Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File:                     n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier:          nj1CtPkeV4l9Wu0mGRAsU7PHR/49O/XGovkFXPfiYl8=
Subject key identifier:   BD:C0:38:F6:D7:7B:D1:DE:6F:C0:3B:28:2F:AE:22:A4:3A:A3:8F:67
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer:       /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial:       018F874A181624BAE4A655CE72A765F07A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number:          08E6
Signing time:             Fri 17 May 2024 16:02:10 +0000
Manifest this update:     Fri 17 May 2024 16:02:10 +0000
Manifest next update:     Sat 18 May 2024 16:02:10 +0000
Files and hashes:         1: UO_6YUjbJfEkU2ivNSNyS77RLOg.roa (hash: 0pN4nG5TSztMks0KxYDwKOVwK3SK+LsM2YDTRX5sjwA=)
                          2: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: P9QASOoSP8DflgxF6e2FJd8RAYRKBVMj4ruIkQYbuOY=)
                          3: rYhzWLmQWzAH122-k13p8dQ7rhY.roa (hash: ucNPBTaOsRvjYn+p4Er4b9zsk9xmgTrBHnyVpo8mRrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:18:16:24:ba:e4:a6:55:ce:72:a7:65:f0:7a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
        Validity
            Not Before: May 17 16:02:10 2024 GMT
            Not After : May 18 16:02:10 2024 GMT
        Subject: CN=bdc038f6d77bd1de6fc03b282fae22a43aa38f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:1f:81:c7:86:aa:3c:02:4a:68:c8:c6:79:
                    87:20:21:bb:f9:44:f5:6b:8e:fa:be:21:99:8c:fd:
                    13:cc:78:71:d5:eb:47:1d:23:3b:4e:fd:e2:bc:a8:
                    00:4a:ab:1c:fa:cb:d7:0e:d1:7c:58:47:4e:c7:db:
                    ea:1d:55:77:b9:b9:d2:a0:34:da:c5:21:14:aa:33:
                    b5:d8:f4:1a:3e:62:18:9f:61:fe:f6:35:57:7a:a9:
                    65:93:03:9a:b9:96:2b:b9:05:aa:1e:7c:dd:eb:c5:
                    8f:f9:38:0a:83:46:c5:e4:c4:86:fd:78:20:da:c0:
                    4c:3a:d3:6f:a9:e7:8a:b7:99:31:9a:69:a0:53:a4:
                    c8:43:9c:0c:88:29:e1:d1:79:1f:a3:42:65:d3:49:
                    34:a8:6a:b2:19:3f:ec:92:61:14:cb:54:0a:e3:0e:
                    08:51:56:6f:96:22:bb:92:56:d8:59:b5:25:19:1e:
                    2f:cd:ed:a1:c3:67:db:6e:0e:01:68:81:6d:6f:53:
                    50:9b:3d:bc:ed:11:7b:7a:00:34:92:49:4a:80:b6:
                    8e:86:2a:21:80:e4:0e:27:4a:31:27:ca:8d:95:fa:
                    ab:5a:34:52:f4:7a:ce:65:31:f1:c6:d7:82:96:85:
                    62:e4:55:33:e9:31:56:65:3b:3a:a3:73:87:83:ef:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C0:38:F6:D7:7B:D1:DE:6F:C0:3B:28:2F:AE:22:A4:3A:A3:8F:67
            X509v3 Authority Key Identifier:
                keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:a2:f4:02:23:de:a9:ac:aa:fa:db:27:62:0c:3b:00:a1:
         2f:0d:40:79:96:77:1d:93:dc:c2:5b:95:d3:8b:d5:51:6c:ae:
         4e:89:89:60:5a:b2:ed:9f:33:ee:6d:f5:91:22:69:77:2c:cc:
         d5:46:3e:81:c3:9a:18:fa:9e:21:a4:d4:5a:8b:8f:a2:46:a8:
         73:c0:6a:9e:03:8b:38:c8:6b:17:e6:25:04:a6:07:bd:8a:c4:
         d7:ca:d3:7a:b0:06:65:d2:48:60:e5:a9:28:90:5b:48:8c:c1:
         71:a7:77:cc:bd:37:92:ee:68:73:85:e3:d3:75:7e:60:d0:d6:
         3b:0b:97:a5:0c:2d:fd:8a:7b:b6:39:2b:48:9c:95:de:3f:59:
         9c:8c:c9:c2:b0:70:40:80:90:8d:9c:45:4d:dd:6c:c7:7a:9a:
         47:5b:67:6d:d0:f4:85:b4:b2:9f:24:e5:99:67:16:16:04:7d:
         3d:ae:0c:44:19:97:00:01:ae:ec:d6:57:9e:37:40:40:77:dd:
         3b:b6:ae:1f:5e:95:05:96:4a:3c:01:83:15:12:ec:e1:c7:9c:
         45:5e:6b:22:78:cc:65:4e:9c:b3:a2:05:8e:62:15:a1:bf:17:
         a2:70:80:bc:d9:c6:d8:6a:1f:f9:5e:01:83:8b:b7:08:61:c9:
         22:d6:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:20 2024 by rpki-client on console-ams.rpki-client.org