Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File:                     nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier:          ciPicnRksG6aRJtSSF63GkyapROIfhv8SjN+//8DwCE=
Subject key identifier:   18:D3:F1:BE:CD:C0:BE:15:7C:34:D8:2D:FD:53:F3:91:3D:EC:2D:E0
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer:       /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial:       01901CD8154BCF6F8FBF0D7D08EE3B771CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 17:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:41 +0000
Files and hashes:         1: ZsmySnx2UrWApemPxEPantFyYL0.roa (hash: TfKLTKQ1/Bn8MjSP84HrIj3484d/7IxrxvUiFgzGh5Y=)
                          2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: RukXbjUgiMV5O1Nt+Z9i2K8rJamAoOLZZ4ALKgOz1KA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:15:4b:cf:6f:8f:bf:0d:7d:08:ee:3b:77:1c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
        Validity
            Not Before: Jun 15 17:00:41 2024 GMT
            Not After : Jun 16 17:00:41 2024 GMT
        Subject: CN=18d3f1becdc0be157c34d82dfd53f3913dec2de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:59:51:6d:83:8d:73:c6:b9:2e:22:3f:9e:
                    13:ff:a4:17:17:69:0a:dd:f5:e8:9f:04:8b:fc:7f:
                    2b:e3:58:45:3c:3a:6d:aa:84:41:fc:9b:f0:17:3b:
                    1c:66:55:60:0a:8b:ff:01:82:ea:15:27:42:46:9a:
                    fa:54:60:8a:e3:2a:9d:2d:64:a1:cb:88:10:b6:31:
                    39:4e:11:3a:c6:40:bf:37:92:29:ec:76:e8:a3:a1:
                    a1:c7:ff:31:9f:86:78:e6:bc:69:5f:ec:98:51:51:
                    44:2a:fd:d8:27:03:87:60:0a:4f:fb:34:36:7e:0e:
                    f8:45:1a:50:8a:33:4e:17:d2:cf:90:06:8e:a9:48:
                    24:99:0f:a2:70:4d:34:54:82:28:63:65:d2:16:44:
                    49:c3:3e:41:d0:a6:5d:a6:5c:31:47:d5:49:85:1f:
                    71:13:0c:6c:ae:1e:3c:37:fa:ff:29:c2:5a:12:12:
                    a2:cd:1e:ac:6f:25:80:14:e9:5b:04:00:64:36:cd:
                    cf:59:c8:38:22:75:3c:b9:5d:74:98:34:0d:5b:18:
                    be:2d:70:04:dc:13:1a:25:83:17:0c:ae:11:95:7e:
                    e0:eb:fb:1f:ec:f9:85:8c:58:e3:c4:36:8c:8c:b0:
                    d8:41:9c:2d:b2:a1:34:6f:cf:c6:76:25:c2:24:20:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D3:F1:BE:CD:C0:BE:15:7C:34:D8:2D:FD:53:F3:91:3D:EC:2D:E0
            X509v3 Authority Key Identifier:
                keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:bf:93:4a:1e:5c:01:f2:c2:e1:b7:39:bf:56:af:ea:aa:
         4a:94:31:31:56:b5:72:a1:90:22:98:b7:60:2f:4b:2f:50:1f:
         89:f7:cf:b5:57:31:0b:d9:a2:23:04:ec:86:ce:d2:aa:7d:34:
         fd:4f:2a:2f:8c:23:b0:7b:5d:68:67:a2:5e:05:a8:a7:0e:39:
         d9:62:2c:5f:5e:5c:a0:53:82:0e:6d:30:70:70:98:3c:f6:0a:
         31:cc:b5:ca:58:8d:ca:6f:11:f5:95:33:11:b1:65:3b:91:fa:
         49:91:57:16:ea:bc:0c:c1:9c:61:a0:f2:ed:53:be:72:f5:24:
         b5:6d:32:5b:2d:55:64:ba:f8:c7:0a:17:a6:15:78:0d:fc:48:
         45:73:35:1a:12:19:ca:4e:f0:d6:d0:ed:fe:f5:dc:2d:25:b6:
         d4:d3:cc:d8:d1:63:18:6b:8c:31:62:84:00:1f:6e:59:6d:32:
         b0:46:a3:a0:08:ee:c9:7b:73:13:08:ba:03:19:0d:80:3c:bd:
         b8:4f:e6:db:55:da:f1:a9:72:6d:6b:f1:a1:b4:42:1f:e4:5d:
         a6:d9:43:c3:5a:48:08:76:d1:03:d6:7b:e8:62:91:4e:f5:89:
         c0:b7:21:c5:d9:dd:eb:64:51:95:1c:af:32:77:b2:a2:24:aa:
         b9:08:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:51:57 2024 by rpki-client on console-fra.rpki-client.org