Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File:                     njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier:          fRo+rbnvM3YqwVyk15mLWP/DuGSsx9alYc5MBx8Z4nQ=
Subject key identifier:   D7:4D:20:8D:F7:12:D5:26:0C:24:08:21:3E:2A:3A:8B:E6:94:2E:86
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer:       /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial:       01901E8FFB5A825720B51A2593C2B6D3BC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:10 +0000
Files and hashes:         1: 4YHU0QW0iz7ZCn2aViR7gdX8Vx4.roa (hash: EXFolEfMopqkYE6VfCmkhnNqStqSPdAbRtR7KmwXYkw=)
                          2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: h8HJzf+910h/qewIMqTHO03JrjxirQyjzWoKGYzC540=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:fb:5a:82:57:20:b5:1a:25:93:c2:b6:d3:bc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
        Validity
            Not Before: Jun 16 01:01:10 2024 GMT
            Not After : Jun 17 01:01:10 2024 GMT
        Subject: CN=d74d208df712d5260c2408213e2a3a8be6942e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:f8:06:cf:4b:51:1a:84:e4:9b:66:ac:f9:
                    87:11:e2:11:17:13:6a:92:0a:b0:f9:6e:f8:43:14:
                    02:03:ab:12:7d:0c:1a:61:fc:a9:0c:3b:f3:8e:9d:
                    80:07:09:34:eb:2b:99:06:20:2a:41:2e:e6:50:a9:
                    a2:9c:b8:69:c5:ed:7d:a3:51:12:03:4f:ef:2b:48:
                    5a:ee:9d:03:9c:ff:73:db:9d:3b:4d:6e:27:ca:ed:
                    73:b1:10:11:ff:36:51:10:eb:71:c0:a8:fa:c1:61:
                    e3:1d:a4:48:bb:c4:62:2c:65:74:db:24:86:27:e1:
                    fa:4d:cf:d3:5b:91:06:8e:a7:ad:2a:4c:13:b3:9c:
                    8c:fb:5e:01:90:13:ee:23:50:50:f2:e0:fd:93:09:
                    a4:8b:d2:e8:34:7b:0e:45:ee:11:8c:48:8b:c8:f7:
                    a8:6e:d5:1b:da:4e:91:1d:b9:b4:38:7b:2e:09:fb:
                    92:29:20:cb:e1:8d:a1:3d:a3:a6:d7:9b:18:1d:5c:
                    d2:b0:dd:4c:48:4d:b2:ad:7b:8d:f2:3b:44:b3:36:
                    2e:cc:4a:ec:48:7e:68:4e:7c:57:40:33:87:6e:60:
                    ab:9b:03:9c:92:81:a2:ec:71:7c:dc:16:b1:96:31:
                    6e:48:24:28:6f:81:eb:18:3d:db:27:12:87:44:c5:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4D:20:8D:F7:12:D5:26:0C:24:08:21:3E:2A:3A:8B:E6:94:2E:86
            X509v3 Authority Key Identifier:
                keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:da:f7:11:9d:70:be:86:a3:1e:17:97:af:96:72:a2:f7:af:
         13:6f:00:47:9f:91:31:a7:37:39:23:05:ac:30:67:5b:5d:ed:
         39:c8:e5:25:5d:bc:e3:07:7b:69:c9:90:f9:47:c6:0f:f9:40:
         90:26:9d:51:33:74:b9:03:10:b9:e5:14:2f:c6:82:84:72:a6:
         d4:2e:d6:b9:35:54:93:b3:7b:df:91:c2:ba:e4:df:59:77:88:
         86:3a:69:d3:72:85:21:71:ce:72:64:b6:eb:ef:e5:79:63:db:
         bd:39:15:22:30:18:51:3b:3e:74:dd:c7:06:20:8e:02:28:2a:
         c3:06:70:ca:93:6a:9c:57:32:ec:b7:7b:88:e8:1e:cf:9e:54:
         28:4c:dd:a8:2f:8d:73:7b:32:43:89:39:77:d6:5c:90:77:a8:
         6f:ff:bf:5b:36:b2:98:de:52:34:1b:3c:db:69:9b:e6:f0:4b:
         68:09:7c:db:c6:0f:db:49:30:ef:bb:5f:27:fa:63:55:12:cf:
         ec:46:a1:65:d7:62:12:3c:49:79:cd:a5:e7:92:f2:c8:4c:8f:
         16:8a:e8:7e:04:ed:35:0c:ea:3c:25:12:66:00:8e:d7:5a:d8:
         2d:a1:12:df:b2:53:33:e0:f7:14:d6:e4:d2:8c:71:21:0c:47:
         39:a4:9a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej/taglcgtRolk8K207xzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzJhZWYwMDY3YzRmMGJhMjBlZTY2NjM0NDAwMDViMWIz
Yjg4N2IwHhcNMjQwNjE2MDEwMTEwWhcNMjQwNjE3MDEwMTEwWjAzMTEwLwYDVQQD
EyhkNzRkMjA4ZGY3MTJkNTI2MGMyNDA4MjEzZTJhM2E4YmU2OTQyZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJL4Bs9LURqE5JtmrPmHEeIRFxNq
kgqw+W74QxQCA6sSfQwaYfypDDvzjp2ABwk06yuZBiAqQS7mUKminLhpxe19o1ES
A0/vK0ha7p0DnP9z2507TW4nyu1zsRAR/zZREOtxwKj6wWHjHaRIu8RiLGV02ySG
J+H6Tc/TW5EGjqetKkwTs5yM+14BkBPuI1BQ8uD9kwmki9LoNHsORe4RjEiLyPeo
btUb2k6RHbm0OHsuCfuSKSDL4Y2hPaOm15sYHVzSsN1MSE2yrXuN8jtEszYuzErs
SH5oTnxXQDOHbmCrmwOckoGi7HF83BaxljFuSCQob4HrGD3bJxKHRMV2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdNII33EtUmDCQIIT4qOovmlC6GMB8GA1UdIwQY
MBaAFJ4yrvAGfE8Log7mZjRAAFsbO4h7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYt
YzMxYzZkODY5MWQwLzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYtYzMxYzZkODY5MWQw
LzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANr3EZ1w
voajHheXr5ZyovevE28AR5+RMac3OSMFrDBnW13tOcjlJV284wd7acmQ+UfGD/lA
kCadUTN0uQMQueUUL8aChHKm1C7WuTVUk7N735HCuuTfWXeIhjpp03KFIXHOcmS2
6+/leWPbvTkVIjAYUTs+dN3HBiCOAigqwwZwypNqnFcy7Ld7iOgez55UKEzdqC+N
c3syQ4k5d9ZckHeob/+/WzaymN5SNBs822mb5vBLaAl828YP20kw77tfJ/pjVRLP
7EahZddiEjxJec2l55LyyEyPForofgTtNQzqPCUSZgCO11rYLaES37JTM+D3FNbk
0oxxIQxHOaSaPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:29 2024 by rpki-client on console-ams.rpki-client.org