Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File:                     ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier:          4q+FVEVtMle0z7/FemLJpAdTrg93GkOG++OlU0cp4Vg=
Subject key identifier:   8F:6D:79:9D:FF:01:CA:E8:3E:BB:95:17:65:DE:1E:F0:6E:0F:9B:4E
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer:       /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial:       01901DECAAA26CDE4678AE1A4B039F6DABF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number:          0678
Signing time:             Sat 15 Jun 2024 22:02:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:47 +0000
Files and hashes:         1: hJzxZIcE4KUglYl-a_TOdTmIYWE.roa (hash: R4w4J0kG0kMKV/Ot4NtEgDZyj0TEkCGuMa5bggFbGf8=)
                          2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: gapLc+vJiQBQAMNdCNsaFtPHHm66bZ4ZUlRyggFU6RA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:aa:a2:6c:de:46:78:ae:1a:4b:03:9f:6d:ab:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
        Validity
            Not Before: Jun 15 22:02:47 2024 GMT
            Not After : Jun 16 22:02:47 2024 GMT
        Subject: CN=8f6d799dff01cae83ebb951765de1ef06e0f9b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:b1:19:21:65:8e:b0:8b:e5:b4:98:d5:e1:
                    2f:69:af:6f:de:60:3e:cb:11:a7:74:3f:e5:cd:94:
                    f2:57:c9:1f:d0:fa:48:24:af:dd:1e:41:db:43:76:
                    4f:79:99:74:f7:b3:ff:67:3c:8e:91:5c:1f:c4:bb:
                    ad:65:78:c9:c7:ed:5e:a0:89:64:a1:80:f8:d0:cf:
                    8a:4e:33:e0:d0:35:0e:73:49:00:e8:18:13:b5:5d:
                    08:e9:6c:45:05:17:b2:15:1a:2b:ca:f8:d1:bf:f3:
                    c6:59:33:0a:0c:92:fc:a4:28:1a:63:d3:34:b7:cd:
                    7e:3a:9e:be:ca:ec:51:a7:14:34:d5:ad:ea:4b:11:
                    41:dd:92:af:fe:8c:dd:dc:11:2b:e2:d1:53:b2:00:
                    1f:8e:fb:66:c6:50:94:7d:9a:53:aa:fb:23:4f:c1:
                    fe:88:8b:3f:cd:2b:6e:5d:8f:00:90:46:c5:62:7a:
                    46:20:08:fd:ec:4a:32:d0:04:fb:a9:5e:64:64:94:
                    51:22:25:89:66:08:2b:56:2e:4f:10:15:8b:cf:82:
                    f0:d6:66:b9:d9:da:ab:8e:5d:9e:64:3d:8f:d2:4c:
                    b6:41:e8:45:6d:d5:2b:5d:43:bc:95:67:99:9c:d2:
                    c8:02:53:ba:1c:04:65:62:c9:27:46:e2:02:5b:5b:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:79:9D:FF:01:CA:E8:3E:BB:95:17:65:DE:1E:F0:6E:0F:9B:4E
            X509v3 Authority Key Identifier:
                keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:66:81:13:a0:84:27:4e:f3:d2:7a:3d:ea:ab:53:a5:de:35:
         e3:d8:ec:ca:c8:2a:d2:a5:25:0b:f8:a3:a0:c9:de:e7:0b:75:
         f4:be:3d:8d:ff:a1:23:8d:0c:ee:2e:fd:4f:00:e3:d8:93:0c:
         91:c6:da:77:4f:0a:11:e4:ec:f5:ec:8a:81:68:41:97:76:ad:
         30:fc:d7:23:cf:bf:3c:46:a9:bc:fa:ed:5a:7b:b2:f7:61:88:
         49:18:79:69:1c:d6:9a:ef:91:4a:3a:fb:cb:cc:6e:47:ca:8a:
         84:69:64:ca:d0:1e:2e:d3:39:bc:74:45:7d:12:aa:f0:d1:4f:
         5b:a1:38:cf:03:98:43:a5:be:76:6b:16:c7:42:de:80:03:2b:
         37:af:f0:1a:57:2d:05:98:a1:9b:b6:ca:8c:10:d9:6d:c1:96:
         44:1e:1c:03:4a:8a:5d:7c:f5:69:66:f9:4f:f1:13:c4:a6:f4:
         ee:2e:f2:c6:5d:24:bb:e9:14:2a:ce:fe:86:fd:55:ab:f7:85:
         40:35:94:82:c7:d2:a4:92:1d:34:ee:14:e3:75:05:e1:eb:46:
         1d:1b:8b:41:44:30:10:f7:98:b3:6a:21:20:a9:39:f7:bb:f2:
         1f:8d:4a:31:52:aa:ac:10:fd:d3:c9:61:e0:37:9b:00:4b:63:
         3d:66:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:11 2024 by rpki-client on console-ams.rpki-client.org