Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File:                     nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier:          9pAt64F8kR1zQFD1wSIOLDtrMDEYXPp61IYbRl/5TW0=
Subject key identifier:   AE:B0:82:F2:4B:A5:B2:AF:BB:B1:14:09:44:00:1C:D5:0A:0E:3F:7C
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer:       /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial:       01901D0F738F5C86F6499EA6575FCB13CA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number:          055E
Signing time:             Sat 15 Jun 2024 18:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:10 +0000
Files and hashes:         1: ToAMP3_Eyj77Bz5c7Nm9oPDNScM.roa (hash: Yj8uqLvpntYg5NJApsipokZstmWWQWDi80d1EvOFKxk=)
                          2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: 9SXlFalzLayNbHMjfYiizF7TH/FW8iDy14G67POE1xQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:73:8f:5c:86:f6:49:9e:a6:57:5f:cb:13:ca:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
        Validity
            Not Before: Jun 15 18:01:10 2024 GMT
            Not After : Jun 16 18:01:10 2024 GMT
        Subject: CN=aeb082f24ba5b2afbbb1140944001cd50a0e3f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:cb:7f:d7:8d:b3:e0:22:c2:ad:dc:7b:a4:
                    ec:48:92:3c:3d:e0:83:50:70:43:4c:74:10:a3:ec:
                    43:15:0b:f0:02:22:7d:04:e4:13:d4:28:33:8d:fd:
                    32:a5:70:85:d6:45:b3:c0:27:3c:39:a9:0e:a7:ca:
                    83:06:e6:92:57:c3:15:75:78:86:9d:bb:b0:64:4b:
                    8b:f5:a9:a3:40:7e:54:50:fe:ab:74:d1:3b:13:1c:
                    59:fc:15:10:70:b7:bb:5a:ea:2b:ef:bb:29:66:cc:
                    2e:49:d7:b9:e0:7b:2b:4b:d9:66:6a:38:89:39:6f:
                    3a:16:70:40:48:b2:3d:56:27:3e:4a:23:d9:58:b0:
                    72:f0:30:1c:6d:67:e8:ff:88:27:d7:13:f2:d1:01:
                    17:00:5c:ac:7e:6b:64:84:86:84:c3:1f:71:2b:c2:
                    c5:27:37:79:28:11:25:3a:a1:14:c5:5e:b3:99:e0:
                    cc:c4:3b:9f:eb:18:32:35:a2:f4:a2:e7:cd:7e:be:
                    00:46:1b:1c:74:33:dd:e2:f9:fe:97:b9:b2:3b:4e:
                    5d:42:c5:57:d6:9d:b9:3b:b5:69:25:d0:36:8f:a2:
                    da:aa:82:a8:c0:70:81:f2:db:e3:a6:d7:65:59:87:
                    06:c9:0c:c9:e6:bc:c1:95:53:f0:4d:ac:1a:d7:9c:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B0:82:F2:4B:A5:B2:AF:BB:B1:14:09:44:00:1C:D5:0A:0E:3F:7C
            X509v3 Authority Key Identifier:
                keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:70:a5:f4:02:7e:3f:ff:7b:5b:c3:7d:f4:12:8f:15:96:
         64:44:7d:96:c0:72:94:45:2e:2f:95:26:ac:33:63:68:2c:c3:
         df:23:8b:27:a7:43:b2:a4:56:df:3c:78:28:dd:07:20:6f:2c:
         56:e9:06:dc:63:c9:5b:c0:95:b0:2e:f1:c4:eb:4c:12:5f:b2:
         cf:26:24:8a:b0:f8:59:71:db:47:e6:c2:4f:b6:76:92:4d:01:
         86:f2:22:d6:ec:83:d2:2e:51:ff:91:38:ed:fe:93:bf:e2:2a:
         fa:d6:b6:17:61:24:fd:c9:bd:37:00:7c:5e:fc:de:6f:13:30:
         6d:a4:0e:43:2a:b5:7c:b8:f0:72:fe:dc:ab:4a:5d:a1:c9:1f:
         16:89:e6:35:56:ea:78:03:17:2f:a0:ac:21:65:e6:de:d0:0d:
         ba:15:b3:a1:ed:c3:10:db:c2:96:4a:f3:ba:2d:39:4d:65:fa:
         37:52:2f:94:97:30:2a:81:cc:b4:39:7d:f2:32:68:2a:90:e3:
         df:13:20:fc:a8:df:cb:25:8d:d9:ac:c0:a5:93:56:53:ec:87:
         33:c4:b2:48:1e:dc:26:52:27:0c:93:0d:4a:56:32:25:9b:d3:
         ad:87:36:c8:c1:bc:86:c7:48:01:7d:84:69:bd:c6:04:08:35:
         1d:63:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:49 2024 by rpki-client on console-fra.rpki-client.org