Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File:                     NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier:          PIaHuq4MPyJ9Tvp+xg7SzKJxPx3hlTCPSJtixv/2aXI=
Subject key identifier:   5B:8F:51:F6:AD:59:0A:03:03:DD:40:91:AE:F9:C0:47:2E:E5:A6:80
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer:       /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial:       01901BFEBBECDE702D5EC1AE805344E2CA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number:          1182
Signing time:             Sat 15 Jun 2024 13:03:17 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:17 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:17 +0000
Files and hashes:         1: 631WVgRjqRecc6oXZgnjMKWbXtU.roa (hash: 3Q3Lwe6JZqce30GfOm3kMCiGg5YOFN2K8pBpLtm92M8=)
                          2: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: VvoOgPViVAgOawlyaN1FB88gb6URpiZfCcUVf8KGCeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:bb:ec:de:70:2d:5e:c1:ae:80:53:44:e2:ca:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
        Validity
            Not Before: Jun 15 13:03:17 2024 GMT
            Not After : Jun 16 13:03:17 2024 GMT
        Subject: CN=5b8f51f6ad590a0303dd4091aef9c0472ee5a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e0:8b:a9:00:0f:33:4a:32:7a:92:e3:86:a5:
                    42:00:30:af:63:0f:8d:a7:88:64:df:bb:1e:eb:02:
                    59:d6:ea:97:97:f5:62:af:33:b0:5b:81:5c:b3:91:
                    59:e7:c7:ce:9d:06:a8:ba:fc:07:cf:03:69:50:19:
                    94:0d:f9:8b:14:6a:22:c6:37:1a:bb:d5:90:06:6e:
                    75:08:a3:4a:62:ba:ca:66:a5:58:06:59:90:ca:00:
                    38:77:13:92:04:cc:2d:41:8f:42:8e:7f:de:34:9b:
                    32:26:0b:20:f7:88:0c:68:cc:a5:d8:c9:58:ec:34:
                    ff:aa:fd:a0:4d:d1:84:1b:80:ac:6c:ef:ae:27:61:
                    22:50:65:9f:56:5c:91:e0:16:46:be:0b:0e:4f:ca:
                    2a:fe:cd:cc:78:e3:4c:ac:be:87:12:db:cf:2c:74:
                    0d:13:80:1b:d4:c6:3e:a7:6e:2c:42:00:0f:b3:3c:
                    5f:40:c6:f1:f2:dd:60:56:54:b5:27:8b:6c:94:fc:
                    dc:5b:9c:7d:1b:81:66:7f:ca:46:7b:09:6a:bf:31:
                    5a:1d:a7:08:e1:98:fb:32:65:29:07:b0:b5:22:24:
                    c6:e5:41:97:27:17:33:2a:53:6a:26:bf:16:31:c1:
                    55:0d:e0:64:30:d0:86:0f:40:5d:4a:63:f0:aa:f8:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:51:F6:AD:59:0A:03:03:DD:40:91:AE:F9:C0:47:2E:E5:A6:80
            X509v3 Authority Key Identifier:
                keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:23:4a:da:b3:4d:46:42:b5:68:ed:f3:0a:57:12:4d:0b:f1:
         6d:6f:da:5b:09:bc:ba:3d:55:72:2c:80:61:85:16:85:7f:52:
         e5:ce:ed:c8:52:25:e2:9a:9f:92:83:33:ea:94:c0:3b:6b:d6:
         3b:4f:82:f1:5c:94:89:91:cd:a3:5c:9a:a1:b7:d7:1f:fa:30:
         97:67:5c:a8:a3:53:08:13:dc:f7:5a:f7:59:ef:27:3e:7a:9e:
         06:bf:8f:bc:e1:f0:8c:1e:d9:0e:9f:df:6e:9f:a1:d4:88:c3:
         b4:ad:ed:08:01:50:56:8d:17:3f:64:93:a7:f8:c0:ba:48:03:
         9d:1f:35:43:b1:d9:da:b2:84:01:c4:25:ec:23:02:65:37:a3:
         e5:c1:3c:ee:f3:3a:2e:b7:16:00:09:7d:ac:f3:1b:88:5d:d1:
         0b:0b:27:57:45:46:cc:27:5e:7e:37:e6:17:3c:8d:1f:39:e0:
         3e:8b:de:c9:11:ff:ec:6e:ff:24:ee:9d:1e:4a:4c:f1:26:a3:
         d3:08:36:cc:d9:43:e3:07:45:d7:b2:e3:f1:11:3d:a9:bd:c3:
         3b:00:fa:2c:48:04:dc:79:9b:05:94:af:4f:f7:fa:9b:a4:43:
         5a:06:c0:4b:7e:50:31:5e:92:b1:1c:ed:41:ed:23:1a:34:88:
         78:4f:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:35:10 2024 by rpki-client on console-ams.rpki-client.org