Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File:                     nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier:          sWXhG87vEZqMruvine0gfm8+qhQu2z0GBPZLZGm0oCM=
Subject key identifier:   01:E3:A6:A7:42:3B:BE:19:86:19:33:6D:A8:2D:35:10:E3:39:C2:2C
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer:       /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial:       01901DED5B95532ACD5453857B881889A158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:32 +0000
Files and hashes:         1: mxli_m-Z8XYc0U1D8BPUdOB3au4.roa (hash: bVmYC04Aa44GtGL5MErW2NcK0TccOTAShaONSwrwZJ0=)
                          2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: dsyyDOoEtIHjS4FpU3JrPIMNg+rSWKulxqhAYUhKLos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5b:95:53:2a:cd:54:53:85:7b:88:18:89:a1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
        Validity
            Not Before: Jun 15 22:03:32 2024 GMT
            Not After : Jun 16 22:03:32 2024 GMT
        Subject: CN=01e3a6a7423bbe198619336da82d3510e339c22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:f2:cc:c3:42:35:e3:73:40:b3:94:41:84:
                    92:a7:a9:58:7a:2f:d9:22:43:c1:8a:f6:9c:69:d0:
                    9a:91:38:9c:da:77:26:76:ca:ee:f7:2f:f1:a3:83:
                    47:88:c6:27:b8:c4:04:a5:39:58:88:62:f5:f0:fe:
                    59:8b:47:de:06:fd:74:3a:6d:8a:8d:d9:31:28:f1:
                    eb:0e:a6:12:4f:c2:36:b6:d6:7c:93:ef:33:84:c0:
                    78:f0:a0:fb:61:01:65:6d:b3:4e:69:aa:7e:fd:e3:
                    6e:97:68:a3:0f:9a:96:6d:6c:c2:c6:f0:e7:bd:96:
                    5f:ce:a4:fa:a6:a2:c9:20:17:15:bd:d0:40:4b:47:
                    a5:7d:34:cd:92:0f:09:3f:d5:e9:05:0b:ae:ab:c9:
                    63:88:16:28:c6:ce:53:8d:36:b8:97:a9:37:64:aa:
                    c7:73:a5:ef:9c:74:fd:af:a5:63:0c:45:eb:b8:92:
                    b0:58:70:8c:d0:a0:37:fc:38:ef:10:db:80:44:85:
                    e1:c0:d9:e3:36:cd:13:6f:2a:dc:be:0e:e0:dc:47:
                    71:e9:a1:dc:06:ee:72:ef:9f:26:fa:d7:da:36:63:
                    92:f8:d7:c4:16:0e:76:df:5f:d7:fe:77:c7:99:79:
                    f9:02:50:68:d4:49:c9:50:dd:31:35:e9:1c:e5:78:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E3:A6:A7:42:3B:BE:19:86:19:33:6D:A8:2D:35:10:E3:39:C2:2C
            X509v3 Authority Key Identifier:
                keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:0e:34:90:ce:c9:14:66:a6:38:71:7d:2f:99:ee:c7:6b:99:
         99:1d:a4:e5:03:96:11:9a:31:8f:26:e6:09:91:02:28:26:b4:
         fc:1f:1a:b8:e0:e7:c1:ad:79:48:66:37:1a:1a:17:ac:1d:6c:
         15:df:66:01:e5:f7:53:0b:32:0d:ea:4c:c9:6d:0d:8e:1a:89:
         f6:79:69:41:95:02:4b:58:0b:f9:9d:5a:6a:cc:b5:5a:43:90:
         0f:f4:af:75:b0:74:a0:51:7b:41:5c:8f:11:62:a6:9b:74:f0:
         7d:1a:b4:b5:2c:aa:81:ec:8c:ff:7c:de:f2:1a:29:44:77:6a:
         98:21:a6:f7:5d:7a:17:48:9a:89:bc:7d:8a:23:60:9a:31:63:
         c8:41:73:cd:d7:ac:58:94:76:cb:56:c1:50:40:78:14:d5:fb:
         f9:fc:96:9f:5b:3c:8f:35:f5:f6:b2:4c:5c:37:1f:6b:5a:8b:
         a9:1e:86:c9:9e:4e:22:cb:0f:f2:95:16:d3:f4:25:9c:5c:f0:
         b9:eb:f4:04:ca:5e:55:94:ec:a2:31:90:9f:44:44:11:46:b4:
         c3:c6:41:86:05:75:01:58:05:9e:e1:dc:f4:51:db:12:5d:58:
         4d:91:bb:d9:39:0a:13:39:38:4b:b5:19:6d:48:11:eb:02:39:
         30:13:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:22 2024 by rpki-client on console-ams.rpki-client.org