Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File:                     NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier:          BXil0VAfxjQDp+B0V3ts1Ybs9q2cb2gyOZSDGBHP0ng=
Subject key identifier:   D6:A2:7B:2C:5C:18:3C:44:49:23:81:E3:91:7B:6F:E4:E1:B5:96:1F
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer:       /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial:       018F9E7531531EBFA3805FF4706AF348A9F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number:          11A1
Signing time:             Wed 22 May 2024 04:00:31 +0000
Manifest this update:     Wed 22 May 2024 04:00:31 +0000
Manifest next update:     Thu 23 May 2024 04:00:31 +0000
Files and hashes:         1: 25I9sUIfX1aCmv3zSIPXwTWsFyw.roa (hash: yMkfpLWeT2GdQzWsuXzLHbqz1lkHeHnZYkJalkxG/g4=)
                          2: GUqmbbo1yT_SKrSCo3c9pB14ssI.roa (hash: bftbVe6yaNvY7+C+/fuafOy6uHwpmf0ITDDkRolF1G8=)
                          3: IXiBP5XCPBLaYkE9xZArl7BL01U.roa (hash: kGZVLlTTN1xbWZTT/cATebMSM/YpBAnY49LzkfO1rS4=)
                          4: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: KZDWgZbHM+a4YaSjeyBzKDwW1S5MJFWGo9GL4AavGEQ=)
                          5: bR6pN29QFHvNkYOIFVyp3DjVDmI.roa (hash: 6jWzFVSh+7F38X5aZyy+HbC9JxGR0yRqXRQr4hDwubk=)
                          6: cNZFORuYvUhzGIR57-c5eqMSyzY.roa (hash: FvuCKPP8mbnZTXRa7oafYpdKuEYx8KFnC0y+dzc3T2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9e:75:31:53:1e:bf:a3:80:5f:f4:70:6a:f3:48:a9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
        Validity
            Not Before: May 22 04:00:31 2024 GMT
            Not After : May 23 04:00:31 2024 GMT
        Subject: CN=d6a27b2c5c183c44492381e3917b6fe4e1b5961f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:44:6c:ae:97:42:40:6d:1b:34:2a:72:96:
                    e5:03:e8:7f:84:58:75:90:c9:e8:19:c5:c6:0b:d8:
                    3e:b0:83:fb:1a:23:b8:2b:08:68:5f:c8:f3:da:27:
                    1b:91:64:f6:84:54:97:b4:36:09:5b:6a:8d:11:07:
                    4c:82:fe:7a:2b:8e:b0:bd:3d:c7:02:8a:71:8c:25:
                    a8:d9:da:bd:4e:55:55:d7:2d:c0:87:95:f3:a9:89:
                    70:9d:1a:c6:cf:62:ab:65:2f:d7:3d:22:be:15:8a:
                    34:bb:85:fd:93:8c:aa:38:2b:17:d6:13:5f:88:98:
                    8d:ab:93:9d:69:42:f4:02:43:cd:38:7d:bf:ae:f3:
                    aa:eb:7c:2f:d1:e7:f5:b7:dd:ec:f0:7f:65:b5:a7:
                    33:b8:ce:52:e3:8a:b6:69:1d:e2:9f:03:5e:1b:76:
                    c0:6f:56:42:4a:3a:b0:59:36:8f:92:dd:44:e7:d5:
                    c1:5a:ba:92:79:8d:fa:90:90:c9:76:96:07:a6:0d:
                    db:bd:d3:c5:c3:d5:ef:57:52:ff:1b:cf:8b:24:32:
                    ad:33:75:20:cb:69:f0:b9:46:96:33:06:70:c8:b9:
                    c7:b8:3a:f8:71:19:6c:82:80:e6:dc:72:7e:aa:b9:
                    63:d7:8f:d5:f0:71:64:a6:ae:9b:03:af:09:cc:50:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A2:7B:2C:5C:18:3C:44:49:23:81:E3:91:7B:6F:E4:E1:B5:96:1F
            X509v3 Authority Key Identifier:
                keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:b9:fb:fd:15:8d:52:5a:47:ee:18:3a:a0:e6:98:17:a2:
         50:b5:2e:fc:a3:9c:d9:8f:59:55:dc:4f:19:ab:19:bf:d5:b2:
         81:73:66:50:d8:f5:bf:d7:87:62:a8:59:6f:80:85:38:ef:2a:
         61:38:07:44:44:b3:12:03:75:4f:0c:58:45:46:c2:90:fb:1f:
         db:5e:0b:13:f6:ab:3e:1d:f8:9b:8e:06:7a:58:1c:66:89:04:
         96:05:ec:29:ba:00:ec:67:6f:7d:31:53:07:de:c1:4d:ef:11:
         9a:40:0b:19:ab:98:e0:27:cf:f9:81:4e:74:24:4b:ae:5c:f5:
         e4:25:8e:1e:08:f4:59:be:2b:03:d8:ec:65:ae:d9:64:3e:e1:
         4f:2e:b2:01:19:82:58:45:01:c5:c3:61:df:00:23:82:20:18:
         02:66:35:ab:e4:cd:ed:60:cc:a4:e7:fd:60:04:e1:d7:ac:58:
         a9:94:92:1f:1d:16:df:e9:d4:22:bd:11:8e:88:41:98:d2:7c:
         b3:20:4a:73:77:4a:cf:b6:33:7e:dc:65:f4:a2:27:17:b7:99:
         d3:75:b5:67:e3:3a:63:4f:21:30:c1:81:4b:02:50:36:5d:1f:
         d3:82:aa:1b:c5:db:b7:ec:97:5b:74:18:8f:54:1a:96:e3:db:
         31:70:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 11:41:52 2024 by rpki-client on console-ams.rpki-client.org