Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          SxxAKbjYQ5uBxUNO/52OpnKcZKJUqZMiJf4BJyiOxqk=
Subject key identifier:   E8:3F:D3:8D:2B:B8:DF:FA:56:2C:88:7F:7A:8F:AD:DA:CB:C4:0B:E7
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       018F1936159DB23FAEB23EFDDAD7C462BF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          1146
Signing time:             Fri 26 Apr 2024 07:02:05 +0000
Manifest this update:     Fri 26 Apr 2024 07:02:05 +0000
Manifest next update:     Sat 27 Apr 2024 07:02:05 +0000
Files and hashes:         1: 8pqaI-YDI4hwIgjoXtZrWQJcnNw.roa (hash: t2XAT7hss6eXZ0RFessn4piDD0RYuEaDgMP4R/hES60=)
                          2: IBZEp_Wxbv2qdyGaj-F4TLgZblk.roa (hash: tJurjw3Q9CWQRcXzi7ty7Zbg/0GHBIS372vCf8YiEng=)
                          3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: ZFMmpPePl271br9lbsXrbSSKp9mUqk1G2/mpWCxbwm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:19:36:15:9d:b2:3f:ae:b2:3e:fd:da:d7:c4:62:bf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Apr 26 07:02:05 2024 GMT
            Not After : Apr 27 07:02:05 2024 GMT
        Subject: CN=e83fd38d2bb8dffa562c887f7a8faddacbc40be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:0d:6f:10:a8:b3:ae:6c:50:4f:0d:b7:69:
                    45:b5:cb:59:df:9a:3a:94:11:e2:fe:82:38:7f:e8:
                    9d:73:a0:7e:4f:1d:c8:c5:c8:21:5f:68:fd:ba:84:
                    c1:d3:e1:2f:a2:3b:bd:7e:00:b2:56:72:c2:3e:cd:
                    30:61:bb:52:f9:b6:3a:18:86:2f:13:df:33:19:94:
                    a8:53:55:82:47:5f:99:48:0b:ba:34:e2:e6:7c:81:
                    68:09:23:a3:e1:c6:19:64:e4:bc:89:1e:9d:92:b1:
                    5b:34:a4:3e:42:f0:d8:6e:78:d0:aa:c1:99:c8:17:
                    a3:17:52:3e:1f:4b:73:4b:2b:ed:af:dc:4a:3d:20:
                    c2:a2:6f:25:35:77:3a:0b:cc:5f:cd:f5:6d:4b:38:
                    21:a1:eb:16:20:ef:97:71:6b:98:ee:64:fb:bd:41:
                    47:36:f3:e8:ba:84:2a:1b:eb:46:b7:26:3b:12:ae:
                    93:2a:23:b7:da:65:cd:bb:a0:0a:bb:3a:af:73:20:
                    61:b7:c9:94:36:8f:7d:c9:4e:a0:a2:92:2b:38:c3:
                    1f:f7:fb:16:eb:e8:1c:50:c1:25:8d:25:06:2c:f1:
                    1a:0d:6d:27:13:51:62:3e:a9:18:f2:6d:00:4a:24:
                    e7:23:5e:96:67:85:d6:2e:bf:e6:4b:f1:6d:89:d8:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:D3:8D:2B:B8:DF:FA:56:2C:88:7F:7A:8F:AD:DA:CB:C4:0B:E7
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:5c:de:ae:71:77:ae:b1:10:0b:43:d0:00:01:73:a9:52:
         84:54:25:33:bd:53:83:cb:9f:92:5e:f5:b1:41:3a:50:df:7a:
         bc:20:18:8f:1e:d6:5f:62:c3:80:90:cc:a5:33:c3:17:b7:1d:
         25:75:91:33:c4:30:1a:5a:71:64:6d:95:34:c4:83:47:67:1e:
         73:55:67:59:80:c0:db:be:4d:dc:ed:5f:aa:a0:c7:46:2f:ec:
         1a:62:f7:7c:b4:b2:29:cb:56:e2:3c:00:e7:98:6c:b7:7c:bc:
         9b:73:aa:07:30:db:4f:60:12:f6:f6:0b:56:0a:87:86:7e:3a:
         b6:5f:25:8a:f6:43:c5:13:a5:cb:c2:2d:36:ac:e0:e1:69:3d:
         32:f6:dc:8f:05:4e:3e:47:49:eb:92:8d:45:51:f8:23:15:ba:
         cd:12:f4:b1:58:55:0e:c2:81:3a:d7:6c:79:51:2f:36:f2:ea:
         9f:96:c1:53:80:bb:8f:81:38:70:b8:fe:bb:c3:e5:19:cf:85:
         c7:94:5a:1a:64:a7:41:2e:b2:e6:f0:cb:0e:b7:e5:de:38:ff:
         f1:a5:94:80:b1:36:6f:06:22:90:6a:88:1a:98:b2:0d:71:e2:
         d5:e2:2b:4e:0d:98:13:24:19:ae:5b:d9:03:33:3f:85:47:a7:
         59:bc:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:23:05 2024 by rpki-client on console-ams.rpki-client.org