Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File:                     NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier:          +IXAjtdSN9x/IaoYzg+lwJFL5wqZUoFqjKtrm2Pl2NI=
Subject key identifier:   8A:83:B2:65:28:5B:7B:D1:68:C8:95:DE:EC:84:BC:C3:74:D2:BE:9A
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer:       /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial:       018F874A74DD582DA9EBA8DF38D2141D27C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number:          0E0A
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: CBIba4QzXnhxVDBn9azwYMVuD1c7+gQAnOWcoLNgIlI=)
                          2: jdVTqO7VY82-HjE--ThdnCQOATg.roa (hash: RF0wVfyN3QUFV+NemYXC49Chf7ngq5kfllbSRA3UMFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:74:dd:58:2d:a9:eb:a8:df:38:d2:14:1d:27:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=8a83b265285b7bd168c895deec84bcc374d2be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:a2:41:15:83:ad:cc:8a:ec:df:8b:5b:6d:
                    6c:3b:f4:99:99:74:ef:95:a4:25:5f:25:5b:68:f1:
                    4b:a9:27:ee:9f:cc:7b:35:a6:e2:a9:c7:7c:0d:9e:
                    48:12:22:13:d3:ee:4e:a3:a2:8a:0e:e6:16:d4:76:
                    6a:94:9a:9e:bb:c9:da:bd:fa:20:4f:3a:51:15:25:
                    ce:53:f3:eb:dc:0b:be:fe:53:a1:aa:d5:ef:3f:ba:
                    25:da:f1:a6:bf:16:42:ff:25:e6:32:b0:b3:18:83:
                    bc:9b:cf:68:cd:c7:74:ba:ed:1f:a4:5d:09:d6:6c:
                    f9:12:f4:6b:92:48:fb:44:4b:46:1a:0f:0b:ed:bb:
                    2d:65:07:ee:3c:2a:f6:e3:60:d0:2b:77:78:f3:d5:
                    c1:9e:fd:af:db:02:5f:68:44:0d:f3:ee:81:29:76:
                    cc:d1:8d:d5:96:38:8b:db:7c:6b:2e:b3:4b:74:c7:
                    61:0f:02:dc:51:38:64:6c:35:cf:e7:80:e5:90:e5:
                    03:5d:6b:33:2d:23:f4:15:55:e8:58:d8:39:8c:ba:
                    66:33:ef:90:79:e0:8e:fb:7b:9f:0b:3b:a0:21:e0:
                    03:88:c8:df:5c:6f:39:eb:51:bf:4a:93:a5:98:55:
                    b9:1f:da:dc:ab:2c:ff:c3:b8:3d:26:5d:82:2a:0b:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:83:B2:65:28:5B:7B:D1:68:C8:95:DE:EC:84:BC:C3:74:D2:BE:9A
            X509v3 Authority Key Identifier:
                keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:84:86:49:76:ec:29:f4:98:8c:63:bf:ea:96:71:b6:04:e5:
         d9:75:11:8a:33:bb:4a:34:88:f6:7d:0e:81:72:4b:6b:c5:42:
         2c:e7:7d:25:0b:66:b4:ec:9e:eb:99:02:29:97:7f:5c:21:5b:
         0b:a7:74:34:01:a0:5f:1e:01:5e:8e:b5:23:92:a7:3f:ba:01:
         14:64:1d:61:64:c2:ea:96:1b:01:8c:92:7f:26:b9:73:fb:02:
         c4:38:f4:2a:6a:a4:ac:e6:82:42:3b:dc:fa:7c:63:cc:80:49:
         5f:e1:54:8b:d0:ed:4e:13:85:b4:6b:bb:45:3a:f2:45:22:79:
         87:df:af:6b:3c:10:cf:39:d1:7b:32:94:18:19:57:f2:9b:db:
         25:9f:b7:bb:cb:3b:ff:33:fb:72:e9:f7:54:93:0b:fc:69:07:
         3e:5a:d2:84:e4:3f:02:f6:7a:e2:47:12:dc:39:5c:e4:74:a4:
         59:30:15:b2:ef:1d:b1:c7:71:9e:28:f9:f7:14:4f:be:09:f6:
         ff:18:ea:bc:1d:70:dc:a6:ba:26:c1:17:fd:b1:1d:08:6b:08:
         d9:25:8f:5f:18:21:38:64:a2:1e:fe:97:86:e6:ac:1d:59:21:
         40:f1:56:9f:3b:fd:a7:ed:b9:ed:e1:93:2a:8a:41:14:22:55:
         e9:91:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:15 2024 by rpki-client on console-fra.rpki-client.org