Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File:                     NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier:          tnKWvG65l9ych/uBtwsYYIecURv/smkeu4zymF3wjuE=
Subject key identifier:   5F:A6:29:78:38:98:2A:A8:63:8E:0A:16:94:B1:63:6E:60:B7:69:7A
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer:       /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial:       019048D5325A2B1CA87A85E85E07672219BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number:          11DD
Signing time:             Mon 24 Jun 2024 06:00:49 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:49 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:49 +0000
Files and hashes:         1: 1yFYKFDc6uI325M4UHJrXLyveVU.roa (hash: l2DFM8QVLUhfc9K2jK31QA3yfTt2kj+4d44TvAM2lpQ=)
                          2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: QG+Cbprl65zGxHA+IiKuKND8AjK7oWwCMQ6u0N7CUgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:32:5a:2b:1c:a8:7a:85:e8:5e:07:67:22:19:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
        Validity
            Not Before: Jun 24 06:00:49 2024 GMT
            Not After : Jun 25 06:00:49 2024 GMT
        Subject: CN=5fa6297838982aa8638e0a1694b1636e60b7697a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:65:28:43:ee:5c:1a:81:46:77:71:7e:83:
                    23:9d:fe:a9:69:33:00:9d:c7:2a:b3:9a:e0:c8:aa:
                    14:62:cc:54:ac:60:26:c9:89:2c:bc:71:05:a8:59:
                    5b:f8:98:b6:69:cd:8e:03:a4:44:e1:a3:4a:31:6e:
                    0b:77:98:e3:25:3a:73:e9:e4:db:00:d6:41:6f:e2:
                    e0:5c:d2:7e:4f:b7:c6:6e:26:0a:01:47:94:91:48:
                    c9:ad:4b:ea:6e:3c:0e:a0:3c:14:74:82:bb:da:4b:
                    ad:e4:f0:89:4c:6f:ac:bd:23:57:84:3d:cc:6f:9b:
                    01:39:62:c5:f4:38:ff:46:73:a9:12:5e:49:3e:94:
                    0c:45:ee:7f:31:95:7d:02:5a:8a:e7:46:79:54:b1:
                    96:53:a2:b7:bf:99:1b:2d:fd:a3:25:82:f6:79:bb:
                    b4:61:54:eb:03:d9:95:2f:c6:58:1e:33:ba:b0:68:
                    7a:7b:6c:19:de:8a:bb:3d:72:df:d2:94:1b:91:2f:
                    d7:5e:a7:7b:c9:25:a2:97:a7:ea:95:a7:41:b6:bf:
                    50:b4:ab:a4:05:0b:fa:ab:22:51:84:74:a2:32:63:
                    d3:3c:cd:a9:68:39:9a:1b:49:a0:2d:3b:7e:02:c4:
                    13:0c:3b:88:98:a4:bd:97:af:5d:77:2f:74:fb:cf:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A6:29:78:38:98:2A:A8:63:8E:0A:16:94:B1:63:6E:60:B7:69:7A
            X509v3 Authority Key Identifier:
                keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:b4:c4:20:9f:04:b3:fe:84:ed:2c:23:6a:b7:c4:e4:43:
         88:62:23:41:c8:b1:d6:62:b2:50:c7:83:34:41:8d:ff:a4:02:
         94:b7:b0:d2:1a:57:20:51:94:17:ab:50:b7:da:c0:50:fb:27:
         7e:12:04:61:28:3d:15:21:0b:a6:d1:d7:35:39:68:a3:8b:f0:
         e9:78:da:ae:bb:be:ef:23:b2:0d:33:31:92:1b:a9:2b:db:62:
         90:df:7d:46:2b:ea:87:11:e2:25:ba:6c:9a:12:28:b0:46:6f:
         94:f4:17:70:c0:e6:2d:e1:6b:0f:b5:37:e4:42:22:6b:ba:28:
         6a:ee:f3:a4:98:5d:40:53:4c:9f:2e:9d:2b:39:81:c8:76:8b:
         c0:5d:39:8f:f5:eb:4c:35:20:c8:47:e7:1c:fe:79:6e:e2:06:
         8d:30:51:b8:ca:55:2b:91:29:08:d8:8a:6a:c7:39:15:20:96:
         73:37:67:03:34:bb:8f:f5:b0:d9:ff:9b:2b:18:b8:a7:59:c5:
         cd:b2:14:d4:8b:a9:4f:a8:83:9f:38:34:a2:57:0f:d8:06:c8:
         be:d9:46:7b:dd:d8:b7:a3:9e:e2:ad:e7:0c:34:69:10:c2:13:
         bc:df:33:aa:33:99:d0:93:f9:09:56:b4:0c:b0:a7:53:61:d8:
         42:b6:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:34:58 2024 by rpki-client on console-fra.rpki-client.org