Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File:                     nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier:          tvNMLm3aZq4sQultADCOHenM0CdfS1oF+1BAIzoBg1U=
Subject key identifier:   DF:AE:EA:C2:6A:A2:7C:45:22:4C:34:D6:E4:FF:1D:47:1A:57:A7:1B
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer:       /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial:       0190459D6F9F69B40F06025CEE222704863C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number:          10D0
Signing time:             Sun 23 Jun 2024 15:01:03 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:03 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:03 +0000
Files and hashes:         1: BARnxjfhUtHD_8TeN7fQiCDLxY0.roa (hash: u5iXeol4/8/DlmADOlSKqNCARaXQcyQ12z4gVPeLgoE=)
                          2: C6xcogrA_3_VMFA9_9eilLpFGH8.roa (hash: +FxcROHSqKYi4wnKDP8r51cvgZeouVzUpDApDDNQkHY=)
                          3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: J1vXXfEtfmSNhMjYm9fm2rVykctMxPexPF53x0cu2YU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:6f:9f:69:b4:0f:06:02:5c:ee:22:27:04:86:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
        Validity
            Not Before: Jun 23 15:01:03 2024 GMT
            Not After : Jun 24 15:01:03 2024 GMT
        Subject: CN=dfaeeac26aa27c45224c34d6e4ff1d471a57a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:51:f4:aa:77:a5:d8:36:61:2e:2a:01:15:
                    a7:4d:8c:b8:31:c6:43:2f:d9:48:a3:77:0e:1e:95:
                    70:57:4b:25:b9:95:de:24:f9:5d:21:4f:c3:81:0f:
                    9b:37:4a:f8:b4:a8:d5:ee:68:c4:39:97:b6:73:3b:
                    0b:78:14:81:42:52:c7:22:f4:9a:09:d4:71:4a:95:
                    73:06:82:4e:0c:0a:ae:31:8f:31:40:a5:67:08:c9:
                    a8:aa:5b:8b:d3:db:fc:d9:66:f9:bc:fa:a0:31:5f:
                    cb:c0:34:c4:9d:02:26:cb:7f:df:93:78:50:f7:f3:
                    f4:a3:cc:fd:a3:e8:6c:5a:6e:93:eb:0b:ea:d2:ac:
                    d6:68:12:0c:06:fb:54:03:f9:ac:0f:20:be:ab:05:
                    9f:8b:fc:d9:62:95:af:a6:6b:4e:9e:99:aa:54:c0:
                    d9:f8:f7:71:74:b6:c8:0d:17:be:3c:4f:a1:12:e2:
                    1f:9e:da:4a:43:4d:a3:ab:0c:d5:b3:fc:13:03:12:
                    a9:51:36:cb:f6:47:1e:dc:09:07:c8:22:1e:47:6c:
                    a3:b1:31:cd:45:9e:55:36:a8:3f:fe:b0:4c:8c:ca:
                    76:02:d0:6e:86:14:c3:9c:be:be:87:4b:1e:72:3a:
                    cf:7a:13:73:99:e9:92:5a:71:34:5c:0f:29:99:be:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AE:EA:C2:6A:A2:7C:45:22:4C:34:D6:E4:FF:1D:47:1A:57:A7:1B
            X509v3 Authority Key Identifier:
                keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:9b:fd:e1:f0:a9:1c:10:1a:d3:01:2e:66:d9:c5:5a:d0:
         e9:92:79:f4:62:52:12:71:d0:e1:94:7f:ea:21:99:49:df:9d:
         81:7a:85:d4:c6:70:c5:5d:29:e0:cb:07:d7:d9:72:98:47:a2:
         20:ed:dd:ad:50:85:da:0c:fb:e9:df:16:76:06:d6:08:ff:43:
         90:5d:4b:5f:11:d3:f7:4e:90:38:13:f4:b7:4f:f5:9b:88:14:
         c3:70:39:01:bf:d6:39:89:e8:ba:36:eb:74:43:71:88:2f:63:
         40:b9:dc:67:d9:ed:e7:1e:c2:2e:82:5f:12:7a:10:98:ac:57:
         97:8c:0f:39:8a:74:e4:78:8a:b1:76:48:1a:c5:06:e7:d4:b9:
         93:bf:8c:48:9a:3b:fb:94:bf:0c:16:8a:bc:b5:f0:ea:f5:ae:
         45:89:6b:ce:6e:c0:a4:61:78:55:c5:49:7d:7e:98:82:0a:a7:
         b5:c1:f6:2e:92:44:1b:c6:da:c2:04:46:ee:ec:c4:ff:fd:af:
         09:e0:3b:ca:dc:bd:aa:78:29:8f:a5:0a:a5:c0:ae:f4:22:f5:
         ba:97:ec:a2:eb:42:b7:ac:80:3a:23:d7:32:a9:26:84:22:66:
         b0:78:ce:f5:ab:db:a3:44:65:d9:c5:81:f2:1b:d4:4b:78:93:
         b4:93:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:50:27 2024 by rpki-client on console-fra.rpki-client.org