Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File:                     nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier:          G7QouZiW9kSUruAPnnOyGM8N72m3Zb2sXqT83D3QOTo=
Subject key identifier:   17:16:4B:C3:19:76:AC:F1:23:68:49:4F:D7:66:E5:90:3A:2A:04:6A
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer:       /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial:       01901DEC375FF6E3E63A4C4C05CF2E6B9EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number:          0C69
Signing time:             Sat 15 Jun 2024 22:02:18 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:18 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:18 +0000
Files and hashes:         1: KAjIjPLl1mEkUkLPshebZAkITBY.roa (hash: /Gqf2qhz7oNuwIiuJ9u+BuZiRkLS1wLNMfRkwey2n3s=)
                          2: LQa8IoHW0dU6Q14-RNUQVEkB_28.roa (hash: +frmke3f8r+aTY035plKDH8i+yr95ckPiaCtf3qIMBk=)
                          3: ObkUnmrSN2khQmfM8jY7x8JaiFQ.roa (hash: uzUQz65FHnhpwrX9x/lT7ZA3mjBk3kq8ljug3Ai6xk4=)
                          4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: VYd7X4P72B1pShE3VNIGyQiF8nxufPjV2LwZuyWNe3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:37:5f:f6:e3:e6:3a:4c:4c:05:cf:2e:6b:9e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
        Validity
            Not Before: Jun 15 22:02:18 2024 GMT
            Not After : Jun 16 22:02:18 2024 GMT
        Subject: CN=17164bc31976acf12368494fd766e5903a2a046a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fe:2d:78:d5:bf:7a:d3:f6:24:2a:a3:a4:c2:
                    56:de:e4:22:63:87:7f:b7:5d:82:42:de:ab:b0:02:
                    ce:4e:30:b9:ee:52:b4:8a:f7:01:27:84:84:b8:fd:
                    51:13:c8:3c:e9:b4:7f:a9:8f:a8:2e:96:f8:3e:29:
                    e1:f2:98:30:9b:d6:6e:a3:c3:5d:4d:6e:3e:1d:3b:
                    d4:19:94:6c:ec:f2:19:c6:6f:f8:15:ae:22:d9:e6:
                    92:55:ce:d5:a5:0f:38:ea:56:31:c6:b9:cd:b0:a4:
                    58:f3:28:f9:08:81:72:9c:da:18:9f:a6:28:1c:17:
                    aa:7e:93:9d:51:e0:5e:72:50:71:8e:15:2f:b3:2f:
                    65:9e:bf:a8:ae:e8:7c:ba:83:5c:ee:fc:e8:6a:1c:
                    5e:5f:c0:6c:3e:a4:ae:d7:4a:a4:04:df:49:de:ac:
                    e0:08:29:ac:a2:d7:5a:bf:dc:20:42:1c:c0:00:44:
                    73:5e:b5:63:36:fc:d0:01:c7:fd:7b:82:eb:00:c5:
                    43:56:36:20:30:c7:e2:25:0f:2f:c9:79:6a:28:0d:
                    41:bd:83:78:0d:ff:7a:a6:f4:bd:ba:b2:af:bd:cf:
                    99:91:51:9d:95:19:f0:81:19:0d:ba:ed:8e:8c:18:
                    9c:15:37:00:e6:53:a2:37:e9:15:53:e3:4a:39:0b:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:16:4B:C3:19:76:AC:F1:23:68:49:4F:D7:66:E5:90:3A:2A:04:6A
            X509v3 Authority Key Identifier:
                keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:d7:51:00:81:b4:16:d0:61:d4:65:9d:98:fd:4b:3a:67:
         72:f4:9d:b1:6a:0e:61:8b:44:84:45:79:96:ff:b4:ed:82:6e:
         ca:a4:75:8a:52:a8:66:6c:d2:5c:5f:77:f3:0a:88:20:bc:92:
         a8:e0:c1:81:30:6b:68:5d:ff:e4:9b:74:3d:28:60:45:7c:f5:
         ab:7c:fa:b5:b9:8c:99:5e:a0:ac:ce:3e:1d:b5:00:b4:bc:b9:
         31:78:2d:57:41:db:f0:17:82:c4:4c:6e:7a:04:62:e5:5c:6f:
         60:ad:1b:d2:93:36:7e:26:8b:82:b3:2a:32:af:90:0a:5f:1f:
         21:62:b2:da:74:d5:30:46:83:5b:40:4a:80:c9:6a:00:15:cc:
         aa:0e:c4:47:b3:46:6a:84:f9:c1:b2:38:70:21:36:0c:ab:ad:
         ba:82:3b:1e:35:12:ec:d2:87:d3:5a:e5:6a:bf:4b:8f:a9:09:
         a3:34:c4:b7:c3:d3:85:42:dc:49:2a:8c:4f:ce:9e:74:a5:a7:
         84:7f:54:06:0c:ee:3c:44:59:c8:86:5b:d9:f6:5d:71:b4:a6:
         6f:07:51:2a:a7:30:08:d7:6b:85:98:75:e7:c6:e8:5f:a5:70:
         9c:11:48:4f:60:77:7f:28:c0:67:27:9e:67:bc:d1:79:cc:57:
         a5:ef:99:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7Ddf9uPmOkxMBc8ua57vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk
NmMyMDQwHhcNMjQwNjE1MjIwMjE4WhcNMjQwNjE2MjIwMjE4WjAzMTEwLwYDVQQD
EygxNzE2NGJjMzE5NzZhY2YxMjM2ODQ5NGZkNzY2ZTU5MDNhMmEwNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/4teNW/etP2JCqjpMJW3uQiY4d/
t12CQt6rsALOTjC57lK0ivcBJ4SEuP1RE8g86bR/qY+oLpb4Pinh8pgwm9Zuo8Nd
TW4+HTvUGZRs7PIZxm/4Fa4i2eaSVc7VpQ846lYxxrnNsKRY8yj5CIFynNoYn6Yo
HBeqfpOdUeBeclBxjhUvsy9lnr+oruh8uoNc7vzoahxeX8BsPqSu10qkBN9J3qzg
CCmsotdav9wgQhzAAERzXrVjNvzQAcf9e4LrAMVDVjYgMMfiJQ8vyXlqKA1BvYN4
Df96pvS9urKvvc+ZkVGdlRnwgRkNuu2OjBicFTcA5lOiN+kVU+NKOQsA3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcWS8MZdqzxI2hJT9dm5ZA6KgRqMB8GA1UdIwQY
MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt
MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm
LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa7XUQCB
tBbQYdRlnZj9SzpncvSdsWoOYYtEhEV5lv+07YJuyqR1ilKoZmzSXF938wqIILyS
qODBgTBraF3/5Jt0PShgRXz1q3z6tbmMmV6grM4+HbUAtLy5MXgtV0Hb8BeCxExu
egRi5VxvYK0b0pM2fiaLgrMqMq+QCl8fIWKy2nTVMEaDW0BKgMlqABXMqg7ER7NG
aoT5wbI4cCE2DKutuoI7HjUS7NKH01rlar9Lj6kJozTEt8PThULcSSqMT86edKWn
hH9UBgzuPERZyIZb2fZdcbSmbwdRKqcwCNdrhZh158boX6VwnBFIT2B3fyjAZyee
Z7zRecxXpe+ZIA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:57:15 2024 by rpki-client on console-ams.rpki-client.org