Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File:                     nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier:          7qwSVx2hVTzm5tipApSbtuZatQBEg6QjGFgzZy8wZFk=
Subject key identifier:   33:BA:A3:35:53:44:03:5B:34:A3:1A:4D:1D:27:EA:31:FB:A0:D1:FF
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer:       /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial:       01904189EC2D9661D8B504B19338E907FF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number:          11D6
Signing time:             Sat 22 Jun 2024 20:01:16 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:16 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:16 +0000
Files and hashes:         1: nGn2FPpq8n0XeVLxlxXia9QnoAE.roa (hash: Npwtadzm+qIOZSYXNs7I7fVqnG6XP8OxoRLoNYvVY28=)
                          2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: vkuZroFgL294slxjIEBAgZ65FVG2jITtk2XXg/xlYmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:ec:2d:96:61:d8:b5:04:b1:93:38:e9:07:ff:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
        Validity
            Not Before: Jun 22 20:01:16 2024 GMT
            Not After : Jun 23 20:01:16 2024 GMT
        Subject: CN=33baa3355344035b34a31a4d1d27ea31fba0d1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:89:6c:f9:3f:cb:2c:d2:67:f4:27:eb:99:
                    0a:07:f6:7c:8a:98:0d:6d:4f:5c:e9:df:5c:28:0c:
                    7c:eb:69:e0:14:15:25:50:ac:cb:c2:f0:c3:4e:82:
                    49:e6:44:45:3c:28:7f:fa:74:b9:81:a5:d5:36:6a:
                    a2:99:71:1e:86:59:fa:5a:97:cb:29:da:52:92:c8:
                    fd:34:c0:c3:17:f4:f3:bc:5a:a8:98:03:31:c7:3a:
                    2b:de:cf:0d:79:35:53:6a:aa:67:b2:bf:f8:62:d3:
                    ad:7a:f5:b1:b5:2d:2b:89:3b:a0:e1:cb:d6:88:ea:
                    bb:68:36:bd:8d:8b:82:c9:62:fc:db:f1:ec:c2:31:
                    c1:df:64:31:a1:a4:c1:f9:a0:b5:bc:1b:da:3c:45:
                    97:8f:51:a4:e6:da:0c:c0:24:bc:59:31:a7:66:98:
                    53:3c:54:47:c1:d7:50:36:2f:c8:88:1d:0c:c8:cc:
                    71:1f:eb:53:ef:46:84:25:18:3e:30:b4:19:fb:c0:
                    94:29:25:89:e0:d3:0a:8e:57:dd:04:c5:db:1d:01:
                    56:cf:b0:00:da:4b:85:2b:ef:0a:33:d0:a0:fd:ac:
                    20:d1:88:b3:0e:6b:0a:c4:72:b0:14:40:0d:40:7e:
                    81:4c:89:31:70:de:b2:a4:3e:b2:cc:28:fb:7b:39:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BA:A3:35:53:44:03:5B:34:A3:1A:4D:1D:27:EA:31:FB:A0:D1:FF
            X509v3 Authority Key Identifier:
                keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:18:c4:54:e5:9c:fa:88:a8:23:3a:7c:13:2c:0d:5b:05:
         6a:9a:fc:3b:fd:15:2f:89:c0:6c:10:34:ad:45:b9:2d:9a:18:
         a4:1b:ac:19:00:16:4c:3b:1e:fb:f8:c6:ba:c8:5e:8c:19:bf:
         62:16:dd:97:3d:7d:28:19:70:b1:17:fa:0e:8c:6d:58:af:48:
         68:92:75:80:00:c9:24:d3:63:78:ea:31:33:ab:b8:5d:76:c4:
         83:34:84:21:a8:13:66:d9:d7:64:88:4f:3f:d9:35:fd:5b:01:
         59:21:c0:a6:0a:cf:72:6b:73:a8:d3:69:0e:f8:40:f5:f0:45:
         96:2a:ac:16:33:17:a5:47:fd:6c:4d:c5:b8:5a:47:91:7f:a5:
         1a:e1:28:d7:3a:0e:04:59:f4:3d:23:56:4d:65:da:00:c3:2b:
         fc:a0:3a:3a:c3:11:3b:72:7d:d3:23:84:59:14:cd:2b:9d:5f:
         42:15:27:cb:34:0e:17:4b:bf:3d:93:ec:04:20:64:17:fa:7b:
         f5:a2:06:1d:56:f0:c2:ea:be:27:30:92:66:3c:78:de:18:d8:
         e9:a5:31:36:a9:5e:40:54:d3:4d:5b:3d:0d:fe:6c:c6:d3:7f:
         7a:61:c8:b3:30:19:06:61:ab:2b:7b:44:66:4f:7c:81:78:d8:
         1a:38:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:08:40 2024 by rpki-client on console-ams.rpki-client.org