Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File:                     N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier:          Lni/iZEjx1dvbEwCGeXLvgoyJbYfPbLehZqQc+weUnw=
Subject key identifier:   63:98:27:EB:D7:9A:F7:90:80:8E:B4:2A:00:37:5F:76:40:7A:3D:AC
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer:       /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial:       01903D75DEC5E82A1A630582730D0E295265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number:          C1
Signing time:             Sat 22 Jun 2024 01:00:53 +0000
Manifest this update:     Sat 22 Jun 2024 01:00:53 +0000
Manifest next update:     Sun 23 Jun 2024 01:00:53 +0000
Files and hashes:         1: KkfmMcuyGQNfV_aweTnaBG1zS3Q.roa (hash: XwDsQUHN8nEB/bzRpygiIAfDmzJEVaFfL8xJTH9/k0o=)
                          2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: 5+XrYisVuVkc/uA3gzXr9JxpG6uiF8NhwqMK/ZHR+Qc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:75:de:c5:e8:2a:1a:63:05:82:73:0d:0e:29:52:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
        Validity
            Not Before: Jun 22 01:00:53 2024 GMT
            Not After : Jun 23 01:00:53 2024 GMT
        Subject: CN=639827ebd79af790808eb42a00375f76407a3dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:97:45:b8:ea:4b:95:2d:0b:5d:e1:29:d4:
                    62:eb:7c:07:c3:a0:6b:aa:97:9e:4c:48:a9:21:64:
                    60:b2:9a:47:76:99:d3:c2:95:bc:e6:4f:f0:e1:94:
                    5a:dc:ea:80:ac:f5:ab:9b:9a:29:2a:47:a2:b6:f0:
                    81:df:c1:96:8d:60:d0:d0:a7:a8:45:57:00:07:ac:
                    f0:80:34:ec:f5:9f:33:52:55:16:d9:56:8c:39:8a:
                    dc:97:ab:a1:93:73:bb:20:7c:14:d0:0f:a9:d5:fa:
                    75:dd:76:20:1d:ce:4e:10:1d:8f:45:d6:8a:1e:5b:
                    2f:bc:d6:58:5e:8f:71:0d:de:0f:1a:f3:7a:90:14:
                    02:8a:01:d1:c1:21:43:d8:4e:b3:7a:20:c7:b9:aa:
                    ef:54:c6:2d:88:26:74:14:b1:8d:3c:43:bc:83:c4:
                    38:f9:08:00:9b:46:c0:f1:6c:21:63:d9:5f:19:39:
                    8a:b2:20:cd:50:de:90:c3:d2:01:86:32:01:ca:dd:
                    c4:0c:e1:0b:30:0e:63:c5:d2:ee:db:ad:b4:dd:37:
                    b9:1a:fb:c2:17:c5:5c:f0:cf:9d:a3:5f:0b:78:0d:
                    87:53:48:54:63:23:7f:7e:2e:21:cc:a8:69:e4:5d:
                    d4:ac:67:47:83:5a:97:69:e7:db:f6:c5:45:fb:39:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:98:27:EB:D7:9A:F7:90:80:8E:B4:2A:00:37:5F:76:40:7A:3D:AC
            X509v3 Authority Key Identifier:
                keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:22:5c:e8:cb:3a:d3:8f:a9:fb:29:ea:06:29:25:5b:5b:9f:
         07:51:fc:50:43:04:fd:be:bd:b8:22:12:52:1c:1e:a6:a3:8f:
         e1:ae:d7:4b:cb:55:ae:12:b7:f6:1c:43:86:08:0a:f4:9b:90:
         2d:4d:db:81:fd:05:30:dc:f1:81:4f:12:c8:7a:ea:ab:2a:59:
         fa:a9:26:4d:f5:f9:5a:ea:18:6e:63:e5:4a:3d:79:b5:f7:3e:
         8f:34:9c:5e:54:0f:44:e4:f9:0e:6c:73:53:47:20:7c:2a:44:
         ef:39:c5:dd:c7:6b:53:a1:55:23:76:6b:32:1f:c0:98:b0:cc:
         d2:88:03:96:de:df:18:3d:f2:5c:c6:d6:8e:dd:6d:4d:22:25:
         16:22:ec:aa:30:80:2e:ee:53:6f:24:0a:3d:6d:7e:4a:cf:45:
         2d:dc:34:96:f4:f6:c8:fc:dc:66:a6:c8:59:db:67:be:62:6d:
         5c:4e:a9:53:0a:de:58:cb:95:3c:49:0e:d2:5b:5b:d0:7d:a2:
         ae:08:93:85:7a:a1:b4:8a:4b:3b:d2:d5:2d:4b:73:63:33:48:
         1b:7e:16:38:de:87:39:e2:cd:81:92:2c:8d:c9:89:25:70:5b:
         aa:4a:81:84:91:41:42:74:5b:73:51:6a:6b:83:c9:d1:1f:e7:
         e4:47:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:10:39 2024 by rpki-client on console-ams.rpki-client.org