Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File:                     N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier:          ceAQh1disNKZClXJ2VH6V38HaGD1UFrc2ZoA6FbuQJ4=
Subject key identifier:   8D:DD:AA:49:C4:43:27:16:F4:8A:97:7A:AA:AE:AF:24:2C:43:DA:95
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer:       /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial:       01901DEBE2FF6ABBF67721773C30EEDAB79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number:          0870
Signing time:             Sat 15 Jun 2024 22:01:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:56 +0000
Files and hashes:         1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: ovuKHrrWpxr2PeW1MD0fGhzL6R4IauBcz2nQUXNTpw4=)
                          2: OHRe_ZoNHRZdxjg3K1HCM-QxEpQ.roa (hash: jX5k2ciVze6L9BzctsbIJtfKOZnx1A46RyyCkwuDDNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e2:ff:6a:bb:f6:77:21:77:3c:30:ee:da:b7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
        Validity
            Not Before: Jun 15 22:01:56 2024 GMT
            Not After : Jun 16 22:01:56 2024 GMT
        Subject: CN=8dddaa49c4432716f48a977aaaaeaf242c43da95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:57:59:da:79:2f:07:dc:44:22:03:6c:36:
                    f3:7f:f2:02:f5:6b:4f:18:09:6d:50:68:23:3a:02:
                    9c:2d:c9:2e:ad:b3:3c:46:10:62:7d:a3:3d:40:f2:
                    a6:2b:cc:91:f4:19:c1:03:e5:d4:57:f5:dc:e4:15:
                    ba:ff:fc:6b:c8:46:e3:66:93:68:eb:b5:4a:d8:ab:
                    85:55:4a:f3:be:91:f3:20:fb:9f:17:c3:f0:6f:b6:
                    18:02:b2:48:5d:d6:d5:31:da:0a:3d:e5:74:9f:ce:
                    35:11:50:1b:7c:e7:62:ac:27:70:c7:15:1a:2e:09:
                    95:fc:0e:fb:97:da:3f:2b:48:d2:08:7e:11:44:0d:
                    66:68:ff:8e:8c:46:6e:b6:50:aa:29:c6:44:17:30:
                    9e:83:7c:9c:50:b0:68:68:d7:61:36:0a:fe:3f:d4:
                    37:4e:c0:cb:ac:06:e6:a0:1e:90:96:a3:78:e4:d1:
                    db:6c:04:da:01:82:01:61:7c:06:c7:6a:c3:ed:59:
                    0e:47:4a:46:f7:b0:84:13:17:9d:f5:67:75:a0:de:
                    9a:d9:c5:fc:e3:e9:c9:3d:7b:3f:3e:53:ed:9b:9a:
                    72:fd:85:03:f7:f9:7c:66:34:e7:ae:63:34:64:07:
                    3d:ba:e2:9e:4c:18:ca:57:63:5a:46:1e:de:36:5d:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:AA:49:C4:43:27:16:F4:8A:97:7A:AA:AE:AF:24:2C:43:DA:95
            X509v3 Authority Key Identifier:
                keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:c3:2a:fc:4f:f5:9f:39:c6:07:46:b8:e4:03:13:c3:37:
         85:91:3e:fa:f9:b0:4e:14:de:dd:0d:b6:5d:6c:32:00:52:3a:
         a6:33:db:6a:89:79:5e:83:c1:17:6f:8d:b0:91:dc:90:f9:15:
         50:95:f8:e1:2a:b3:86:d1:be:fa:3e:c6:4c:19:0e:32:2d:28:
         15:67:16:ec:ce:7c:b4:02:93:64:52:cf:63:b1:67:2b:89:f8:
         1f:04:df:16:5c:e4:f3:9b:ac:7a:89:12:7d:f8:f5:86:a0:ec:
         d7:d4:d5:3c:48:ae:e6:e1:b6:e8:c1:b5:97:20:5b:07:97:41:
         c1:4f:9b:f6:65:79:36:45:4f:63:77:60:02:ac:b3:f0:72:c3:
         d2:a7:6b:26:ca:9f:f9:36:b4:1f:ee:fa:d2:04:af:1c:a0:d4:
         a1:35:bb:62:dc:09:5e:c5:8f:3d:e0:5d:ea:e5:dd:53:09:9a:
         4b:44:16:c6:16:62:6b:1f:0b:93:46:7c:9c:0a:ba:fe:bc:d7:
         62:11:f4:fe:fa:04:f0:41:90:5e:b8:13:db:59:fb:62:34:9d:
         2f:62:45:0a:3c:f5:7d:16:94:2b:15:81:5e:e0:8c:13:85:6f:
         e0:31:42:da:d8:60:05:89:41:b9:37:cc:7d:a9:7a:f6:98:b3:
         52:68:ed:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6+L/arv2dyF3PDDu2recMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm
YzA5NzgwHhcNMjQwNjE1MjIwMTU2WhcNMjQwNjE2MjIwMTU2WjAzMTEwLwYDVQQD
Eyg4ZGRkYWE0OWM0NDMyNzE2ZjQ4YTk3N2FhYWFlYWYyNDJjNDNkYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsydXWdp5LwfcRCIDbDbzf/IC9WtP
GAltUGgjOgKcLckurbM8RhBifaM9QPKmK8yR9BnBA+XUV/Xc5BW6//xryEbjZpNo
67VK2KuFVUrzvpHzIPufF8Pwb7YYArJIXdbVMdoKPeV0n841EVAbfOdirCdwxxUa
LgmV/A77l9o/K0jSCH4RRA1maP+OjEZutlCqKcZEFzCeg3ycULBoaNdhNgr+P9Q3
TsDLrAbmoB6QlqN45NHbbATaAYIBYXwGx2rD7VkOR0pG97CEExed9Wd1oN6a2cX8
4+nJPXs/PlPtm5py/YUD9/l8ZjTnrmM0ZAc9uuKeTBjKV2NaRh7eNl2GiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3dqknEQycW9IqXeqquryQsQ9qVMB8GA1UdIwQY
MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt
NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi
LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUrDKvxP
9Z85xgdGuOQDE8M3hZE++vmwThTe3Q22XWwyAFI6pjPbaol5XoPBF2+NsJHckPkV
UJX44SqzhtG++j7GTBkOMi0oFWcW7M58tAKTZFLPY7FnK4n4HwTfFlzk85useokS
ffj1hqDs19TVPEiu5uG26MG1lyBbB5dBwU+b9mV5NkVPY3dgAqyz8HLD0qdrJsqf
+Ta0H+760gSvHKDUoTW7YtwJXsWPPeBd6uXdUwmaS0QWxhZiax8Lk0Z8nAq6/rzX
YhH0/voE8EGQXrgT21n7YjSdL2JFCjz1fRaUKxWBXuCME4Vv4DFC2thgBYlBuTfM
fal69pizUmjtIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:44 2024 by rpki-client on console-ams.rpki-client.org