Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File:                     NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier:          ARKH8zo0MoB7p0npS/QXi0Pj9h/tjXvakh4EimefL9o=
Subject key identifier:   32:E6:5B:35:61:EC:52:3D:E9:0F:27:54:62:72:90:F6:BF:2E:84:9E
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer:       /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial:       019369DAB2B3E3FB375BCCBE7E7B9E0E9B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number:          100D
Signing time:             Tue 26 Nov 2024 19:02:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:40 +0000
Files and hashes:         1: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: Y+v9Oqfm7N2jg6qolCpyNBsCxzjXWvKXNf9MXNr1AG0=)
                          2: jdVTqO7VY82-HjE--ThdnCQOATg.roa (hash: RF0wVfyN3QUFV+NemYXC49Chf7ngq5kfllbSRA3UMFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:b2:b3:e3:fb:37:5b:cc:be:7e:7b:9e:0e:9b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
        Validity
            Not Before: Nov 26 19:02:40 2024 GMT
            Not After : Nov 27 19:02:40 2024 GMT
        Subject: CN=32e65b3561ec523de90f2754627290f6bf2e849e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:d3:c2:b2:12:60:36:7c:97:e8:51:96:7b:
                    66:d0:2d:69:93:9f:e6:61:cb:47:3c:ed:72:9c:c8:
                    27:4a:ac:4c:c8:55:1d:1c:bb:13:4b:fd:6f:c0:44:
                    94:c3:21:ae:9a:c6:81:f3:ef:8e:06:6a:aa:21:0e:
                    65:34:d9:d1:ba:e5:90:55:dd:16:6c:bb:8b:7d:2f:
                    32:5b:78:9b:33:6d:dd:a8:e5:eb:41:d8:f7:b7:40:
                    ec:4d:e3:9a:d3:ea:d6:19:4b:f9:7c:8d:64:a9:b4:
                    a5:61:5e:67:db:18:b8:33:85:e9:4f:09:9a:e5:8f:
                    ed:65:f2:eb:4e:ec:b4:01:5a:24:53:cb:e5:e6:9d:
                    50:ee:89:20:4d:d3:8a:3f:aa:bf:31:80:fc:88:b0:
                    9f:b8:63:38:6e:48:dd:02:46:db:39:6c:aa:83:b1:
                    32:6d:3e:b3:7a:02:4f:08:9b:c0:e3:1a:d4:46:1b:
                    45:bc:53:9a:2c:6c:ef:68:56:ce:58:02:7a:e0:62:
                    9b:c1:6d:b6:1c:9b:bb:a9:51:93:c6:66:97:53:94:
                    f7:e9:77:fc:5e:85:18:7d:25:1d:e2:34:9f:67:96:
                    9a:9d:16:0a:ea:ba:8c:15:98:52:64:f5:69:5e:bd:
                    fb:b5:c1:e7:17:43:fd:c9:34:d7:2b:23:6a:85:95:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E6:5B:35:61:EC:52:3D:E9:0F:27:54:62:72:90:F6:BF:2E:84:9E
            X509v3 Authority Key Identifier:
                keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:90:60:62:67:84:22:50:1e:ca:02:57:f3:22:7e:2e:7e:
         93:82:ac:90:74:a3:d5:4f:3a:34:5b:94:6d:b3:13:6b:50:0e:
         a5:b3:51:d7:52:0d:d1:0e:1d:cd:c5:40:f8:c6:2c:1b:3f:64:
         64:36:64:a3:e3:13:d6:0f:15:f5:3e:14:0b:b2:d2:dc:cd:3f:
         eb:8a:b7:d0:ac:e0:43:8a:5b:ea:e1:7d:05:26:57:dd:c2:1a:
         e8:15:ae:fd:ef:4b:68:95:ec:02:d5:58:7f:09:c8:b0:ab:c8:
         91:15:1f:ae:05:fc:0f:3d:c9:2b:25:47:13:c7:c4:3b:88:43:
         4b:9e:9d:bd:73:01:b1:ac:81:29:6d:6b:26:21:26:8a:48:0b:
         e5:94:60:5d:ce:6c:8b:f5:86:90:bc:bc:17:5e:4a:55:9b:4b:
         49:61:35:dd:65:e0:ce:84:aa:18:a7:3e:2b:13:5e:4b:48:a4:
         ba:54:00:b8:2a:c3:1a:c6:16:d1:56:ad:62:24:b3:08:4f:ce:
         ad:c8:5a:28:ce:4f:bd:99:f3:45:04:29:4f:41:4f:c2:0a:34:
         52:2c:81:81:f0:fb:f7:6b:11:68:80:1f:69:c4:7e:f9:aa:5d:
         df:c0:9f:e2:64:f1:64:53:dc:2d:13:7b:f4:3f:b9:13:8e:a2:
         cc:f4:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:04:07 2024 by rpki-client on console-fra.rpki-client.org