Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File:                     npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier:          yVwNe+qHdddT2Kk/aFhItYv5zf4UYs3pZgp2gagjqCA=
Subject key identifier:   CC:7F:9D:7F:F9:91:2F:36:42:06:DA:99:96:3F:3A:48:D5:1E:26:14
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer:       /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial:       01901DEBB0A78A1E3CB49A77284DE0807104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number:          0283
Signing time:             Sat 15 Jun 2024 22:01:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:43 +0000
Files and hashes:         1: KZZa85m8al-qtS4ZqFjyiCdj7-A.roa (hash: MnXipwiCBwZ4iTm/qORZBhrosrO0FH5e3AtOUYg6Myc=)
                          2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: YSz4wjc7iMnlooLS7v2v+Ehh8Q7p0RyxgmmrOhI7z5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:b0:a7:8a:1e:3c:b4:9a:77:28:4d:e0:80:71:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
        Validity
            Not Before: Jun 15 22:01:43 2024 GMT
            Not After : Jun 16 22:01:43 2024 GMT
        Subject: CN=cc7f9d7ff9912f364206da99963f3a48d51e2614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:85:7e:ef:be:b2:3f:a5:02:91:eb:ec:27:
                    3e:04:03:4b:97:26:37:af:0c:c2:fd:2d:5c:a7:48:
                    94:e5:96:92:13:42:4a:27:d6:38:6d:a4:8f:e6:25:
                    cc:bc:3d:70:cc:ef:54:e9:33:23:0c:24:ed:7a:0e:
                    40:41:e2:24:7c:a8:10:0f:50:31:7d:7b:23:08:20:
                    bc:4f:9a:24:08:aa:9a:66:b3:a5:80:e4:2a:59:8e:
                    86:70:84:09:50:06:cf:7e:37:c1:80:f4:6d:bd:82:
                    6a:16:d5:d6:56:31:81:45:ad:0b:6f:98:f1:50:2e:
                    ba:ae:69:24:a8:30:40:e9:61:78:48:3c:87:eb:b5:
                    21:f2:e8:10:65:c6:cd:90:8b:d4:89:a6:2e:77:f7:
                    6b:0b:59:d4:71:3c:a1:e9:19:b0:7c:63:68:93:af:
                    4a:1e:36:a5:58:28:31:1f:bf:2d:36:88:13:19:39:
                    95:80:46:6e:f6:2e:f1:35:73:b3:79:a0:9b:92:33:
                    c8:be:92:42:55:cb:b3:fa:8b:a1:34:03:4c:79:fe:
                    40:f9:a6:01:0f:87:3c:c7:29:70:32:5e:8f:06:86:
                    be:79:0b:42:d9:e5:b2:97:bc:a1:7d:4e:7a:fe:e1:
                    58:d7:3c:aa:47:7d:83:70:67:e3:7b:ff:ce:c3:fb:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7F:9D:7F:F9:91:2F:36:42:06:DA:99:96:3F:3A:48:D5:1E:26:14
            X509v3 Authority Key Identifier:
                keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:14:68:9d:ef:23:9f:aa:fe:c7:e6:a5:2d:0a:65:e1:d4:
         bf:43:22:ae:64:7e:e1:2b:03:d1:6a:b4:df:d1:e1:bf:c2:35:
         a8:f6:b0:f4:a7:20:11:3b:76:5b:16:61:cd:c6:2d:d2:a7:0b:
         fb:0f:9e:24:8e:06:80:37:cc:a4:f1:36:94:77:01:c0:82:c1:
         9f:69:f2:bb:97:36:a5:c8:25:fe:4b:e8:89:71:52:90:f4:04:
         2b:63:37:db:47:70:bf:5d:b6:7e:7c:8e:87:63:f7:0c:5b:9a:
         1e:ab:63:d1:61:a0:df:21:5e:92:61:04:f5:1c:74:40:c0:c0:
         b5:9a:26:e0:26:02:33:20:a3:08:ac:d0:d0:93:7d:a2:4e:2d:
         2a:17:87:59:02:ba:af:b3:2f:21:72:30:41:1f:05:a5:a1:63:
         44:f6:a9:74:2c:57:e3:fa:d8:4f:f1:f6:c5:2a:95:b0:0c:4e:
         76:9d:d0:ea:0b:d8:9a:21:7e:24:0a:84:2a:57:c1:0f:7b:f6:
         95:15:29:90:7d:6f:0c:12:ab:d2:d8:e6:e2:cc:bb:c7:d7:51:
         dc:54:33:d1:a4:1e:00:75:a7:8f:c2:17:a4:8a:47:fa:33:98:
         83:a4:ff:e5:03:fe:26:6c:57:ce:c1:64:c6:3d:47:d2:20:c8:
         a3:00:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:36 2024 by rpki-client on console-fra.rpki-client.org