Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File:                     NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier:          4u6ueixfXITeWLnIcQWW16V8mb9B66igOAW1K9CBOPg=
Subject key identifier:   9A:A2:B3:AC:3D:83:8F:6F:7B:13:9B:EF:AD:3E:F8:6D:C4:DF:EE:E8
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer:       /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial:       01901B20BF6EAED6C0EEE62C67DE5E762DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number:          0B33
Signing time:             Sat 15 Jun 2024 09:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:49 +0000
Files and hashes:         1: Feep44lGWE1AZ9xIVX7k5KsGrfQ.roa (hash: ovq8cw8SYMVV4NI/OS4RfLZRb/R6DAEIg+f23788WqE=)
                          2: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: tl63ufND7cpMu61rD4SXMxlCwOn6aMCh9dFhrwRpe5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:bf:6e:ae:d6:c0:ee:e6:2c:67:de:5e:76:2d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
        Validity
            Not Before: Jun 15 09:00:49 2024 GMT
            Not After : Jun 16 09:00:49 2024 GMT
        Subject: CN=9aa2b3ac3d838f6f7b139befad3ef86dc4dfeee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:40:d2:1c:48:6f:bc:da:5e:82:51:02:0d:
                    92:ed:b6:51:0f:de:bc:bc:a8:13:08:98:86:56:9b:
                    b0:e3:bc:2b:c3:86:f5:29:85:f4:97:e4:f1:d8:d6:
                    a2:b8:d7:05:c0:00:2f:7e:33:5a:54:b9:d7:27:75:
                    24:ee:58:06:fc:41:57:f5:98:a5:47:ad:cf:1c:5f:
                    1f:fb:58:63:ed:de:7f:cb:2f:68:3b:f5:78:61:06:
                    a6:6f:fc:5e:90:4c:5f:60:dd:29:a6:93:14:be:43:
                    cc:5e:90:7e:11:c4:eb:9c:ff:21:d9:9b:ac:95:a4:
                    0d:fb:b4:4b:2b:a9:90:a6:d5:0d:7d:9b:69:08:b9:
                    80:0d:1a:30:40:44:3c:31:de:b6:67:74:9c:3d:aa:
                    65:14:1d:20:82:ea:c1:e5:07:4d:b6:8c:05:4b:ea:
                    06:cd:5f:9f:76:a7:72:76:f9:1b:cf:da:0a:bb:4e:
                    80:0f:ef:08:63:d9:79:42:f3:93:a0:0b:f8:9f:cb:
                    2f:1f:b1:79:7d:90:68:38:ac:76:9b:fd:d4:85:f7:
                    51:91:97:82:da:75:a1:38:a9:eb:49:3e:88:33:7e:
                    43:56:ad:73:09:62:ee:7f:9e:22:69:0a:82:f0:78:
                    14:11:e4:06:13:6f:88:b2:77:51:3c:52:0f:6a:36:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:B3:AC:3D:83:8F:6F:7B:13:9B:EF:AD:3E:F8:6D:C4:DF:EE:E8
            X509v3 Authority Key Identifier:
                keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5e:8f:0f:8f:d8:2a:f9:e7:27:45:63:55:4f:84:94:db:c3:
         3c:da:d1:67:ad:0d:d0:ad:e3:a7:1f:1e:c1:b5:b3:a8:b2:a5:
         cb:51:dd:f4:15:54:68:59:61:b3:41:fc:54:e6:2c:fc:54:c8:
         79:f9:ef:1e:bd:76:37:c9:82:3a:b1:52:dc:67:ad:e8:69:a5:
         99:37:e7:96:dc:57:4b:f6:de:2f:ce:8f:13:76:69:cd:fc:ca:
         8a:83:a3:4d:eb:43:e6:2f:7c:34:bf:13:5e:d6:ec:8e:ee:18:
         c7:90:90:66:69:f9:76:51:b6:b4:5a:8f:f0:7d:67:08:a9:fb:
         69:f8:e4:f7:9b:33:2a:b8:c4:51:21:c6:44:b2:fb:5c:a9:9f:
         87:ef:dc:54:f6:f0:89:27:ed:b8:59:ef:b9:66:45:0c:18:47:
         8b:2f:35:8d:df:ff:fd:59:37:bb:b0:74:5a:90:d3:0b:c1:dc:
         60:02:c1:40:dd:27:e9:1f:6a:8d:e4:79:4d:a4:64:b0:d0:6c:
         93:06:13:e7:bb:57:71:78:82:ac:74:cd:83:e1:a3:97:11:80:
         4d:67:9e:20:eb:c5:2f:02:25:f9:ae:b3:bd:9a:b2:03:fd:1f:
         6f:71:39:91:d0:b3:60:b4:aa:28:3f:70:88:13:1d:c7:ab:3f:
         e6:85:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:29:11 2024 by rpki-client on console-ams.rpki-client.org