Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File:                     nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier:          IId1IxzE4sNVE9vfvYn6VoW0R62P/sSzMcaG37w3vpE=
Subject key identifier:   98:5C:8E:B6:EF:F7:8C:FD:CA:96:90:D8:36:B3:72:FE:35:06:11:B9
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer:       /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial:       01901DEB4B185F91381480ACFF37B5C085A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number:          05DA
Signing time:             Sat 15 Jun 2024 22:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:17 +0000
Files and hashes:         1: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: sVb6w0iRXAf4LgO6W4MMrwK6BSMRqGENJPq5T3BtsZ4=)
                          2: oCGnfz5UaVYCtJBUc4rOxYL2IGU.roa (hash: bwnhX367x1vCBVhv4w4XOJU45xmzKXDUwqVb1RnVn08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:4b:18:5f:91:38:14:80:ac:ff:37:b5:c0:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
        Validity
            Not Before: Jun 15 22:01:17 2024 GMT
            Not After : Jun 16 22:01:17 2024 GMT
        Subject: CN=985c8eb6eff78cfdca9690d836b372fe350611b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:0e:4e:77:f5:a2:d9:59:ba:d3:19:22:ae:
                    90:c9:d4:c0:40:92:19:f2:5b:9c:df:e3:b3:0a:a1:
                    a0:1f:cf:df:db:1b:56:76:6a:81:3b:0b:57:e2:96:
                    7b:53:3e:04:3d:dc:40:1d:35:7d:33:00:a7:32:f3:
                    83:fa:50:f6:9b:2e:36:ba:12:51:13:e0:ff:c9:0b:
                    65:7b:d2:be:25:72:9b:1c:fa:cc:a2:f0:cf:0e:71:
                    70:e6:46:7b:01:24:a8:4f:58:c7:b3:89:cb:eb:15:
                    ef:85:d6:22:f4:04:a9:cf:54:69:2f:32:8f:17:d5:
                    fc:6c:72:60:9d:83:e1:c6:bc:52:ef:d4:2b:1a:b1:
                    51:2c:d7:77:a0:f3:dd:f6:c6:37:24:4f:89:03:9b:
                    a7:ba:5d:58:c4:dd:e7:82:d5:58:18:1c:8d:a3:3d:
                    db:5b:2b:6d:b9:4c:d7:25:a4:03:40:92:fe:c2:db:
                    19:8d:c6:58:3d:42:f3:4e:3e:dd:58:e8:23:23:3f:
                    8c:6b:54:31:c1:5c:f8:7b:dc:a5:fa:f1:f6:d4:30:
                    24:51:65:a7:60:8d:e3:49:39:6f:d4:0d:88:6d:2b:
                    7e:c6:ff:23:92:f6:a4:a7:c6:45:fb:80:ae:b0:1c:
                    8c:23:c7:cf:e1:47:43:f6:9e:d2:4c:87:7a:5c:15:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5C:8E:B6:EF:F7:8C:FD:CA:96:90:D8:36:B3:72:FE:35:06:11:B9
            X509v3 Authority Key Identifier:
                keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:be:ec:fd:83:7a:66:a9:b3:b4:60:fc:e7:93:59:41:98:
         cf:97:14:31:25:6c:92:81:99:6c:35:96:14:46:6e:8d:cd:75:
         f5:30:c5:23:1d:8d:4b:bb:1d:3b:f1:4d:6b:84:89:81:3c:b7:
         01:9c:2f:43:45:38:77:86:a9:cd:0e:d4:c0:0b:b5:4f:90:94:
         3b:fd:64:27:ec:5c:fd:7e:c6:6f:8c:90:7b:b9:1a:95:59:ae:
         f5:a7:8a:06:c7:ed:fe:f8:e0:20:aa:f3:1e:09:4e:7a:02:56:
         af:37:f8:5b:a9:27:ba:f4:38:f0:0d:2e:d9:e0:90:1a:de:f5:
         10:a0:45:ec:d3:34:c1:75:ba:f5:d0:9c:25:fc:f6:95:12:5a:
         8f:39:07:67:d1:bd:72:28:c9:69:bc:7e:36:2d:cb:91:4e:15:
         fa:88:d5:83:86:e9:ed:cb:7f:9e:bc:b8:d8:8f:51:8a:51:9a:
         a0:07:02:a8:13:b5:c2:e4:db:9f:8f:ed:a7:e1:1e:c8:4f:dd:
         d7:2e:48:5b:36:77:f9:a7:58:1e:65:ae:dd:b5:09:4e:24:2a:
         ba:e3:8e:8a:07:95:55:e1:49:ec:55:1c:f4:fa:22:d3:80:19:
         f8:9b:e6:e7:32:40:d7:57:f5:45:d4:32:4d:df:29:e2:18:e9:
         7d:9a:69:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:53 2024 by rpki-client on console-ams.rpki-client.org