Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File:                     nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier:          US6mREWq2jn8Im0OXx19dG9hZWMKB7MJmPVbImlkYD4=
Subject key identifier:   C0:E2:7A:F5:B7:21:2E:CD:7E:1E:77:38:D6:07:A0:08:23:FF:F2:95
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer:       /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial:       019040AE7D35BACB94F12E1D6792C73AADEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number:          0457
Signing time:             Sat 22 Jun 2024 16:01:35 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:35 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:35 +0000
Files and hashes:         1: HGu0zMc7Lx97ckvyWLDsIFYHm4c.roa (hash: nfrjUzUcOnqwS+5MXrTeO2LSr9m5+dFXHlOySBGBPIU=)
                          2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: rxtSUnStVoA+qN/vQ7LGxeWDCtmWzDF2ATN7Sph6gR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:7d:35:ba:cb:94:f1:2e:1d:67:92:c7:3a:ad:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
        Validity
            Not Before: Jun 22 16:01:35 2024 GMT
            Not After : Jun 23 16:01:35 2024 GMT
        Subject: CN=c0e27af5b7212ecd7e1e7738d607a00823fff295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:0c:d2:49:24:98:54:a1:3d:cb:f6:47:7a:
                    f1:11:44:8f:9c:48:5c:ac:05:c9:92:1b:9b:d5:77:
                    72:da:20:e2:f9:8a:5c:7b:1f:70:d5:78:8c:c0:65:
                    07:06:86:62:94:a8:81:fa:a1:23:66:12:f8:29:81:
                    10:de:3e:e2:4b:df:76:08:60:2c:60:f4:e4:22:b3:
                    a4:8b:96:7f:9e:b6:f7:0c:c6:7d:bd:24:2b:69:61:
                    54:da:0e:82:00:f9:a5:59:92:ed:13:d1:90:37:f4:
                    ab:24:86:77:6b:9b:8a:d8:cc:7a:20:77:48:96:88:
                    0a:f7:6e:17:09:f4:a1:ee:0d:e2:f2:cd:70:da:00:
                    65:72:a5:4e:ce:0c:0f:2d:10:dd:c4:71:3c:2e:8e:
                    ea:b0:5f:26:8d:82:38:59:30:d9:60:74:0f:61:a8:
                    77:7b:76:e3:16:31:5b:2c:11:a6:f0:0e:11:45:c3:
                    5e:d3:6d:41:48:a8:af:37:e0:2f:65:78:76:b3:60:
                    84:4f:13:ed:c3:d9:4c:0c:37:61:bf:cc:f3:81:20:
                    84:4e:a6:be:bf:b5:0e:ac:4a:43:12:ae:0e:82:56:
                    5e:ad:c3:bf:db:79:f2:61:0b:05:73:4c:eb:c0:54:
                    44:c6:00:9d:77:16:c9:a2:19:9e:3d:eb:3a:e2:c5:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:7A:F5:B7:21:2E:CD:7E:1E:77:38:D6:07:A0:08:23:FF:F2:95
            X509v3 Authority Key Identifier:
                keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:51:bd:69:e4:d3:99:da:5f:b2:3a:34:8a:a0:41:c0:af:6a:
         01:56:7e:1a:c5:f4:02:be:17:1c:a4:55:cc:2e:d3:46:7e:8c:
         b3:a9:77:48:91:e9:ac:59:db:28:bd:1a:40:93:cd:97:e0:36:
         f2:97:bc:af:04:f2:76:2f:98:3a:e2:8e:f2:a9:66:02:9a:8e:
         e6:0f:be:e6:0e:77:03:a8:66:90:9b:43:57:77:16:ee:4d:62:
         55:2a:f7:90:25:ce:80:03:ce:13:ab:64:07:dd:02:de:a9:8f:
         44:2e:95:7d:5a:c9:9b:e2:3f:dc:9a:b8:22:b2:4c:34:3c:ba:
         13:c0:60:fd:f3:76:52:d1:26:e6:99:6e:2f:f0:bd:06:d9:cc:
         44:05:14:9f:4a:89:65:2e:a6:08:f6:f1:1c:51:3b:0c:b3:3e:
         96:b1:45:fc:64:8c:ab:99:8b:06:fa:08:56:fd:d1:2e:e0:b9:
         8d:6f:b2:d7:73:44:8e:a3:06:be:ce:27:30:60:0b:da:c5:9c:
         7e:fa:6a:b5:7f:53:34:37:d8:ff:42:c1:da:73:55:23:0c:ad:
         94:30:00:fb:5a:b1:41:f4:70:2e:73:bb:7c:21:3f:f4:2f:0b:
         7f:20:55:7f:38:27:e0:93:9b:11:1d:9b:ae:6a:38:54:a2:dc:
         e1:77:a6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBArn01usuU8S4dZ5LHOq3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl
NzJhZTkwHhcNMjQwNjIyMTYwMTM1WhcNMjQwNjIzMTYwMTM1WjAzMTEwLwYDVQQD
EyhjMGUyN2FmNWI3MjEyZWNkN2UxZTc3MzhkNjA3YTAwODIzZmZmMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAoM0kkkmFShPcv2R3rxEUSPnEhc
rAXJkhub1Xdy2iDi+Ypcex9w1XiMwGUHBoZilKiB+qEjZhL4KYEQ3j7iS992CGAs
YPTkIrOki5Z/nrb3DMZ9vSQraWFU2g6CAPmlWZLtE9GQN/SrJIZ3a5uK2Mx6IHdI
logK924XCfSh7g3i8s1w2gBlcqVOzgwPLRDdxHE8Lo7qsF8mjYI4WTDZYHQPYah3
e3bjFjFbLBGm8A4RRcNe021BSKivN+AvZXh2s2CETxPtw9lMDDdhv8zzgSCETqa+
v7UOrEpDEq4OglZercO/23nyYQsFc0zrwFRExgCddxbJohmePes64sXmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDievW3IS7Nfh53ONYHoAgj//KVMB8GA1UdIwQY
MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et
ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj
LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1G9aeTT
mdpfsjo0iqBBwK9qAVZ+GsX0Ar4XHKRVzC7TRn6Ms6l3SJHprFnbKL0aQJPNl+A2
8pe8rwTydi+YOuKO8qlmApqO5g++5g53A6hmkJtDV3cW7k1iVSr3kCXOgAPOE6tk
B90C3qmPRC6VfVrJm+I/3Jq4IrJMNDy6E8Bg/fN2UtEm5pluL/C9BtnMRAUUn0qJ
ZS6mCPbxHFE7DLM+lrFF/GSMq5mLBvoIVv3RLuC5jW+y13NEjqMGvs4nMGAL2sWc
fvpqtX9TNDfY/0LB2nNVIwytlDAA+1qxQfRwLnO7fCE/9C8LfyBVfzgn4JObER2b
rmo4VKLc4XemQg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:12:34 2024 by rpki-client on console-ams.rpki-client.org