1f:5e:98:00:3b:99:47:0c:b1:00:7b:d5:d0:dc:59:27:
         e2:a8:17:59:1f:9a:24:86:f9:42:2d:85:f6:a6:fc:c1:3c:04:
         eb:28:37:80:9b:33:7e:65:7e:ec:66:6c:21:24:9a:c8:ec:77:
         ef:94:16:92:e5:42:07:5c:ab:73:bc:b7:a6:84:d9:0c:de:7f:
         52:fe:48:d0:79:7d:83:80:1b:e9:94:47:37:46:0f:98:92:ed:
         d6:04:23:23:fd:a2:41:a7:47:5d:bf:cd:dc:44:4e:30:b2:89:
         7a:2d:0e:e8:75:71:7a:31:d1:1e:da:12:d9:2b:8b:dd:d5:0c:
         47:d2:32:33:72:ae:1f:92:f7:2c:da:89:c1:70:11:7b:18:0e:
         ad:32:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:38:00 2024 by rpki-client on console-ams.rpki-client.org