Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File:                     NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier:          i5uEW5ItCiao3lImg7zKBBVwD8b1v7JP1XhhmJBwZNo=
Subject key identifier:   4C:9F:26:D9:6E:90:B7:EF:BF:9D:C4:D5:E0:27:BF:71:9E:89:B9:17
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer:       /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial:       01901D45E3E4E0ED51C00E5F3E9C808E2F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number:          11D3
Signing time:             Sat 15 Jun 2024 19:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:37 +0000
Files and hashes:         1: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: TOztLggLkUUjF08ssDVhPqW0ydBQ2Wcci7NPESEnxpU=)
                          2: TZVMTbn2lC314qxspX8x-MT63kE.roa (hash: FdTosmC4QLTWBR4mPIa+OQthOXiBqzDjcX2oeplsdeE=)
                          3: _I2M00pQgaclvdRn62PgVoNqvMM.roa (hash: et0+KsHtAgs4mSa9hhmd7KlgMT5M85DabbbTi7QuaOk=)
                          4: sNsgwIL7_2NXkqyyoKgU48XsukY.roa (hash: TH+yIsyf6L/Ht/Eq+wZJ+CQWrNj55JIjGL9lon+7uoA=)
                          5: uMb_8McJNSLun_ZCs7iiObatOIw.roa (hash: 0JXp4o7dINiAJD9Ja9j93EAoCA7LcaRkSXimzQW9FpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e3:e4:e0:ed:51:c0:0e:5f:3e:9c:80:8e:2f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
        Validity
            Not Before: Jun 15 19:00:37 2024 GMT
            Not After : Jun 16 19:00:37 2024 GMT
        Subject: CN=4c9f26d96e90b7efbf9dc4d5e027bf719e89b917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:44:4b:8f:3b:e7:2b:a0:29:17:ba:fe:77:
                    92:ce:ef:65:56:4c:44:fa:94:8a:cd:43:fd:80:d8:
                    79:0c:17:94:4c:09:e6:d4:81:f1:34:c5:68:a7:eb:
                    f2:5a:25:7a:d0:07:8c:2e:ec:c2:e0:b4:76:09:a9:
                    8b:4d:6a:e8:4a:23:0d:14:c3:dc:5d:04:b6:87:5e:
                    c7:39:71:4c:6b:22:a0:02:9c:80:0d:ad:ba:90:7e:
                    32:7a:cd:96:a6:fc:46:93:a4:0d:50:fc:e6:23:36:
                    ba:07:2b:a4:af:38:d9:9a:e9:c2:e6:e6:e8:5e:79:
                    01:c2:27:fc:53:24:87:2d:e6:14:ad:31:f8:40:5e:
                    28:66:6b:ba:7d:27:bf:ab:31:e2:86:35:0a:1e:77:
                    fc:2e:00:67:39:d8:66:8a:5b:cc:6b:3e:b2:c5:2f:
                    60:19:9d:f0:14:bb:d8:20:5b:88:f8:86:6d:b1:81:
                    07:fa:97:e2:28:10:bc:17:e5:a9:c3:00:7c:45:f9:
                    16:47:34:1d:2f:93:86:48:eb:5b:47:63:d2:cf:11:
                    d5:15:41:61:69:47:6a:85:ad:16:5b:13:a4:f5:12:
                    c0:ef:0d:47:4f:77:ac:d2:f7:85:33:58:5a:2f:86:
                    ea:f3:96:92:ea:27:b4:55:72:2c:dd:2c:0a:16:cc:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:26:D9:6E:90:B7:EF:BF:9D:C4:D5:E0:27:BF:71:9E:89:B9:17
            X509v3 Authority Key Identifier:
                keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:3a:eb:49:2e:6e:fd:fd:3a:56:2f:b5:89:2a:38:23:29:
         63:ce:09:ab:77:cf:93:86:0c:b4:c4:72:6d:cb:e0:c0:ac:2a:
         92:e7:e3:be:a6:68:9c:58:f1:fd:81:3a:b2:e1:0a:42:d0:c8:
         da:97:10:1c:8b:b1:cf:49:c8:48:42:ea:36:42:c8:d6:2b:a6:
         b1:52:19:d6:87:04:47:d1:f4:c5:27:ab:4f:22:dc:6d:0d:6e:
         a8:81:f6:f2:b6:1d:94:f9:b8:b8:a5:c7:f4:5a:4c:42:5c:91:
         82:8a:4f:47:6f:64:aa:bf:f2:fd:81:00:71:8c:88:84:ca:e6:
         8c:e1:1b:b7:bf:f6:b9:1b:20:63:33:b0:d4:5a:49:dd:a9:4f:
         d0:55:cf:72:61:9f:ab:01:91:45:65:1a:61:5c:63:bc:8d:1b:
         b5:50:51:10:f1:ac:d0:85:76:4d:fd:11:87:31:20:87:b2:61:
         67:b5:14:aa:c2:bb:b3:da:61:93:61:41:90:02:14:6d:ee:3c:
         ac:4e:52:f9:51:c1:09:3c:be:fb:a5:52:a5:e5:1b:b0:5e:b2:
         d8:a5:97:1c:79:9a:6d:a1:53:e6:16:d2:68:b1:d8:d8:56:9c:
         f9:ca:95:cb:7f:aa:96:7e:44:7b:2f:4b:b4:39:92:dc:de:7a:
         99:b1:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:18 2024 by rpki-client on console-ams.rpki-client.org