Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File:                     nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier:          h7hutA4+j+R+Ozty525PbMOgnQO+CFrNzG82mA9EPmg=
Subject key identifier:   24:49:5E:15:EE:00:C0:03:16:D0:EA:A3:6D:03:B2:EB:1C:05:3C:60
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer:       /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial:       01901DED6F96BBA00EF4FBCA6C57843A8A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number:          0445
Signing time:             Sat 15 Jun 2024 22:03:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:38 +0000
Files and hashes:         1: HGu0zMc7Lx97ckvyWLDsIFYHm4c.roa (hash: nfrjUzUcOnqwS+5MXrTeO2LSr9m5+dFXHlOySBGBPIU=)
                          2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: rY6XULdkRSu07eIx+i9U1A4Z8Qiu94XpgIu+wlj4mXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:6f:96:bb:a0:0e:f4:fb:ca:6c:57:84:3a:8a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
        Validity
            Not Before: Jun 15 22:03:38 2024 GMT
            Not After : Jun 16 22:03:38 2024 GMT
        Subject: CN=24495e15ee00c00316d0eaa36d03b2eb1c053c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:6f:42:cc:b3:2e:3b:47:14:55:8f:ea:42:
                    ba:14:56:97:ea:b9:c5:d1:7e:3f:3b:a9:7a:0f:27:
                    7d:5a:06:1b:e9:3e:8b:dd:89:d9:e0:18:b3:00:6f:
                    73:3c:a7:a1:3d:f2:a4:54:82:5f:b4:72:a6:1e:bb:
                    0a:19:11:19:2e:a4:3c:9a:cb:7d:8f:0d:f7:2e:c5:
                    29:c1:86:b2:1c:bb:11:c5:83:a4:01:4a:4d:55:6b:
                    23:00:eb:cf:7e:e7:6b:42:eb:e1:fd:b9:07:39:dc:
                    3b:26:fc:df:10:e4:52:d6:2d:cd:3a:b7:3e:88:50:
                    17:b4:be:f8:c3:d3:f8:53:26:ed:94:2a:70:4b:39:
                    54:fe:8b:fb:1e:e0:76:fc:2b:4e:ca:79:60:63:2d:
                    32:ad:81:4f:b7:5f:0e:c9:20:e1:3e:ce:7a:d3:38:
                    b4:14:39:f3:9c:a0:db:d6:6f:fc:03:79:27:83:89:
                    81:e7:c9:7c:13:c6:84:2a:9f:33:2b:4e:81:f1:7f:
                    bc:e6:f7:75:aa:cf:31:5d:a4:da:b2:45:ee:34:f8:
                    83:ee:66:4c:9e:b0:7c:6d:af:33:92:ed:26:a8:d2:
                    64:d6:8f:97:17:b0:b2:04:7e:dd:d7:76:18:61:12:
                    52:d0:dd:02:f1:de:51:e2:e3:50:72:6b:00:1b:87:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:5E:15:EE:00:C0:03:16:D0:EA:A3:6D:03:B2:EB:1C:05:3C:60
            X509v3 Authority Key Identifier:
                keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:03:d0:2a:f6:b3:07:fc:0c:7f:b8:5d:1b:4f:47:17:43:71:
         a5:37:50:8e:fa:15:e2:86:5f:5e:5c:2e:b1:50:7b:d1:69:7f:
         3a:51:08:66:f3:20:38:b7:8c:4b:41:d4:b4:2c:ad:a7:07:3e:
         c2:05:ce:35:a9:98:70:66:0f:42:60:49:b7:b4:c4:4f:90:d5:
         d0:ce:dd:22:ac:2d:cb:9c:8e:95:92:7a:77:33:e8:24:56:b2:
         68:14:90:4f:83:d8:44:9e:09:3b:70:db:96:1a:43:b5:61:cf:
         b2:80:f2:22:7d:ce:1e:44:08:be:77:e5:45:6a:d1:30:f2:bb:
         c8:c0:1a:4b:ea:4d:81:74:65:2a:27:41:f1:fd:bc:79:9a:25:
         17:d7:3f:0f:f0:46:8e:63:c5:26:a7:c7:02:f1:cc:b2:94:b3:
         31:03:8b:90:48:3c:6f:ec:8d:83:ef:f9:7a:d2:b8:96:8d:9b:
         0e:77:4a:87:f2:ee:3a:c7:6d:7b:1a:05:f2:a5:33:78:45:ed:
         9e:5f:8d:9a:d9:77:48:a5:4f:e0:a9:18:cf:2a:70:93:0b:a1:
         81:83:de:f0:a6:1c:31:8b:ac:eb:86:03:67:d0:f8:39:4d:9c:
         89:e1:b0:93:6d:62:2a:14:4c:3d:2a:38:c5:f2:70:a8:54:e3:
         44:2d:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:51:04 2024 by rpki-client on console-fra.rpki-client.org