Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          K+34bOz1BoaFVeTXH/PdLaXyO/Ub2wBn0yRNurUZVYw=
Subject key identifier:   B4:75:35:51:A3:F3:96:9E:5A:D7:59:61:34:96:77:54:46:C7:23:70
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       01901DEC945E192E8531B757C3F4F20C96D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0407
Signing time:             Sat 15 Jun 2024 22:02:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:42 +0000
Files and hashes:         1: bPlQ4rorv04UuRkNDeoJ7b9Ze04.roa (hash: vquYVwnYYWpoRn+dyjcEMwewql711vYaSp7z+u4hifg=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: OQ0j12d+roHUre/AeJSClDAb/Jd2NvXHWr/AARCuh10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:94:5e:19:2e:85:31:b7:57:c3:f4:f2:0c:96:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Jun 15 22:02:42 2024 GMT
            Not After : Jun 16 22:02:42 2024 GMT
        Subject: CN=b4753551a3f3969e5ad759613496775446c72370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:9b:19:e4:e1:ee:45:a6:ca:00:85:67:4a:
                    03:34:f1:dc:73:f9:f3:80:fc:96:7a:21:8f:db:65:
                    ce:25:53:a7:a0:e9:cc:32:9a:c2:d5:ab:d5:f3:a1:
                    22:76:b7:4a:73:b4:03:ec:65:2c:a0:10:6a:a6:10:
                    df:7b:43:72:4b:c5:d4:2c:31:57:22:73:ab:d3:79:
                    04:a0:20:52:f0:62:16:6e:b1:27:20:ce:4a:ae:55:
                    8a:26:ce:b6:e3:b0:68:1f:42:17:83:ce:5f:be:58:
                    be:6e:7d:41:be:9e:10:44:e4:ce:64:e0:d8:74:8c:
                    c7:21:6b:ad:2c:08:27:b6:97:51:51:8b:91:07:ec:
                    f0:7b:75:07:51:a3:c0:e3:9c:72:7b:f7:70:10:25:
                    a7:36:32:b3:db:00:dc:cf:fa:35:8d:26:96:1d:c2:
                    ba:f1:42:7e:25:0e:31:0c:04:3e:b4:86:07:19:27:
                    cd:9c:97:be:b1:fd:bf:14:eb:d5:68:4f:c5:cc:a6:
                    c7:7e:32:6b:bb:b7:62:5c:58:4d:05:5d:dd:0b:d6:
                    e1:53:8b:20:68:a4:e3:a5:39:20:33:68:04:57:39:
                    76:05:d2:53:79:d5:56:52:a5:89:4d:14:83:a2:d9:
                    f4:d1:ad:84:3b:c4:35:8f:20:67:33:d9:ed:f9:6e:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:35:51:A3:F3:96:9E:5A:D7:59:61:34:96:77:54:46:C7:23:70
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:5d:05:ee:5a:58:1e:4d:31:51:81:0f:fa:c8:e2:93:6b:
         d1:0b:50:08:1e:05:cc:b3:2e:f1:89:20:54:8f:33:42:3e:38:
         1c:8c:b9:69:58:08:d6:b2:3d:bc:3e:0a:39:5f:c2:78:78:79:
         5f:34:63:35:cd:72:9d:46:6e:c8:ad:cc:ff:83:23:e0:62:83:
         1c:c6:0b:24:cd:9f:40:8a:d4:65:3c:07:86:4d:dc:61:fe:42:
         83:7f:f6:74:e3:10:53:41:ed:2c:47:00:10:e6:fb:dd:50:86:
         1f:cd:c6:34:e1:20:12:b1:08:8f:0f:18:89:f6:db:b0:d0:4c:
         d9:97:d3:8b:7a:b3:7f:01:45:17:c4:aa:09:49:e7:d6:88:06:
         e1:c4:2e:8b:16:3a:6d:5a:39:89:99:27:38:10:86:12:8e:ee:
         f3:a9:d3:0f:b5:43:19:fa:93:a0:68:f6:e4:4e:a5:82:44:90:
         e4:af:84:07:22:46:a5:58:8e:2c:dc:a4:19:a4:75:30:4c:c9:
         89:a8:ab:13:42:ed:51:af:74:40:27:7f:e9:41:39:e6:63:78:
         52:5c:fb:fa:63:fb:0c:32:4f:40:40:d8:66:be:f0:b2:7b:d1:
         9a:a5:fb:fe:df:30:aa:57:9e:1c:64:82:04:3d:10:a9:98:77:
         ca:1b:17:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7JReGS6FMbdXw/TyDJbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw
ZWFkMjkwHhcNMjQwNjE1MjIwMjQyWhcNMjQwNjE2MjIwMjQyWjAzMTEwLwYDVQQD
EyhiNDc1MzU1MWEzZjM5NjllNWFkNzU5NjEzNDk2Nzc1NDQ2YzcyMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xebGeTh7kWmygCFZ0oDNPHcc/nz
gPyWeiGP22XOJVOnoOnMMprC1avV86EidrdKc7QD7GUsoBBqphDfe0NyS8XULDFX
InOr03kEoCBS8GIWbrEnIM5KrlWKJs6247BoH0IXg85fvli+bn1Bvp4QROTOZODY
dIzHIWutLAgntpdRUYuRB+zwe3UHUaPA45xye/dwECWnNjKz2wDcz/o1jSaWHcK6
8UJ+JQ4xDAQ+tIYHGSfNnJe+sf2/FOvVaE/FzKbHfjJru7diXFhNBV3dC9bhU4sg
aKTjpTkgM2gEVzl2BdJTedVWUqWJTRSDotn00a2EO8Q1jyBnM9nt+W46OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLR1NVGj85aeWtdZYTSWd1RGxyNwMB8GA1UdIwQY
MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt
ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4
LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhldBe5a
WB5NMVGBD/rI4pNr0QtQCB4FzLMu8YkgVI8zQj44HIy5aVgI1rI9vD4KOV/CeHh5
XzRjNc1ynUZuyK3M/4Mj4GKDHMYLJM2fQIrUZTwHhk3cYf5Cg3/2dOMQU0HtLEcA
EOb73VCGH83GNOEgErEIjw8YifbbsNBM2ZfTi3qzfwFFF8SqCUnn1ogG4cQuixY6
bVo5iZknOBCGEo7u86nTD7VDGfqToGj25E6lgkSQ5K+EByJGpViOLNykGaR1MEzJ
iairE0LtUa90QCd/6UE55mN4Ulz7+mP7DDJPQEDYZr7wsnvRmqX7/t8wqleeHGSC
BD0QqZh3yhsXJQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:42 2024 by rpki-client on console-fra.rpki-client.org