Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File:                     nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier:          PlPijmlUDLalsas42MU2rfp2drgh4aRsbMnnHCzXw5I=
Subject key identifier:   7C:1A:B2:E8:BE:66:FC:97:97:F9:60:AC:C6:91:F6:DD:49:2E:4E:2D
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer:       /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial:       01901C334A7834E037CFEFB035D2944A30E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number:          0180
Signing time:             Sat 15 Jun 2024 14:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:41 +0000
Files and hashes:         1: ZXdIvBTI-IdKjiomddQAWbnLa80.roa (hash: E37cbmEY/FwFwBGHU5Hs5d7Zn0Vba5Xx5/FZNLnsb0A=)
                          2: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: +vp0HFpXiKdHnmjuGWYEOc88YHnPUzQBQ5xE0cue0Qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:4a:78:34:e0:37:cf:ef:b0:35:d2:94:4a:30:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
        Validity
            Not Before: Jun 15 14:00:41 2024 GMT
            Not After : Jun 16 14:00:41 2024 GMT
        Subject: CN=7c1ab2e8be66fc9797f960acc691f6dd492e4e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:d9:03:0f:90:78:e0:24:d3:3e:5f:39:3a:
                    34:d8:03:2b:7c:09:a6:7a:24:f6:e9:75:a9:96:87:
                    88:86:d1:0e:d2:18:db:07:af:3b:7e:58:e9:d9:38:
                    1d:10:36:58:13:66:f0:4d:cd:ab:fd:86:a2:3b:4e:
                    cb:b1:eb:0f:dc:db:d2:53:c1:b9:9d:33:3e:13:25:
                    ea:09:1a:91:92:72:ce:03:dc:2d:34:12:2a:0c:6f:
                    50:3b:8c:9e:f6:2e:38:8a:d8:f7:14:86:2b:d3:4d:
                    b8:f5:13:20:6d:3a:4f:46:95:1c:98:34:bb:68:3c:
                    a4:cf:a6:8b:bf:f2:9d:93:9c:56:4f:75:85:76:b7:
                    8e:0c:ae:50:1f:72:c9:9c:cf:59:5f:f5:5c:e8:59:
                    0e:ad:b3:80:19:c8:98:7e:6c:dd:58:31:c1:ea:c2:
                    89:74:f7:30:87:75:e5:b1:f5:7c:2d:ec:81:72:88:
                    cd:5d:33:ce:ce:4c:db:05:2b:2e:a0:2c:21:f1:3c:
                    df:22:16:38:b3:4d:70:ab:f0:74:1b:50:40:0c:10:
                    9c:1d:33:28:a9:ef:be:73:48:2f:c8:2f:38:77:81:
                    23:44:0f:7d:ee:94:8a:37:dc:d3:c7:84:4b:89:f6:
                    06:a2:60:06:32:85:ee:1f:40:01:1f:59:72:53:ea:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:B2:E8:BE:66:FC:97:97:F9:60:AC:C6:91:F6:DD:49:2E:4E:2D
            X509v3 Authority Key Identifier:
                keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:df:e4:dc:35:b7:d7:d9:9a:cb:d5:80:17:0a:c7:49:cc:
         86:83:08:82:8d:57:14:3c:b5:5a:07:48:d8:4e:a7:55:9f:98:
         29:75:ec:70:22:47:17:1e:58:f3:cf:a7:d7:b1:c9:b7:ac:a4:
         93:8f:29:7f:d2:b3:7b:9e:66:2f:30:8f:79:c4:bf:73:4e:d0:
         64:c5:53:41:2f:bd:13:0e:2e:c3:a5:08:53:9b:d5:e8:14:b4:
         9c:b0:35:21:38:18:43:a2:d7:bc:8a:ad:a8:61:a6:0c:a0:33:
         05:69:f1:8b:a8:58:08:0b:65:6f:7d:60:d2:af:56:26:94:39:
         1e:0e:17:55:f2:7a:00:49:3f:20:69:e2:1b:44:0d:54:c5:eb:
         46:87:05:ad:07:ab:26:0f:73:4a:b9:c1:94:81:65:1c:24:d1:
         d4:71:ec:92:b0:c5:07:0e:85:e3:e1:56:c9:19:f1:f5:42:88:
         17:34:37:a0:26:cb:72:9e:b6:51:76:44:30:ff:99:1c:6e:89:
         6b:13:b4:f0:4e:ff:0b:94:44:72:15:87:4a:c7:23:de:8b:5a:
         ca:5d:aa:4e:79:25:26:cf:d9:8e:69:9c:22:23:f5:9f:8d:6e:
         12:23:09:90:ae:0a:fb:00:b7:5d:f8:69:27:1c:51:36:44:56:
         71:2a:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:18 2024 by rpki-client on console-fra.rpki-client.org