Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File:                     n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier:          b5rmnM1N5l5TGTaJBbHgIWYPqov3B3WMOtYve2rMNmY=
Subject key identifier:   53:50:EF:80:C6:F2:43:92:AB:10:2A:74:9F:13:05:12:69:A9:6C:E8
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer:       /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial:       01901DEC90A29A49D4A8ACCF1703F4B4B301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number:          0603
Signing time:             Sat 15 Jun 2024 22:02:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:41 +0000
Files and hashes:         1: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: /aXdTkHN1Tn7pxQvenECDyq6KRkKupScBtL8E+7UBkE=)
                          2: s9WBuDQsMd0uYNipRXQH5Kl-2lM.roa (hash: VhRkHwoxQA1+nDP/bnmVFAeyxcMzJ1BZpvvwo28hUEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:90:a2:9a:49:d4:a8:ac:cf:17:03:f4:b4:b3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
        Validity
            Not Before: Jun 15 22:02:41 2024 GMT
            Not After : Jun 16 22:02:41 2024 GMT
        Subject: CN=5350ef80c6f24392ab102a749f13051269a96ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:bc:5e:e3:6e:05:44:97:19:8b:79:a9:51:
                    7d:2f:39:8d:ee:87:6a:43:66:19:d6:0a:53:d4:b0:
                    24:4f:39:9e:cb:4a:16:83:07:c1:c0:82:86:40:43:
                    94:a7:3a:ae:6b:31:a8:05:20:4d:1d:26:81:34:89:
                    06:24:51:db:a8:ae:22:e9:b9:35:a6:dc:a0:71:e5:
                    fd:cc:a5:bb:b2:82:4b:35:62:61:ee:69:c9:b0:d6:
                    19:50:10:12:5b:f0:72:a4:e4:ed:66:7f:2e:be:05:
                    9a:77:2e:00:38:28:81:aa:3e:1c:5f:eb:0e:aa:01:
                    d0:6a:86:7f:23:3c:2c:09:bb:ab:e9:42:2e:de:c0:
                    cb:96:c2:9c:cc:55:d0:02:ea:61:ab:71:7d:c4:2f:
                    4e:15:a6:2a:79:0f:50:31:0b:21:dd:a7:d9:66:e6:
                    3b:2c:ea:14:cc:79:6e:21:59:92:70:8f:df:65:b2:
                    97:6e:7a:8d:c8:23:88:1b:ca:fc:a4:34:87:f4:09:
                    1a:71:a9:a4:ec:d0:3f:a4:35:44:2d:9e:5b:f8:0d:
                    35:69:e8:14:1f:19:3e:3e:e9:ad:7d:eb:15:fe:cf:
                    16:34:89:c3:98:21:29:3f:9a:cf:db:20:a9:0e:d9:
                    26:5f:9e:ec:09:de:d3:44:6d:9c:27:b0:cf:70:22:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:50:EF:80:C6:F2:43:92:AB:10:2A:74:9F:13:05:12:69:A9:6C:E8
            X509v3 Authority Key Identifier:
                keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:ed:f0:71:75:42:26:a9:e7:a8:31:c2:4a:3d:5f:05:ff:
         9f:8a:c8:a5:bb:9a:e7:fa:40:18:49:e0:de:a7:6e:93:3a:27:
         71:dc:62:3c:27:6b:4f:77:e2:cf:44:0d:4e:0d:ba:5a:fb:dc:
         38:c1:79:1e:26:b3:70:03:6e:5a:ae:0f:89:84:1e:de:3d:4c:
         41:9d:5e:3e:36:bf:04:d4:02:a7:7a:f1:77:2c:09:19:9d:1b:
         01:17:92:67:ad:8e:9b:46:b8:75:bd:8c:5f:2e:ce:40:b3:36:
         e7:b2:0a:5f:d3:a9:95:61:16:72:61:87:63:9d:2e:48:ff:47:
         20:2a:e1:99:34:23:dd:d3:3b:ed:b9:c0:b8:85:b5:46:f8:ec:
         2d:a3:be:66:f1:12:67:13:f9:3d:23:69:72:2c:a5:90:b9:77:
         f9:26:0f:a2:31:5f:5d:f5:67:73:9d:f6:89:e3:7f:f1:b6:c0:
         fe:50:32:f7:fa:a2:ed:b1:f9:e8:82:84:f4:93:c3:57:9d:4f:
         5e:0e:a6:ce:32:7f:68:7b:91:25:e6:d1:1e:f4:49:4f:57:53:
         ff:29:26:83:2e:66:0a:49:27:34:b3:98:ee:cf:19:8f:45:7f:
         e1:5f:10:4e:8e:b7:7f:ea:b5:2f:28:6a:4e:9b:6a:ae:3e:8c:
         e6:3e:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:44 2024 by rpki-client on console-fra.rpki-client.org