Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          GFK/IQDdN4AS6GEk0nsw32UDEaJdV8WpdsTmLGgLH9Y=
Subject key identifier:   78:86:24:08:62:2C:2F:DD:D2:DA:C8:63:14:79:3F:14:E2:30:0F:31
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       01901E21B26C97D0773BE8F1D327EEA35231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 23:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:43 +0000
Files and hashes:         1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: ZfFdn5oYneQpZvqzzVvdXLuqpy7sXuvL6rqF4XTiNno=)
                          2: ZQpq2AGUvJTb5VR5KHaDG-IWFIY.roa (hash: zJsG9JzTuhIOnURP5WuUUrYKI5S6BY+MeJGEVRBeL90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:b2:6c:97:d0:77:3b:e8:f1:d3:27:ee:a3:52:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: Jun 15 23:00:43 2024 GMT
            Not After : Jun 16 23:00:43 2024 GMT
        Subject: CN=78862408622c2fddd2dac86314793f14e2300f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:7d:c2:2e:38:8f:b3:96:22:b6:24:f1:d2:
                    a6:0f:33:f6:cd:5a:ee:aa:83:f3:e1:c4:d2:9b:45:
                    10:ea:39:fb:5f:43:e8:a6:1f:cf:2e:0c:3e:bb:61:
                    b0:d5:eb:97:61:ea:17:0f:be:5d:d4:27:40:12:96:
                    e4:3e:4b:c1:09:74:26:be:a9:a6:0b:2f:5a:74:30:
                    05:ea:f0:d9:2c:87:0a:46:b1:a9:85:7c:f9:18:77:
                    6b:ac:f6:e1:66:5b:fa:1c:86:8f:46:00:93:5a:5b:
                    1e:50:63:22:77:69:ce:8c:86:85:45:c5:a4:c0:d7:
                    06:d1:81:c9:b2:b9:46:4c:9a:db:c5:38:6a:b3:36:
                    7f:ff:fb:68:3f:c0:3c:49:24:d8:36:48:b4:cf:4a:
                    a4:f4:4f:69:81:e3:53:43:7b:d7:9c:07:8c:a5:51:
                    87:92:b0:d6:71:e9:98:30:f4:0e:cf:4b:bf:fb:d6:
                    79:6a:79:a6:5a:c0:6c:44:b1:cf:ee:2c:e4:7e:53:
                    67:3e:cb:b2:1d:a1:f9:d7:80:14:be:4a:f8:6f:ff:
                    96:b5:9b:7d:c5:a6:a0:40:24:93:08:30:80:47:48:
                    07:4f:d8:5b:d6:ff:95:d7:51:65:3c:bb:cd:26:eb:
                    d8:d6:d4:1c:5d:3e:c3:23:86:04:e3:36:07:23:e6:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:24:08:62:2C:2F:DD:D2:DA:C8:63:14:79:3F:14:E2:30:0F:31
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:c2:3b:a9:cf:f6:04:90:5c:ee:5d:75:8c:c3:70:d6:0f:
         4a:b9:3f:2e:b0:ad:69:77:e9:60:fa:16:c9:17:5b:13:8f:fc:
         9f:02:7a:9c:c6:a1:45:5f:2a:f2:d8:22:3b:82:2f:66:e7:98:
         5c:f9:22:7b:2d:ce:af:a9:fc:4e:db:c5:14:5c:4d:48:e3:7b:
         ab:8d:e8:c6:05:0a:33:68:ba:72:d9:09:16:06:9c:ed:af:1c:
         d9:f8:e2:a2:b0:a1:63:15:1b:cc:da:31:a1:9a:a4:8e:3b:c0:
         ca:28:5f:be:cb:48:43:c2:b7:76:10:26:d0:78:79:bb:f4:72:
         04:22:57:0d:dc:67:bf:62:b7:df:ae:ac:f6:93:c2:17:03:e5:
         33:f2:1e:82:db:8e:50:55:4e:73:cb:27:8f:90:cb:bc:75:92:
         c5:fe:3b:e5:54:73:d3:c2:d8:8f:4f:b3:81:37:44:56:c9:1b:
         ca:49:d6:23:f9:0f:30:47:1d:2e:a4:27:b4:e5:8e:fd:b8:f4:
         f9:22:6f:9a:b7:1d:0d:54:c3:e4:20:38:b4:50:f9:14:d1:24:
         57:cb:04:b1:49:29:3d:62:32:30:06:17:77:5c:87:25:5a:1b:
         72:b6:81:9a:38:14:a5:8e:52:70:7c:07:bb:bc:77:24:6e:e9:
         60:94:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:57:46 2024 by rpki-client on console-ams.rpki-client.org