Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File:                     nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier:          8mxwulzeX5Mx0GTgNCLcyDFNXoYOjmoebC/dfvJpKxw=
Subject key identifier:   B8:5B:A9:8F:EA:59:74:34:AD:51:35:82:9A:11:D7:FB:C6:E7:53:18
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer:       /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial:       019040AE61EA231348E185E6CD2528E3B5AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number:          06D1
Signing time:             Sat 22 Jun 2024 16:01:28 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:28 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:28 +0000
Files and hashes:         1: iJoN4ZOaBPwlON0IdFus3fbeKIA.roa (hash: 683qCvzwFFdWttSNS0Y8v3OYCAIF5dNmGaqkaPHzJrs=)
                          2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: tnMVH9zM9dNO/rxpPMnfR55JgnjJIb2B5EfWQTN/xYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:61:ea:23:13:48:e1:85:e6:cd:25:28:e3:b5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
        Validity
            Not Before: Jun 22 16:01:28 2024 GMT
            Not After : Jun 23 16:01:28 2024 GMT
        Subject: CN=b85ba98fea597434ad5135829a11d7fbc6e75318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:f3:47:da:fc:43:4a:b4:d9:21:c3:46:47:
                    0b:3b:be:27:32:de:cf:fe:eb:a5:25:1c:b4:5e:9c:
                    37:10:8a:a0:42:24:93:bc:a2:c2:35:be:8b:ea:af:
                    0f:19:1d:e7:66:15:cc:a1:ec:0f:93:e8:38:d4:c9:
                    19:3b:38:53:67:dd:92:89:09:63:68:a0:70:10:c5:
                    54:b2:1d:4a:ab:bb:5b:18:cc:06:14:d1:49:1e:04:
                    25:ca:ba:f6:27:34:9f:19:a3:51:11:9d:cc:ea:fa:
                    f0:13:89:08:b8:79:12:18:e7:1b:5d:9c:1a:a5:65:
                    ce:34:92:63:df:81:d1:bc:0f:5e:30:e0:0d:0c:55:
                    11:b9:a1:75:68:ec:90:57:ed:d5:19:ae:8b:af:c9:
                    ec:2b:41:bd:60:5e:69:d2:6a:3a:69:84:0f:25:87:
                    b3:ad:00:56:10:5d:14:b6:9e:31:46:02:47:73:53:
                    05:62:87:9d:ec:61:58:42:0c:c0:aa:af:76:4d:70:
                    24:b1:3d:49:59:50:e3:a1:e1:2b:c2:c8:c4:4e:47:
                    75:cc:0c:ba:02:21:e4:fa:59:c2:73:5e:d0:2f:87:
                    eb:b8:0d:d9:50:0a:bd:73:dd:3c:73:83:77:cd:ca:
                    0e:27:90:7a:dc:37:f5:ef:f7:bd:72:90:fd:2f:bf:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:A9:8F:EA:59:74:34:AD:51:35:82:9A:11:D7:FB:C6:E7:53:18
            X509v3 Authority Key Identifier:
                keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:59:7d:07:b6:eb:7d:b4:66:f9:27:e4:f6:c6:dc:2c:87:80:
         80:b1:0f:ae:1f:19:90:83:65:4f:24:49:e9:25:a0:ef:d2:cb:
         a2:56:99:93:8b:34:a5:00:b9:7a:ed:f3:83:f7:39:7a:f1:47:
         cc:fb:8e:51:7e:f2:7a:07:58:a4:77:92:a0:b7:07:80:1e:3f:
         85:fb:5a:d8:87:1d:e2:25:43:15:6a:01:ef:cc:45:b6:cf:93:
         46:10:3a:71:f4:53:ad:16:23:ca:46:73:d2:89:00:57:5b:c9:
         0a:ff:55:37:43:ce:08:10:09:3d:d7:0a:db:96:2c:95:b5:a5:
         ba:2f:7f:42:9f:69:8c:8f:14:36:b4:de:41:17:f5:1c:f1:66:
         da:6e:cc:f9:c1:04:bb:b8:6e:61:a6:56:ea:11:9a:f6:e5:18:
         23:40:e2:bb:91:0f:1d:3d:51:9f:92:81:84:3c:63:f8:2b:ad:
         c3:3f:bc:39:d2:dc:96:21:7a:12:91:cb:aa:d8:a1:25:1a:11:
         2a:6b:ab:d5:2f:71:7f:f9:c5:92:02:3f:46:6e:60:dc:7c:4c:
         3d:52:22:05:a0:7b:56:f5:11:68:74:c9:98:64:10:38:5a:9f:
         7f:de:56:eb:16:a6:b6:44:4e:3b:89:fd:5e:68:5c:5b:4f:d0:
         5a:1f:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:45:40 2024 by rpki-client on console-ams.rpki-client.org