Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File:                     NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier:          IskCnKa47eB14S2WbggaZBW5SHqYAtpaFT4lrrmLeh8=
Subject key identifier:   9F:8C:7D:D0:51:29:EC:47:F0:25:7B:62:DD:34:A1:F4:06:A4:72:7B
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer:       /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial:       018F893693269FDC342D39BFB6A47CFDF171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number:          0F85
Signing time:             Sat 18 May 2024 01:00:05 +0000
Manifest this update:     Sat 18 May 2024 01:00:05 +0000
Manifest next update:     Sun 19 May 2024 01:00:05 +0000
Files and hashes:         1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: JHdqC08UFhHwTV0fckiD9PMdjO9t/MYfk3P3BYx0PiI=)
                          2: cIHgPQfkeGGkH1YH0us6u-BItEw.roa (hash: J09w581HYGMBFoQ3t1ZjBOEodf50+DAwxqhQZWajtY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:93:26:9f:dc:34:2d:39:bf:b6:a4:7c:fd:f1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
        Validity
            Not Before: May 18 01:00:05 2024 GMT
            Not After : May 19 01:00:05 2024 GMT
        Subject: CN=9f8c7dd05129ec47f0257b62dd34a1f406a4727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:e2:64:cd:3f:d0:39:7b:20:d3:4c:d0:00:
                    97:d7:65:2d:9a:b0:8a:ab:3b:a3:b2:c2:c5:c5:e8:
                    f1:07:45:4e:03:45:20:7a:78:58:2d:67:2d:24:40:
                    5c:26:94:7e:aa:75:91:cd:e8:1d:43:4c:fa:b4:0b:
                    83:f9:a9:be:d5:98:c7:80:57:26:bc:73:44:f8:30:
                    5e:4d:6b:56:3e:a1:21:45:0a:40:86:d0:08:a7:cc:
                    cf:46:5e:f2:d4:22:43:30:5a:0b:4d:e5:b7:41:a2:
                    90:b5:bf:1d:25:31:10:20:8e:d0:f3:de:27:7e:2d:
                    8a:d7:2f:46:6e:05:c2:bc:bc:06:eb:7a:74:2b:48:
                    76:f4:0d:5c:bc:b3:c0:e7:35:af:75:fa:a6:1f:6a:
                    92:da:e3:35:6a:50:ef:6f:b5:d0:d3:ef:36:1f:d4:
                    9f:81:c5:67:b6:9b:3b:17:bb:15:00:28:37:4c:54:
                    d3:ad:5f:33:cb:7a:fe:a5:be:31:11:c5:5f:e0:f5:
                    13:de:cd:7c:81:dd:18:71:b7:81:f8:06:aa:20:ce:
                    35:06:e7:85:82:0c:b4:34:98:d9:4e:10:7e:1a:9d:
                    70:37:ed:8e:aa:5c:9d:52:67:2e:ce:48:06:6a:5e:
                    f2:93:b1:c7:77:07:19:29:bf:33:8d:0e:a5:5b:90:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:7D:D0:51:29:EC:47:F0:25:7B:62:DD:34:A1:F4:06:A4:72:7B
            X509v3 Authority Key Identifier:
                keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:50:5c:2e:7e:8c:6d:23:0c:b7:a3:66:e8:95:b3:ff:f9:92:
         46:ed:4a:63:e9:6e:d1:ce:83:01:1d:e8:dd:94:ab:fc:b2:9d:
         62:0b:b9:75:a1:d5:68:a9:07:06:79:9d:38:47:b8:91:b4:77:
         77:a7:95:ce:8e:c8:59:94:07:41:97:3c:d0:d0:64:31:ba:3e:
         4e:f7:38:0d:41:e5:71:a6:17:34:9e:0c:e7:b4:0f:dc:fa:b3:
         58:9a:f4:03:0f:0c:48:29:7c:29:26:71:f7:b6:a1:8f:ef:93:
         38:c0:92:b6:68:22:a2:d4:96:ed:13:67:53:6e:78:c9:2c:1f:
         4f:da:b4:4a:5f:6b:b9:11:d1:df:2d:4e:08:2b:a5:c0:fe:e5:
         ac:be:1c:e2:a3:30:6b:65:fc:89:b5:44:b7:5d:d0:58:63:1e:
         a9:7a:9b:b6:e3:bd:0f:5e:57:ad:19:e7:ad:c3:51:ae:49:ef:
         77:dc:8d:a1:d5:3d:04:64:90:2a:06:8b:04:63:18:53:6c:7e:
         e2:15:64:9e:9e:6c:fc:44:f5:93:d6:12:c1:de:b1:e6:84:c5:
         b6:c9:4f:6e:df:37:9d:9f:c4:a7:0c:ff:86:ba:34:f4:9d:c4:
         52:71:a2:e0:97:e8:76:dd:e2:12:8d:ed:de:e6:aa:cc:fd:9e:
         f6:d4:09:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:52:11 2024 by rpki-client on console-ams.rpki-client.org