Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
File:                     NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft (raw, json)
Hash identifier:          /FQBb7PNpu6qprMFVn7ELBxRIzL5nCwiRKALVY1iB4M=
Subject key identifier:   62:59:69:16:30:97:73:31:1F:49:05:B6:16:D4:82:1B:AE:76:56:50
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Certificate issuer:       /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial:       018F6A539C7DA0242AE7A314B011D4837077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
Manifest number:          1172
Signing time:             Sun 12 May 2024 01:03:35 +0000
Manifest this update:     Sun 12 May 2024 01:03:35 +0000
Manifest next update:     Mon 13 May 2024 01:03:35 +0000
Files and hashes:         1: 1hwrFPr-J6BWBsBUT12V2WGgMY4.roa (hash: 7sY5jJx3P1fc3zohk2olNo5Zn3q8JNnR2MNQ0qIbJPc=)
                          2: 7r6ABkmqlrzoW4VTRM-CW6hYxuA.roa (hash: FG0OIBH/uyR6TVHSRxR/xOAzJSI/URcNB7oXx1C0fOY=)
                          3: NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl (hash: pNqzyU9+talqeZC3Ry87kODHnHlOifElfyVhsXvXfss=)
                          4: VhPLtAqzbTMeQR55fPFvhophf4s.roa (hash: eP5Ig4UHeUIRBr7bhkGTISE0eYa+I/YV3hJHz+eia1c=)
                          5: jwvGELKolrBywJsluTeDcxVs1bU.roa (hash: qW0PWWEpa9RXg2U7YcJZeNBDd9V1U2bcQCs4w02oAJo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 01:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6a:53:9c:7d:a0:24:2a:e7:a3:14:b0:11:d4:83:70:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
        Validity
            Not Before: May 12 01:03:35 2024 GMT
            Not After : May 13 01:03:35 2024 GMT
        Subject: CN=62596916309773311f4905b616d4821bae765650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:8d:80:28:53:ea:f0:04:cf:65:ec:32:05:
                    90:17:b2:b8:e2:d5:05:71:21:8e:57:21:33:55:8e:
                    3f:b2:88:82:94:cd:16:ef:dd:cd:b2:ca:23:0c:e1:
                    55:02:20:3f:51:39:2e:7d:19:8c:b5:c3:bc:e1:8d:
                    40:fd:c1:ab:49:94:5b:c9:ee:0c:ee:2d:4b:dd:26:
                    36:62:e1:e2:72:ba:5b:7f:2a:0c:cf:20:8a:88:ed:
                    7b:e7:da:7c:b5:c9:52:92:4e:68:8f:a8:92:4e:29:
                    03:c6:73:bd:41:aa:f7:16:7b:7e:d5:48:2d:81:d3:
                    9d:a3:f2:11:2f:91:84:bb:4d:88:fb:6a:ea:ca:02:
                    8a:a1:6f:b7:d4:8a:1a:68:f9:64:28:79:fd:96:b4:
                    d0:58:d4:e6:cb:95:80:e9:5f:01:7e:b5:57:60:e8:
                    36:1d:46:79:98:ce:20:71:c9:1c:63:ce:6b:6b:12:
                    26:b5:f1:0e:97:5f:ea:57:fc:19:72:ae:17:71:a7:
                    94:3e:bc:56:f0:b6:83:25:01:35:ec:69:c7:a2:1d:
                    cf:66:d1:92:52:26:de:02:8a:55:20:48:d4:ed:b6:
                    f1:81:ab:04:32:be:4c:07:79:5d:59:75:10:7f:b4:
                    01:6c:41:61:d7:01:db:01:78:32:db:31:6a:fa:34:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:69:16:30:97:73:31:1F:49:05:B6:16:D4:82:1B:AE:76:56:50
            X509v3 Authority Key Identifier:
                keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:8e:de:c3:82:e9:04:64:88:2d:12:33:c0:77:65:0d:8b:
         d0:0b:af:57:57:f0:36:74:bf:e3:5d:10:c2:5b:15:7b:bf:16:
         f3:89:13:06:3c:b4:2e:17:1b:4a:50:83:b0:a5:86:90:1d:8c:
         8b:58:4a:15:8b:e0:f5:3c:8f:d4:69:68:34:9e:c2:bc:4d:ca:
         83:2e:8c:57:ad:45:7f:30:c8:ff:40:75:6d:d2:ba:79:4f:4f:
         01:a1:0a:c1:12:4c:cd:a7:22:93:14:04:e3:d0:ab:e1:bb:8b:
         20:52:ee:b1:cd:0e:af:fa:d4:6f:87:f6:76:bf:b4:89:8b:7c:
         d8:b9:9b:af:4e:fe:3e:bc:b0:8b:36:04:10:50:23:6e:0d:d6:
         34:d7:5b:2d:76:7c:cc:0f:e8:f8:84:51:a5:75:0d:48:bd:1a:
         68:fa:20:77:23:e3:38:f5:95:45:ea:7c:25:f9:cd:b9:10:30:
         c8:2b:bf:23:48:a5:49:4d:32:c9:cb:d4:3f:8e:b9:e4:f2:f2:
         4f:db:0b:9b:05:f7:a3:8a:2b:21:63:b2:c0:8d:1b:2f:f6:0e:
         8e:12:95:40:d4:20:f4:7a:ba:dd:19:25:f2:3e:62:d3:48:b6:
         1e:9a:84:be:e4:0d:70:75:38:db:e3:40:20:e9:73:69:6e:6e:
         b4:52:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:43:59 2024 by rpki-client on console-ams.rpki-client.org