Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          QWBI7Y7wXf1ZtFZtbwaZ1zo0woBMvnI+o9AFsPSdaXM=
Subject key identifier:   A6:11:05:34:FD:62:B8:0B:AA:5D:C5:E8:73:13:4B:01:9A:69:00:D4
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       01904189E9454870DFAF075E3AFC92F477AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 20:01:15 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:15 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:15 +0000
Files and hashes:         1: 3lbLDTy4DDrq4j3YCSSmI_IRmE0.roa (hash: IoUuUbzkJZQFz9eosOV9VxYsDRot5cms+DGPyu87TrI=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: qj0E86P2jA8egOMEbgGeVNcu8x6BauLHBwi3n15LtVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:e9:45:48:70:df:af:07:5e:3a:fc:92:f4:77:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Jun 22 20:01:15 2024 GMT
            Not After : Jun 23 20:01:15 2024 GMT
        Subject: CN=a6110534fd62b80baa5dc5e873134b019a6900d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:d2:db:e0:85:c9:e2:81:43:0e:d7:92:83:
                    f8:86:33:2d:73:e4:5f:c0:67:4a:56:aa:4a:63:38:
                    ef:ed:14:71:99:e3:54:eb:53:78:29:be:e1:92:54:
                    d9:62:ce:39:95:78:55:71:5d:c3:46:48:b9:10:36:
                    a5:07:8a:c7:c6:a5:fc:2f:94:5b:0b:68:88:0b:9f:
                    dc:40:f6:0d:57:a5:47:70:45:95:84:6c:74:70:95:
                    48:59:9b:41:29:05:ae:23:22:15:8f:55:87:53:c8:
                    e8:24:a6:2a:3d:22:ed:f8:1b:01:79:b9:a5:10:c9:
                    06:96:70:d1:93:d6:53:b9:5f:5f:b8:19:da:0b:6b:
                    cc:b8:f7:be:cc:91:c2:33:14:84:00:2c:79:01:ba:
                    f4:f1:8d:6d:55:30:2f:65:34:38:06:5f:d8:eb:c7:
                    21:8f:98:a3:c4:8f:82:b2:d1:05:12:11:fa:2c:12:
                    e8:64:f0:3c:7f:29:10:4f:2d:22:c8:7a:d0:f0:63:
                    73:33:2b:ec:d9:6e:53:83:c4:80:79:9d:7f:eb:7b:
                    df:62:65:2b:85:1b:1c:ed:1c:1a:ab:73:c4:09:ec:
                    96:8b:f0:e5:13:a0:7e:25:1c:e5:2a:91:d3:b8:0a:
                    31:ec:67:29:fc:16:69:a4:5d:a6:49:84:4a:07:58:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:05:34:FD:62:B8:0B:AA:5D:C5:E8:73:13:4B:01:9A:69:00:D4
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:64:1b:87:3b:19:43:60:bf:cb:5c:3f:13:18:61:18:3f:
         a3:27:32:6e:c0:0a:ff:d7:b3:c1:19:c7:95:75:3d:fd:70:d8:
         06:90:67:b6:01:ac:46:b9:4c:21:92:7f:1a:92:77:b6:85:63:
         13:49:64:dc:ac:a4:25:94:0e:ae:dc:01:59:a5:44:d8:44:ed:
         5d:b3:00:a6:2a:1f:ce:33:8f:32:0b:3d:cb:6c:5a:b4:a0:7e:
         60:86:3b:a8:34:77:84:e2:0a:b2:3c:64:02:7e:9c:e8:73:78:
         de:f4:e3:87:7e:19:d9:8a:f1:20:90:4e:ac:c9:71:10:56:9f:
         ec:ec:4e:f9:e1:02:de:99:1b:f1:18:cc:34:54:de:55:ac:1c:
         dd:c9:58:2b:59:85:c9:10:a7:ed:e4:eb:5b:37:e8:9a:4d:99:
         96:f3:79:5e:4b:c3:da:f2:72:7d:b7:8d:00:d4:17:d2:b3:9f:
         64:01:ce:6c:84:f1:b8:d2:d0:89:a2:04:db:7f:30:5c:94:fd:
         51:d3:38:7e:73:ec:93:d2:52:d8:10:a3:de:5a:7d:e9:bd:f7:
         83:16:6a:4e:c5:de:ca:4f:34:fb:72:96:46:ce:f8:fb:16:53:
         27:ee:d8:09:75:cb:fb:33:5e:7a:08:0b:e8:69:bf:67:bc:f0:
         3c:bc:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:58:45 2024 by rpki-client on console-fra.rpki-client.org