Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
File:                     nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json)
Hash identifier:          /vrE0ThyYKVAXemVtC/dPvrPymqaxE5UsXTW6RQijjE=
Subject key identifier:   AC:51:2A:86:BF:41:9C:0F:BA:35:33:50:0A:83:23:19:DA:D4:7C:25
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Certificate issuer:       /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial:       018F87ED5BEEB4EE6937770FB557C494F195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
Manifest number:          0BD6
Signing time:             Fri 17 May 2024 19:00:30 +0000
Manifest this update:     Fri 17 May 2024 19:00:30 +0000
Manifest next update:     Sat 18 May 2024 19:00:30 +0000
Files and hashes:         1: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: FWmWKqSehRKEqOr2a/yPNx8RRB71nKWkyYdYtFzylA8=)
                          2: xgSrRa9TmW7b8y0QcSeyvR0j8Ow.roa (hash: 9JG3pPvPBYygnYLbTnPf/f+OLozmpzod6814l5/AJuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:5b:ee:b4:ee:69:37:77:0f:b5:57:c4:94:f1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
        Validity
            Not Before: May 17 19:00:30 2024 GMT
            Not After : May 18 19:00:30 2024 GMT
        Subject: CN=ac512a86bf419c0fba3533500a832319dad47c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:fa:70:84:40:f7:ca:70:7a:34:13:ed:ac:
                    67:27:fd:88:63:a0:a5:6a:2d:69:41:6a:ce:54:ea:
                    5a:4c:f1:e3:af:c1:58:90:f8:24:f5:7e:49:e7:ca:
                    af:b0:7a:bb:3b:1c:b7:0c:d8:7f:9e:d9:3b:d4:ee:
                    56:f5:16:27:fd:58:ce:e3:f3:3c:12:ab:d5:3a:9f:
                    e1:f5:df:f1:8b:aa:5d:af:6b:34:f2:eb:51:46:8c:
                    17:0c:70:18:3f:43:7f:5e:5c:ce:3c:21:63:34:e2:
                    fc:01:1a:35:a2:5f:d0:c1:81:f9:e2:55:53:e8:dd:
                    1a:c3:06:3e:23:d1:27:c1:ec:e8:da:c3:49:13:2c:
                    8c:24:bc:5d:14:14:b1:06:a0:ef:63:fe:95:e4:b5:
                    cc:a7:e3:e7:a3:01:4d:e7:af:04:97:a7:5f:1b:76:
                    34:ec:63:4a:04:47:ee:91:ee:98:2f:2b:1c:11:70:
                    81:37:41:4a:4d:32:b0:c5:93:61:00:5a:30:98:b1:
                    00:1d:39:4d:11:27:65:e0:be:a5:46:a0:32:70:c9:
                    97:8b:19:66:97:55:b3:10:b6:c2:c9:0f:cd:73:39:
                    56:6a:6d:4a:c7:35:3d:97:85:cc:50:6a:f0:32:d3:
                    66:8f:14:70:bc:20:1a:83:f8:7b:87:40:ce:f5:94:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:51:2A:86:BF:41:9C:0F:BA:35:33:50:0A:83:23:19:DA:D4:7C:25
            X509v3 Authority Key Identifier:
                keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:11:63:af:e4:3f:22:64:be:2d:14:5b:07:9e:28:72:52:
         c8:7a:2d:d4:53:cd:ca:75:47:f1:8d:a1:10:30:fe:27:ca:79:
         be:f7:15:86:5a:36:93:52:09:56:a9:6a:ec:59:e3:d1:a8:89:
         c7:f2:83:a3:13:ee:fb:63:48:52:9b:ff:0c:df:8d:57:b2:95:
         35:39:e1:e7:49:d7:d2:fd:5a:04:52:07:ae:12:e7:da:01:aa:
         37:36:f8:67:3d:16:ca:27:67:20:8e:f7:ca:b5:ef:b3:38:e7:
         6b:1d:80:19:b2:96:f7:a2:1c:e2:c3:c1:4b:fa:44:8a:ba:76:
         34:0d:cc:54:f7:93:67:bb:ea:74:c9:be:b4:72:e3:dd:07:b5:
         08:6e:db:d2:73:39:a9:58:38:13:e3:06:40:02:f4:0b:19:1b:
         72:e8:3a:c7:c4:23:e7:32:49:39:9e:ed:91:7b:19:08:ac:b5:
         a4:e0:ed:31:d2:15:ce:d8:b0:ae:b3:e9:0d:35:4c:9f:70:24:
         a2:0f:80:ca:3c:fe:04:c2:10:ae:01:d3:de:7f:e9:42:bf:77:
         e9:05:04:2d:69:39:f5:d6:5a:10:1e:59:23:b8:7b:65:c0:2e:
         30:4b:01:fb:f1:33:3d:89:0e:8b:cc:94:5f:0f:c8:dd:ac:48:
         63:9b:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:16 2024 by rpki-client on console-fra.rpki-client.org