Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File:                     NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier:          32RMMWD9jrPAZplSeLN9O5B+lPEpFDev+tuu/nKFrR8=
Subject key identifier:   23:FA:6B:47:C6:D2:28:44:5E:93:BD:17:7C:07:74:4D:90:8C:F5:2F
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer:       /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial:       018FA2C07A81835A9FDA13313CB855FE1A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number:          118D
Signing time:             Thu 23 May 2024 00:01:14 +0000
Manifest this update:     Thu 23 May 2024 00:01:14 +0000
Manifest next update:     Fri 24 May 2024 00:01:14 +0000
Files and hashes:         1: 17_anoaX0Szv2B8u3aufgOWEkIk.roa (hash: UBfQJExyezrhkwr7nmGaRvYXDhA0AzuFZ5/3NeyOm7c=)
                          2: 2aDHEjOb6GEyE3bNG85KqxbQ8jY.roa (hash: vn2gcgZTwBagseQZ1wHGWP5RP56bkWT4DAFRko5y+i0=)
                          3: 97BAPsew3_1liq1CGxhxofD57Bs.roa (hash: dBTykiavOfHvrnPNMfAg9dP36M+HyNop9EVthW3Ez5I=)
                          4: GqchX1BXmcbND4X870da7zE92R4.roa (hash: aMBXVLFJDvbxFGWSFm6wAQ/Y2qAw1kxRNoQKzYRiUCY=)
                          5: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: dXR3t0qRHnHhbbjACkTtJSxdLTIrO33COwLdgXrfSko=)
                          6: guPJoU3okhYmo4uQ1yquKVFMo3Q.roa (hash: mjuscVovVhksdu3bJpsx5gtCo6CW9QziQvY3zFbtq8g=)
                          7: o9jXhmqLFbD4kWiozGrH64SvXgI.roa (hash: PmWue0Wl3wPApgzPj5uUwenpiBeCLb6UhrfWvdnKeu8=)
                          8: rjbzZJF3uvqe93de_mKvF5HzrlY.roa (hash: YWRtU+KHLJl2voSK8O8QWl/rDGwId7pM04MtS8CI6Xo=)
                          9: yp4Aaee4CkXQq6i1ISJ9NOw-YqU.roa (hash: CvZygV9izRAniDR5eTdKs0kVM2mtX3Q1jfeBcO2bQSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:c0:7a:81:83:5a:9f:da:13:31:3c:b8:55:fe:1a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
        Validity
            Not Before: May 23 00:01:14 2024 GMT
            Not After : May 24 00:01:14 2024 GMT
        Subject: CN=23fa6b47c6d228445e93bd177c07744d908cf52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:cd:33:1e:c4:80:7f:58:3e:c8:2f:a6:5e:
                    05:3d:6d:4f:b2:76:3c:53:2f:c0:17:3a:76:ba:07:
                    11:f6:b4:ab:02:0a:1e:ce:77:9a:7f:fe:c8:28:79:
                    44:fd:1a:84:57:84:cc:9c:68:df:1b:46:18:96:4c:
                    df:6c:3f:a4:04:9b:c0:95:86:b4:ed:77:0a:72:61:
                    9a:9c:d7:28:4e:e0:2a:d8:8c:79:72:34:da:19:93:
                    46:84:95:4f:f0:8a:3a:34:2c:96:47:15:ff:8d:8e:
                    01:19:13:65:b6:d7:ce:d0:5c:4e:f2:58:7c:46:49:
                    52:4d:01:45:b2:64:2e:ee:5c:c5:d3:6f:8f:22:e2:
                    04:b0:70:17:ef:7d:89:df:77:e5:12:d3:6b:99:cf:
                    17:f7:e7:88:0e:d2:28:3d:28:1b:bf:b1:37:85:32:
                    0d:b0:fb:6a:f0:32:41:d0:94:88:b0:73:22:11:1f:
                    7c:5a:87:0f:b8:5f:24:1b:43:cd:20:2b:47:66:9f:
                    45:2e:85:82:aa:a3:7e:92:32:9b:2f:88:03:06:35:
                    62:c0:0e:17:e9:b9:b9:99:49:b0:5b:b9:55:12:08:
                    e4:93:73:50:a8:af:52:25:14:7f:bd:84:e5:e6:e6:
                    7e:8b:aa:d0:b8:2e:02:71:b9:63:a6:52:07:2b:24:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:6B:47:C6:D2:28:44:5E:93:BD:17:7C:07:74:4D:90:8C:F5:2F
            X509v3 Authority Key Identifier:
                keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:aa:2a:a6:1c:9c:d8:b7:e0:92:d5:27:89:b5:5e:a9:99:
         5d:84:15:e2:3a:98:b8:e8:f0:6c:3b:bf:7d:b0:f6:6e:fe:6b:
         df:c3:e5:73:5f:4b:0f:60:c2:d5:bc:62:6b:ee:06:de:3a:b9:
         37:b5:cd:f4:66:81:70:a9:5c:e9:5b:54:19:3b:17:75:d3:f1:
         ae:a3:1a:54:7f:0f:af:a6:c5:73:63:51:33:4a:38:b7:31:5b:
         dd:fe:36:82:24:8f:c7:5d:b0:a0:2e:eb:35:8a:b0:da:c7:7a:
         94:02:81:3c:cc:e0:67:b5:3a:26:3f:4e:b1:50:4b:81:3a:10:
         a2:7a:df:95:c5:f8:51:eb:31:bd:fb:4d:f3:18:3b:56:dd:ea:
         29:c9:d7:bc:6b:ee:4a:f3:7e:73:c0:5d:97:6d:35:33:6a:2c:
         1c:57:e7:92:af:a5:e4:8c:40:8e:54:ae:6a:76:2f:1c:20:1d:
         b3:b1:a2:11:2b:9c:41:bc:c1:ee:00:80:4e:61:5c:ad:42:a5:
         12:11:87:f6:5c:87:26:63:8f:b9:ac:90:c0:1b:dc:9a:eb:c1:
         2c:89:54:d9:d6:70:ac:21:c5:2c:87:2b:0c:2f:06:a5:09:e8:
         fe:91:d4:b5:5c:4c:6e:00:a7:04:af:9b:19:fe:68:67:c6:56:
         f1:4f:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:09:43 2024 by rpki-client on console-ams.rpki-client.org