Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File:                     nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier:          3m8xpAlHIm+1E0hD6I4YMCmB3C4lfqu4K5d1Si3YxWE=
Subject key identifier:   36:F6:1E:11:AD:E7:03:C9:CE:BF:C6:A6:CD:3B:C2:3F:F7:DB:9E:60
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer:       /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial:       01904566ABE69381EAF8CD45A41EB7517E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number:          01CD
Signing time:             Sun 23 Jun 2024 14:01:14 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:14 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:14 +0000
Files and hashes:         1: L9vQOvgJV_y8-IUh5GZ3n1qXZRY.roa (hash: 5oszbtV0a33X+NIYd1ID1wqX/2UPYXYn5XTldWJivbo=)
                          2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: EMRX/WceGdQvrZxj4YrocWHj91pqIVmWPfNd5TiEONU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:ab:e6:93:81:ea:f8:cd:45:a4:1e:b7:51:7e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
        Validity
            Not Before: Jun 23 14:01:14 2024 GMT
            Not After : Jun 24 14:01:14 2024 GMT
        Subject: CN=36f61e11ade703c9cebfc6a6cd3bc23ff7db9e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f4:86:09:7b:90:a2:f9:d5:83:f1:f1:a7:d6:
                    39:9e:03:ee:b8:10:84:10:0e:27:31:f5:0a:99:0f:
                    04:67:ce:72:dc:1c:4c:fa:71:7f:d2:b9:f6:3d:ab:
                    7d:dd:9e:28:ed:37:69:10:c6:4e:ee:a8:72:e5:02:
                    31:22:88:57:4d:3e:d3:1b:50:e5:b3:40:87:cb:77:
                    3f:af:16:fd:af:ce:db:9e:fc:62:f5:c4:ab:1c:48:
                    93:6c:02:c8:da:d9:df:7d:bc:9c:a9:f6:cc:4f:5a:
                    65:af:24:f5:b5:90:77:47:24:9e:3e:63:08:83:ac:
                    b2:82:4b:a0:98:fe:15:92:e8:94:0a:be:4a:c8:81:
                    42:b5:a7:15:91:d1:b6:44:86:f7:5b:83:f6:9d:c0:
                    78:a2:a1:7f:a4:d7:94:29:39:71:81:66:46:0f:e4:
                    8a:d7:27:5d:aa:89:ce:c2:44:45:67:1a:67:c5:17:
                    ef:0d:17:0b:4f:06:6c:7b:dc:fe:a5:9c:6f:e4:10:
                    78:71:7e:95:77:e8:a9:c4:d3:a0:65:0c:88:b4:58:
                    ed:51:10:44:a6:e7:43:c2:0d:c8:39:87:b8:1f:91:
                    12:96:95:7f:52:2d:06:d4:8e:91:37:b6:f7:0b:14:
                    24:c0:fa:34:1f:9b:ea:63:8e:b7:82:58:dd:cc:5f:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:1E:11:AD:E7:03:C9:CE:BF:C6:A6:CD:3B:C2:3F:F7:DB:9E:60
            X509v3 Authority Key Identifier:
                keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:4c:41:81:4d:ed:ca:39:fe:1b:54:7d:db:07:a7:6b:2c:
         49:0a:c0:4a:5d:0a:f9:aa:a6:4d:05:f6:56:9a:8c:82:e7:21:
         3f:1b:82:1f:23:28:f0:0b:85:2a:bb:c3:2a:5f:13:0c:14:16:
         dc:f1:f4:f4:76:50:f4:58:70:a4:2d:ff:5b:e6:0d:1f:18:92:
         11:4f:3f:ac:24:6b:be:bb:fd:82:2e:e5:07:44:15:29:32:e5:
         86:19:56:c9:b4:bf:52:e3:98:b3:bf:f3:6f:53:d6:6e:10:c3:
         d3:c8:72:be:2f:99:ab:c5:4b:11:6b:2b:be:e0:22:79:75:a4:
         b9:d7:d6:00:b1:15:e7:61:60:23:f4:39:ce:09:57:ce:c9:c8:
         64:98:d2:11:7a:f5:47:c9:bd:5d:f6:5e:90:f4:27:3b:4a:89:
         89:97:03:4d:3d:5f:62:c3:88:ef:66:c0:c6:ed:0f:38:6f:08:
         21:3b:e8:d2:e8:c4:07:e1:c6:69:83:1d:85:ff:05:da:af:c2:
         b2:95:bd:bf:d8:dd:9e:90:34:21:a8:75:69:79:df:0f:45:e2:
         27:dc:24:79:19:03:7c:84:97:12:95:d7:a0:f0:e5:fb:93:74:
         5b:c0:a4:f2:05:b3:50:22:b8:0f:24:6d:b3:8b:a1:08:13:f3:
         65:b3:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:27 2024 by rpki-client on console-ams.rpki-client.org