Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File:                     nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier:          eI1r9FYBel6wi1HUIxo04qewv+qLbvUIKZ1n0cgNFLY=
Subject key identifier:   2E:40:D3:5A:18:3C:91:B5:BE:AB:FB:4C:16:98:27:86:AB:72:B1:0A
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer:       /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial:       01901DECE9F619417DB15408AF9AFD13AE4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:03:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:03 +0000
Files and hashes:         1: 6MGpGNmAc2eKZx3rQxF5WtKufAI.roa (hash: BkrWWXNy+7GTvAguv1jvpPZOTKucu81jxgJRWQ8cbOg=)
                          2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: GeVfaltooWBXP6o6eNWSB0Y5FUpVmaUE9+UWZPoKqWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:e9:f6:19:41:7d:b1:54:08:af:9a:fd:13:ae:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
        Validity
            Not Before: Jun 15 22:03:03 2024 GMT
            Not After : Jun 16 22:03:03 2024 GMT
        Subject: CN=2e40d35a183c91b5beabfb4c16982786ab72b10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:d7:9e:15:8c:cd:d6:37:83:f6:ea:ac:26:
                    14:58:01:b1:11:f1:fe:70:9a:31:63:8c:d1:f5:77:
                    0c:89:db:61:a3:39:20:e7:1f:70:66:a9:3a:16:c5:
                    19:e4:cd:85:57:15:71:f6:eb:25:df:73:5f:be:e3:
                    e9:c2:16:cf:3b:a7:35:b4:ba:6c:85:ff:27:5e:8e:
                    71:1c:b8:bb:7b:fe:56:77:cc:7f:a5:62:cb:1b:da:
                    95:2b:f2:a2:9b:de:bc:0f:5f:bb:db:00:c5:2b:79:
                    43:db:cb:67:dc:a0:0e:57:94:9a:94:6f:49:0f:df:
                    c9:a8:5e:6c:82:55:54:b7:82:4e:d5:1f:c6:9d:20:
                    e3:31:d4:5b:51:47:d7:8e:4a:7b:8b:d9:5e:12:90:
                    de:d3:f7:52:db:54:55:23:f5:3d:f4:13:91:0a:1f:
                    00:95:97:37:1f:27:cd:c8:d5:cb:fa:0d:0e:aa:32:
                    7e:34:67:f7:af:80:c9:66:9d:7c:fa:21:16:d8:f5:
                    52:8c:81:c8:62:59:23:dc:07:cd:f9:a1:b1:19:13:
                    90:22:57:2f:87:88:0f:6b:69:4e:fa:d0:b0:8b:f6:
                    fd:97:e6:e6:cc:ea:bb:39:d8:73:db:92:67:f2:7a:
                    03:35:2a:5e:c3:99:5f:bc:3d:7a:d8:04:bd:6c:95:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:40:D3:5A:18:3C:91:B5:BE:AB:FB:4C:16:98:27:86:AB:72:B1:0A
            X509v3 Authority Key Identifier:
                keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:98:7b:3e:c3:83:86:95:39:1c:9f:e1:6a:e8:52:cd:ed:
         05:32:79:4c:40:12:2a:1c:84:46:73:e8:3b:03:20:6f:53:90:
         41:71:80:2a:ef:9e:86:0e:8f:d6:1d:7d:25:9f:92:4e:24:82:
         82:ed:80:a2:05:d2:1b:10:3d:02:2d:4a:8d:16:53:3f:bb:82:
         b8:a9:68:9f:94:fd:ea:11:7b:92:05:f9:db:55:98:7a:f3:c2:
         68:8c:12:5c:18:38:93:23:ff:a1:0a:ce:c0:8c:fa:2a:b9:c7:
         fe:b3:f1:8e:08:e1:47:95:c7:18:db:e1:50:e0:ff:e8:75:27:
         c7:f2:bb:78:43:13:d2:d6:b5:60:fd:25:62:43:3e:f2:f0:a9:
         74:bf:ab:a0:92:85:62:c4:57:61:56:5d:6e:0c:27:67:51:ee:
         ce:82:d6:00:c7:4a:5d:a9:1e:a4:cb:d2:14:d1:4d:42:c0:a0:
         f7:0e:b8:f0:16:a7:6b:c6:40:83:57:8b:f1:f9:ce:ef:a9:6b:
         65:7d:94:e9:84:85:cd:60:41:da:49:36:e0:83:9e:84:ea:15:
         3f:4f:68:1a:cb:2d:7c:aa:09:d2:f6:a9:a8:c6:c1:00:ba:fe:
         b0:62:25:11:b0:af:db:66:56:33:1c:a2:d8:10:ab:01:db:dc:
         0c:26:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:42 2024 by rpki-client on console-fra.rpki-client.org