Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File:                     NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier:          pajormyzFeLnheE01iI5RJxYaG1F53lLHeRgbk6Lhts=
Subject key identifier:   2D:FE:A8:B2:4B:AE:54:66:A6:20:9B:41:91:07:3F:3B:CD:3A:65:A2
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer:       /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial:       01901FD922021044B2A0BE0A2CA5D4020DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 07:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 07:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 07:00:41 +0000
Files and hashes:         1: 5GWIf6QBPTWIF2o7l0wMVGH5uXs.roa (hash: vDP1vSRp5ijRNvACYNhkKTKwvZzb0Lqt0et8BqNfen4=)
                          2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: rMhVPSM50pgsY0A/DKAzdCS0ADSyD/sJs+9i+55VRYc=)
                          3: PvvM-L4joclHZzhl9-9L-RvDGz4.roa (hash: nD+B+S9hnqTEHdO8PD4OIfJEHOf7EGXRcVx70NXgGFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:22:02:10:44:b2:a0:be:0a:2c:a5:d4:02:0d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
        Validity
            Not Before: Jun 16 07:00:41 2024 GMT
            Not After : Jun 17 07:00:41 2024 GMT
        Subject: CN=2dfea8b24bae5466a6209b4191073f3bcd3a65a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:6c:c5:cc:19:f5:49:a0:9a:0d:d8:c6:de:
                    60:b7:62:1d:10:79:30:7a:ea:61:8e:49:d2:83:73:
                    a9:d0:a6:c3:02:c0:94:50:a7:65:08:1b:25:a3:bc:
                    0a:ee:dd:e3:aa:0c:0b:bd:4e:7c:bb:f1:db:65:22:
                    af:7b:34:6b:ef:ad:20:51:98:01:a4:c1:7b:1e:79:
                    fe:e0:7c:bd:db:6d:7e:e4:9f:02:99:4c:97:c9:41:
                    82:05:0e:7d:1e:be:75:50:4c:55:c2:69:a1:f8:07:
                    16:45:99:d1:3e:d5:0a:1e:d2:7b:c8:f5:59:f8:05:
                    23:95:2a:5f:7c:a4:0d:62:35:81:ce:85:f1:0c:cb:
                    96:2c:bf:bc:4a:32:49:a3:a9:a5:fc:38:5f:fb:7c:
                    1e:7f:9a:aa:d3:eb:a2:f1:26:24:8f:3a:73:f4:5b:
                    4e:9e:d2:0d:20:97:f0:bb:f8:d7:0b:91:0e:63:ff:
                    a2:43:12:52:a3:d8:b4:82:9c:52:97:cc:5a:65:b8:
                    7c:c9:b0:ea:21:db:de:46:e3:30:56:26:c3:20:58:
                    08:65:d2:72:7d:4f:4c:6c:20:b4:07:20:f2:7b:88:
                    2c:e2:72:0c:54:80:9e:dd:e7:30:89:26:12:80:63:
                    12:19:03:a4:88:89:c5:68:a4:97:0b:7b:7b:04:fa:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FE:A8:B2:4B:AE:54:66:A6:20:9B:41:91:07:3F:3B:CD:3A:65:A2
            X509v3 Authority Key Identifier:
                keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:5c:37:9f:89:ab:0f:7e:92:4c:0a:4d:50:7b:b9:fc:11:
         a2:8a:75:3c:94:d9:5e:da:4b:0d:5e:76:e2:c3:68:28:b5:9c:
         58:05:db:f0:36:31:25:78:10:f5:5b:b3:f8:44:d8:0f:ed:04:
         7c:e7:e7:be:35:ee:25:19:0c:1a:b6:73:87:22:66:92:b6:a0:
         b3:26:62:d1:3a:41:9b:ea:f5:a2:15:e4:c0:13:b6:8c:90:ee:
         cb:02:dd:9b:05:b1:dc:af:a7:67:fb:46:7c:62:62:43:32:92:
         31:d5:38:d3:0f:9a:e8:59:d6:36:93:30:bd:ec:5a:47:7d:5e:
         46:5a:8c:e3:17:4f:52:37:d5:38:e0:a2:91:01:79:b2:37:be:
         94:0f:2b:03:6c:a2:51:fd:d9:12:ca:a0:bb:db:35:bf:0a:4c:
         c7:0b:9e:95:d6:96:3c:71:6d:6c:94:64:6f:96:dc:96:86:d2:
         87:7d:95:cf:64:3b:0f:45:7b:19:d9:90:75:e0:4c:fb:d4:ea:
         4a:96:ec:4d:0a:b9:87:f2:3e:7b:e2:9e:5b:56:fc:8f:8a:61:
         66:a5:c8:d5:87:0a:d6:a5:a9:2f:51:53:29:0d:71:1f:e9:dc:
         80:bc:c8:da:c6:3e:97:25:05:24:21:80:c3:3f:f1:2a:3b:15:
         fe:55:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:56:23 2024 by rpki-client on console-ams.rpki-client.org