Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File:                     nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier:          RaD1ZH6gb+Wc5K/J7frdO2I3bhuV5VzfXM2wx+DNTQo=
Subject key identifier:   1E:3B:AE:22:45:40:1F:6B:A3:C3:38:F3:7E:9F:45:D6:85:46:54:71
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer:       /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial:       018F874AD5180AF332C4A7B048D6421B25D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number:          0D3A
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: FcVaAwOwAKunGAxZslzW1p_u5yg.roa (hash: Cu1vyF3aSWAJZLtjy187i3SHQzorDdyJkT8seiIhtyY=)
                          2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: tkkniyQIb52FPUwDguw2J7LJodbceS06ynOmwqPfqi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d5:18:0a:f3:32:c4:a7:b0:48:d6:42:1b:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=1e3bae2245401f6ba3c338f37e9f45d685465471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:f9:96:9d:f8:0d:68:e0:e3:83:f0:b9:da:
                    84:a9:14:b5:e3:47:de:97:ee:48:5d:73:8c:c7:07:
                    ff:39:e6:59:fe:a5:3e:ba:d5:c8:a3:c9:1a:8b:c4:
                    4c:62:e5:5a:17:8f:98:b5:06:c3:ab:e5:3a:cb:37:
                    61:d5:78:a3:bd:53:1e:65:11:0b:3f:00:a6:ca:b9:
                    9f:5e:c3:d2:67:9b:b6:79:b1:b0:50:97:ac:a2:bc:
                    9e:67:59:91:07:11:ac:68:a8:32:17:c8:89:e1:ff:
                    e4:55:0b:25:14:69:08:5b:ad:88:6d:1d:be:a4:e4:
                    43:40:2e:a2:fa:4e:6f:f9:b3:f3:3c:f5:3f:7f:ba:
                    9b:ba:95:4d:f4:a8:20:4d:0c:79:8e:fb:cb:59:66:
                    13:e0:14:72:1b:08:6b:92:58:1c:02:70:ef:94:4b:
                    78:f9:5a:36:80:78:7f:87:35:94:46:89:0e:68:67:
                    35:50:f5:48:5b:18:4d:2f:10:79:6e:51:ec:04:f6:
                    fc:8f:4f:34:50:82:a2:6f:da:07:91:f9:2c:ab:4b:
                    84:fb:3c:5d:ce:a0:10:8e:c3:d7:5b:02:fb:98:59:
                    d8:29:8c:90:e0:1d:6b:1a:b5:06:2a:60:ad:46:1d:
                    23:c5:ea:d1:96:9f:7f:c4:ed:bb:7d:e6:1c:ba:fb:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:AE:22:45:40:1F:6B:A3:C3:38:F3:7E:9F:45:D6:85:46:54:71
            X509v3 Authority Key Identifier:
                keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:22:f6:18:78:94:5e:5a:37:73:58:5b:b1:64:c2:11:70:
         ab:7b:1a:2f:e8:a2:0d:92:8d:8d:ca:3d:f0:03:7e:79:4d:e1:
         66:83:f4:5b:a5:dd:e4:09:87:83:cd:94:aa:b3:8d:8e:22:ad:
         87:20:93:9b:70:e9:0c:4b:a5:76:a2:18:da:b4:7e:7b:6f:da:
         55:50:ed:28:cd:48:b9:bd:a6:d9:79:74:2f:49:b7:21:0a:77:
         4e:f2:02:d2:74:3e:ae:4d:5b:52:38:c1:64:23:21:9f:9b:a6:
         80:0b:74:e4:98:5f:15:3f:8e:98:04:cb:08:22:20:7c:6a:84:
         f1:41:8e:2f:a7:47:6e:6d:8b:16:16:67:f9:2e:d2:42:68:14:
         01:da:3f:20:77:31:a5:1f:c5:6d:bf:af:01:03:5d:43:df:55:
         6d:71:d2:33:4e:90:a6:f2:70:93:f3:7e:50:9e:01:0b:f1:8d:
         4e:dd:e2:8c:38:ee:2a:cf:1e:b9:47:ce:55:7d:bd:4d:f1:57:
         27:c7:4c:a1:dc:1d:b3:fa:7d:4a:8c:e8:f4:9d:91:27:97:63:
         53:d8:dd:9a:2b:7d:c7:3f:f5:ae:00:f1:93:3b:1e:3f:a5:0c:
         b9:57:cd:2b:a5:b3:2f:54:7c:94:95:8b:bd:d3:c0:b1:80:7a:
         43:47:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:51:32 2024 by rpki-client on console-ams.rpki-client.org