Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          sXYzQqtt+Un1OR0KeSmmwCDYJyRlqiKEq+ZmsBTFus0=
Subject key identifier:   B3:14:3A:CA:DD:BC:64:FD:D5:76:83:D9:5A:F6:DF:42:87:8C:A3:AD
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       01901CD8561740E6E0490673391EEFE7F737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 17:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:58 +0000
Files and hashes:         1: 3lbLDTy4DDrq4j3YCSSmI_IRmE0.roa (hash: IoUuUbzkJZQFz9eosOV9VxYsDRot5cms+DGPyu87TrI=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: qhfwSWB0KRj/kwP9wDe4RCWR1eFALNHz4nyGHi7O3qI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:56:17:40:e6:e0:49:06:73:39:1e:ef:e7:f7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Jun 15 17:00:58 2024 GMT
            Not After : Jun 16 17:00:58 2024 GMT
        Subject: CN=b3143acaddbc64fdd57683d95af6df42878ca3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:48:18:f2:b7:03:9b:0b:12:54:bf:b3:6d:
                    e0:8d:84:0a:49:6c:b0:ff:5a:c6:0a:a4:98:3b:89:
                    aa:5e:c7:66:6c:ce:80:01:a0:84:bc:1e:27:bd:77:
                    23:b3:8c:5c:78:2d:06:aa:b3:33:ed:73:84:78:55:
                    88:9d:0b:e5:ee:3c:50:04:94:4b:89:fa:73:18:3c:
                    c2:87:9a:59:0d:71:8e:0a:24:f5:60:d3:68:ab:80:
                    a6:da:d9:1c:4f:a2:67:78:8f:34:3a:30:b5:92:7f:
                    ab:40:33:90:7a:36:6f:84:66:48:86:78:7a:df:79:
                    44:44:4e:e2:0e:f6:10:61:be:2e:59:35:f3:34:19:
                    ce:37:8f:9f:ba:29:d1:21:4f:2d:9d:50:92:00:4b:
                    b9:a8:79:62:bc:0d:2f:1a:68:34:6e:12:ab:0d:62:
                    b5:d9:55:66:e0:43:c5:49:61:11:37:a2:50:51:69:
                    ce:49:40:b0:8a:ec:92:e2:52:b3:f3:f1:96:74:eb:
                    a3:fc:52:2e:85:47:54:91:f9:7b:0b:85:ce:b9:61:
                    df:d7:22:49:4b:72:47:1d:92:a2:c1:85:87:6f:26:
                    93:0e:0a:d6:e6:93:60:85:05:15:a3:ef:e2:30:2a:
                    e2:f7:3f:e1:27:f6:ca:df:e1:c7:ed:97:82:55:bf:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:14:3A:CA:DD:BC:64:FD:D5:76:83:D9:5A:F6:DF:42:87:8C:A3:AD
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:22:0e:6a:72:e1:a5:67:b3:1c:56:c2:13:91:fe:5a:51:a5:
         90:fa:83:8b:e0:01:eb:a1:f5:4d:50:b5:21:1a:70:89:8e:c9:
         22:08:af:c2:92:39:d9:c8:05:ae:c1:46:3a:ce:73:15:7d:e9:
         6c:24:e8:96:1b:87:78:32:17:ff:a8:55:a0:2c:f7:6f:96:20:
         02:39:d7:d7:c6:1d:6f:4b:43:95:c8:74:4d:09:fb:81:03:50:
         4b:22:bf:07:52:8b:27:07:f1:c4:29:3a:e7:dc:93:81:47:5a:
         ed:1c:5c:40:6e:6d:fa:1f:a4:8b:12:91:7f:98:10:09:fb:b3:
         dc:ef:df:c9:94:9e:09:4c:a6:55:f6:a9:00:f8:04:1f:ae:48:
         64:32:2e:ad:3f:93:e5:2c:58:06:b3:d8:0a:67:e2:7d:3d:9f:
         63:b8:aa:61:26:b3:4a:33:23:81:de:11:29:46:fd:5e:f5:ec:
         dd:b3:7e:cf:e0:a0:e7:59:73:55:e4:70:79:7e:dc:6f:69:9c:
         4e:33:b9:4a:c5:3a:11:3e:ba:d6:ba:60:c7:67:6d:b5:e7:48:
         eb:f4:49:0d:14:bc:71:3e:a2:36:46:b8:4d:b4:d2:7a:5d:99:
         2a:26:14:60:7a:e4:b8:69:55:5c:4e:66:77:61:90:4f:c6:1f:
         cf:5c:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:10:12 2024 by rpki-client on console-ams.rpki-client.org