Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File:                     NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier:          +BcgspNz4q7NbMECkjNc8JbUh3stV+cBvM2rQ4f8RsM=
Subject key identifier:   52:AB:97:E2:6C:AB:4A:91:6C:C7:BA:C4:3B:CE:46:48:81:46:C5:00
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer:       /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial:       01901E58BD6F962996743DE5703437D3821E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 00:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:50 +0000
Files and hashes:         1: 1yFYKFDc6uI325M4UHJrXLyveVU.roa (hash: l2DFM8QVLUhfc9K2jK31QA3yfTt2kj+4d44TvAM2lpQ=)
                          2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: vaxDWB+wuYlirmnQhl9+PkCoYh82q98cPlae4e5hoX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:bd:6f:96:29:96:74:3d:e5:70:34:37:d3:82:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
        Validity
            Not Before: Jun 16 00:00:50 2024 GMT
            Not After : Jun 17 00:00:50 2024 GMT
        Subject: CN=52ab97e26cab4a916cc7bac43bce46488146c500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:8c:08:01:9c:c7:91:1a:45:1a:f0:c8:31:
                    67:4b:1e:ef:30:8c:8e:8e:c9:a0:34:9e:4f:e2:06:
                    34:54:df:c6:a1:b3:d0:9b:b7:10:a9:1c:42:78:c4:
                    76:af:4c:2c:ac:af:99:c6:41:b8:39:62:36:ab:8c:
                    ab:55:2e:9a:4a:cd:43:c3:95:21:06:cc:75:c0:2a:
                    3d:a9:fa:52:b1:e1:c6:6d:1c:ce:88:70:63:bf:75:
                    d2:df:de:cd:24:0b:24:02:a3:0c:c5:f8:f2:1a:88:
                    a1:b8:8c:14:6a:d3:93:e5:18:2f:5e:31:b2:49:fa:
                    f9:67:65:ea:87:93:21:a1:4a:a1:45:b3:ea:74:9a:
                    4f:38:c3:26:fc:3a:b3:9e:a6:df:cd:3d:f5:c8:97:
                    19:9f:4a:83:72:6f:b8:63:4b:16:63:8d:8b:02:94:
                    d8:c8:37:d2:58:d2:38:7e:a4:08:04:23:37:c6:31:
                    de:aa:0e:a1:6b:eb:a6:d1:a3:da:ea:85:ec:5b:db:
                    95:97:8f:d3:09:f2:b7:06:43:7a:61:6a:72:8f:56:
                    e3:a5:85:a4:a2:27:8f:f0:80:79:29:4e:ef:39:cb:
                    59:a1:83:ef:4f:a0:dc:2d:a7:e9:21:25:f0:dd:06:
                    35:1a:a9:01:92:d4:b4:7b:85:c9:73:43:2a:93:e2:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:97:E2:6C:AB:4A:91:6C:C7:BA:C4:3B:CE:46:48:81:46:C5:00
            X509v3 Authority Key Identifier:
                keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:d4:d5:0d:2f:aa:82:75:ea:e6:44:16:e4:8f:d5:5e:d7:
         c0:6c:9e:09:64:7f:ed:25:d9:01:ba:2a:ee:88:05:34:54:02:
         4f:96:27:64:9d:06:fc:7f:87:e9:71:f7:e4:00:7f:f7:22:1d:
         2b:a5:f3:34:86:f3:af:b3:76:0f:01:ef:6c:44:c6:f4:a8:15:
         a5:a3:14:39:84:bc:06:f3:eb:df:bc:cc:21:42:50:b6:c7:76:
         63:8a:10:0d:d0:36:b7:cf:b3:01:90:15:64:af:49:79:25:ad:
         37:6c:e1:f9:9f:e8:2e:c0:81:92:49:8c:c4:fe:6b:6b:d8:83:
         8d:34:59:5f:02:51:0e:ac:8b:a0:e0:f1:1a:13:7a:9e:e9:13:
         92:2c:b3:1e:cf:42:69:25:d9:a0:9c:06:bc:5a:67:b4:c2:23:
         99:03:98:a9:81:5f:3e:61:58:1d:1a:ea:c1:cd:ff:56:b0:c7:
         4d:92:59:39:d9:98:a6:11:24:80:a3:43:77:1d:46:ac:68:b8:
         8e:79:f1:3d:25:18:20:60:1f:65:73:a4:dd:b5:cd:3a:f2:39:
         17:92:84:00:51:86:14:91:6b:f5:a0:ee:00:b3:81:65:c2:43:
         c4:95:0c:e4:7a:9f:1e:e8:8d:36:e7:c5:ac:e0:ce:ac:54:ab:
         3c:f9:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:07 2024 by rpki-client on console-fra.rpki-client.org