Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File:                     nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier:          SN29uBDPUrVund8yCK4GGLIfiUzgEQ5LbxLDM2INANA=
Subject key identifier:   A8:43:62:87:61:62:A2:B0:F7:34:7E:AE:A0:0E:99:28:AF:B8:F6:28
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer:       /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial:       01903EBFD1EF546D347959DAB68CD48B4865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number:          11DB
Signing time:             Sat 22 Jun 2024 07:01:16 +0000
Manifest this update:     Sat 22 Jun 2024 07:01:16 +0000
Manifest next update:     Sun 23 Jun 2024 07:01:16 +0000
Files and hashes:         1: IqddwKVGNM3dMwcNyNWktXSDNoU.roa (hash: wImUcCKqHbyU9lbyjHzF+Ohtk4YlgcaQP7nHOjYLSJQ=)
                          2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: c0XetYO2EEyTOVkjBnQPxDMIou1/9i/XQe7ww4AIdrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:bf:d1:ef:54:6d:34:79:59:da:b6:8c:d4:8b:48:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
        Validity
            Not Before: Jun 22 07:01:16 2024 GMT
            Not After : Jun 23 07:01:16 2024 GMT
        Subject: CN=a84362876162a2b0f7347eaea00e9928afb8f628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:15:d5:1e:0c:35:e9:19:0e:1c:1f:54:9b:
                    c1:43:09:d7:7d:07:0a:9f:e0:7f:34:8c:d3:8e:8b:
                    dc:47:5f:1e:36:03:e7:87:f4:61:71:30:b7:ce:8f:
                    c5:84:14:38:ee:e9:8e:13:e7:64:2a:a4:bd:61:40:
                    f7:83:c8:0e:f4:56:4d:41:03:10:db:4e:0d:60:54:
                    aa:94:ca:44:d6:f2:3d:b8:e6:41:e6:8c:12:88:80:
                    1a:8e:90:e1:b9:f7:7f:60:59:17:68:c5:57:01:79:
                    8a:21:fa:fd:53:15:cb:0b:70:1f:d5:65:f3:ee:0a:
                    c3:e0:1d:02:41:c1:36:b0:93:39:49:02:86:31:99:
                    b2:aa:97:dc:f4:1f:7e:1d:f3:50:13:eb:f4:13:8c:
                    41:ad:81:8f:5f:b7:2a:2f:b1:ca:53:40:2e:80:85:
                    29:5e:c9:86:9c:ba:ec:49:fd:c5:37:80:09:ab:a8:
                    fc:61:68:3b:8a:0f:fc:b1:a2:2b:1a:49:19:5a:9a:
                    23:6b:2f:c2:0d:0b:2f:e8:b5:3f:2c:bd:9b:78:8a:
                    4a:fe:69:41:ae:b0:ee:d2:db:1c:b1:61:3c:ad:03:
                    f6:11:91:f6:ae:41:5f:00:18:e3:4b:68:a7:f2:34:
                    ce:f5:1b:90:33:48:60:b5:cf:ab:85:03:fa:3b:dc:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:62:87:61:62:A2:B0:F7:34:7E:AE:A0:0E:99:28:AF:B8:F6:28
            X509v3 Authority Key Identifier:
                keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:a8:74:9f:3c:4c:ce:56:b8:f3:db:79:5e:bd:29:97:29:
         40:61:fc:c9:a4:8b:0e:4b:57:48:6d:78:65:e5:07:62:5f:63:
         2e:0c:65:e4:95:0c:af:71:e9:d1:ce:ca:2e:60:24:ac:82:48:
         c4:dc:6a:e8:75:af:d5:91:2e:1d:8e:c4:72:d6:24:ea:d2:97:
         7d:f1:36:c7:10:f2:22:1e:b1:0a:a3:04:17:3b:71:f5:44:40:
         e0:14:59:48:8b:ee:45:e0:59:6d:bb:ed:0e:ac:13:8e:e8:66:
         6b:c2:b5:51:82:59:fa:37:79:5a:d5:cf:e8:37:ca:d2:33:88:
         79:4d:79:77:c2:4a:8b:32:cc:61:5e:0f:f5:10:10:80:91:e6:
         6d:48:17:ff:0b:a1:73:c4:bb:b4:fd:27:32:25:55:32:16:ba:
         a8:c4:b0:4a:71:39:17:23:df:b8:3e:84:26:e7:1c:b2:fd:b1:
         29:a8:94:1f:b8:45:c3:75:1a:c9:84:dd:6d:30:d9:ba:59:94:
         64:81:ae:59:39:af:40:03:92:af:ed:9c:0d:03:36:95:46:59:
         56:42:c5:59:02:51:bf:64:56:d2:78:51:d9:78:50:79:bd:aa:
         d2:0b:b8:8e:7d:ec:88:55:f9:80:97:72:a9:f0:ad:02:d4:45:
         51:a5:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:07:34 2024 by rpki-client on console-fra.rpki-client.org