Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File:                     NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier:          Zko9CvuocTMEMUtE3RTnBViX6JPq6LV1hYcnN741qks=
Subject key identifier:   73:57:96:61:BD:D1:E2:80:66:95:DA:A5:5B:80:12:9B:C3:EE:F1:5F
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer:       /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial:       01901EC6764B518ADBB6C021AC8C58834B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 02:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:41 +0000
Files and hashes:         1: 2QC-7R-TAnEHkaPbgnYjG2kzu68.roa (hash: tJ/OlgoOOfyHLsV27wptOkItBLZhUc1xBWukbz+/gvE=)
                          2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: J4380Zz7k1a8HFIYoTueuC6L2Zgm/QRDW1Vrzf05IaY=)
                          3: sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa (hash: nCccQSHX5icIb1zXqz4uRKXNg2gbGbqTmUojpuGOrec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:76:4b:51:8a:db:b6:c0:21:ac:8c:58:83:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
        Validity
            Not Before: Jun 16 02:00:41 2024 GMT
            Not After : Jun 17 02:00:41 2024 GMT
        Subject: CN=73579661bdd1e2806695daa55b80129bc3eef15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:b9:b4:6f:55:d2:ff:4d:40:f9:b0:57:39:
                    55:77:6a:eb:42:52:61:9c:4f:46:17:e0:82:df:e6:
                    04:3c:f7:6c:ef:20:6f:18:6d:5e:9b:22:84:3f:ab:
                    e9:f2:b3:1c:c6:7f:e8:2c:0d:f9:5d:cf:c3:9e:2f:
                    19:82:95:19:49:51:85:03:48:2f:94:ca:49:11:26:
                    c4:1d:cb:ae:ef:0e:20:13:cd:2e:bc:1d:91:6a:0f:
                    6c:33:1b:a8:a9:2a:de:62:71:e1:d9:ed:e9:67:19:
                    a0:4a:6b:c8:ba:fd:4c:b6:6c:a5:00:1a:a1:b0:a2:
                    3f:13:2f:be:e2:28:69:9b:89:cd:c3:c7:d8:ed:c9:
                    8f:d8:dc:99:2a:de:8c:6d:99:84:a6:78:1f:f7:fa:
                    d8:80:2b:9d:fa:4a:1c:7b:07:ac:ef:49:a0:c3:a4:
                    78:30:05:ec:00:f3:5f:05:3e:97:38:a4:cb:0a:c5:
                    64:8e:d0:56:37:96:f0:64:0f:ff:3c:16:18:ec:20:
                    1c:0d:2f:a9:c4:63:73:d9:d6:ea:02:89:59:20:3d:
                    cc:b9:a2:09:43:38:52:6d:56:7a:ae:62:8a:78:44:
                    ed:d9:32:61:a9:2f:f3:4e:d3:b9:64:53:0c:6d:c3:
                    c4:4c:76:ad:b7:0a:70:18:fb:4d:ba:03:41:93:ed:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:96:61:BD:D1:E2:80:66:95:DA:A5:5B:80:12:9B:C3:EE:F1:5F
            X509v3 Authority Key Identifier:
                keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:e6:bd:d3:48:d4:b4:df:0d:69:57:85:9c:7f:36:7d:01:
         02:6c:c3:10:b5:34:4c:22:9b:d8:2f:2d:1c:ad:6a:7b:90:03:
         eb:1a:59:bb:0d:43:8b:bb:25:33:fe:c9:41:e6:d5:38:8d:dd:
         04:d6:b5:92:1f:a0:1a:5b:db:e7:7d:18:1e:04:d5:fa:4b:53:
         a9:39:20:90:1d:7e:a5:44:72:73:5e:39:fd:5b:08:7a:ad:85:
         0f:d4:02:40:fb:af:17:67:7a:72:c4:51:7e:9e:42:ba:16:25:
         e4:c6:9c:43:13:b3:74:17:f4:3b:a5:28:17:c9:81:a3:4a:20:
         05:13:fa:d8:60:42:f4:34:bc:62:14:17:11:d2:4a:6c:c2:f5:
         68:86:17:b5:81:c4:f5:ef:b4:a5:c1:86:c8:c9:a6:10:9d:2b:
         7e:32:d1:44:5f:08:83:14:06:7c:8c:19:10:1f:50:26:fe:94:
         ed:cc:e9:72:d6:2e:e6:0a:55:30:4d:d5:ed:83:bb:85:ca:2a:
         8d:06:38:b2:0d:3d:4d:89:70:f4:f4:93:40:c1:0c:6b:9e:a9:
         e5:21:36:ab:ff:c0:68:f8:af:c8:a9:8d:99:2b:12:c8:9b:e7:
         30:fe:91:cf:41:2b:40:65:4d:9c:10:4c:90:e5:f5:a8:50:27:
         15:7c:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:18 2024 by rpki-client on console-fra.rpki-client.org