Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File:                     nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier:          9dfSZrmydVCrgy7xEux8ii6v9qXpjcKFWYx+MWz9FcE=
Subject key identifier:   3B:F6:59:5D:65:80:09:6E:B9:B7:F2:A1:03:07:C1:56:BA:CD:42:FE
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer:       /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial:       01901EC6A95AA159808110FDEEAD8892965F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number:          01B9
Signing time:             Sun 16 Jun 2024 02:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:54 +0000
Files and hashes:         1: L9vQOvgJV_y8-IUh5GZ3n1qXZRY.roa (hash: 5oszbtV0a33X+NIYd1ID1wqX/2UPYXYn5XTldWJivbo=)
                          2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: /o/DnwzgzpUEoggIjAeSdVi+N2OOt6/sad97syHsXwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a9:5a:a1:59:80:81:10:fd:ee:ad:88:92:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
        Validity
            Not Before: Jun 16 02:00:54 2024 GMT
            Not After : Jun 17 02:00:54 2024 GMT
        Subject: CN=3bf6595d6580096eb9b7f2a10307c156bacd42fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:3a:b7:5c:12:68:8a:44:54:fb:b4:0b:d9:
                    92:17:8c:84:0e:f7:ee:07:7f:42:90:fe:fc:a6:04:
                    67:84:5f:bc:f3:7f:13:60:84:8c:81:58:03:27:b3:
                    86:d1:1d:9f:54:8a:58:c7:71:2d:7e:53:8a:f2:04:
                    76:6c:e6:f7:bc:c7:96:9d:9d:8c:e5:d8:a8:0c:de:
                    89:4a:ad:e5:2c:c8:4a:4b:b7:db:6c:e6:51:3d:f6:
                    e5:c2:80:2f:01:c0:38:88:8d:c3:8d:e5:11:0d:ce:
                    e7:66:5b:f2:6d:8c:e8:c8:09:8a:9e:8f:f4:af:27:
                    12:2e:62:0b:2e:1f:ed:e5:80:b9:e4:87:c9:8d:5d:
                    55:da:61:2b:d7:03:57:7b:12:23:4a:3b:a6:ad:22:
                    0b:6c:5e:be:0b:d8:d5:b8:e4:b6:8f:d8:53:f3:a7:
                    13:2a:16:3f:66:47:77:1b:02:01:8f:c3:78:27:4e:
                    11:f9:d4:7c:46:06:09:be:db:ce:d1:79:90:93:5a:
                    e6:f9:b9:ed:06:78:be:da:46:24:42:b3:22:9d:ff:
                    90:39:47:dc:00:80:e3:f9:75:b5:01:d7:de:85:c4:
                    95:98:33:60:b8:89:a1:7f:1d:60:54:be:f1:d1:5d:
                    c4:5b:30:c0:80:c1:cb:db:55:06:1d:4e:a5:a9:81:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F6:59:5D:65:80:09:6E:B9:B7:F2:A1:03:07:C1:56:BA:CD:42:FE
            X509v3 Authority Key Identifier:
                keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:14:df:b3:58:58:e8:5e:c0:bf:98:bf:39:ba:2a:d1:74:
         f3:7d:1c:c2:4f:8c:fc:94:d0:36:89:b0:ec:76:73:35:6f:fd:
         0f:86:0c:d0:e8:e6:1b:cb:01:9c:fd:c1:5f:1b:0a:e6:89:14:
         6a:29:2e:2d:5d:5a:cd:81:8d:49:57:c5:3f:67:f3:df:c6:e7:
         5f:ed:c1:64:01:d8:aa:8a:7f:8d:fb:0c:4d:a8:9b:3d:57:f9:
         68:90:e5:90:04:d1:af:a4:0e:a0:b9:2c:44:a7:cb:3f:67:87:
         f7:a9:27:1e:a5:e4:55:2c:b1:67:ce:f9:aa:7f:50:d1:63:95:
         6a:9e:b7:d4:19:9e:f8:a8:2f:47:4f:de:06:aa:64:74:1f:5a:
         76:6e:16:3c:f8:04:4b:35:42:73:3c:1a:7e:d8:f3:6c:71:f6:
         bb:c2:10:53:19:29:e3:88:ef:2d:58:57:db:d9:cb:20:d4:f8:
         9b:4d:de:13:aa:7d:0e:18:ee:24:a0:08:cb:95:44:49:e7:a9:
         bf:32:59:ca:d8:71:3f:2c:48:3b:e3:3c:4a:ba:ef:37:75:44:
         c8:24:9f:cb:1d:36:40:28:ed:b1:49:e6:5c:f9:95:53:25:58:
         24:bb:82:24:e2:5b:37:7d:de:6d:d0:72:15:df:09:0e:61:e6:
         ee:96:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:53 2024 by rpki-client on console-fra.rpki-client.org