Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File:                     nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier:          +sS20Y5MsifKR00Ovq9FHt8lnLxxUNnbL3x3hjS2MsU=
Subject key identifier:   C7:56:CF:1A:FA:80:19:F4:9C:53:3E:DA:20:BA:6B:D6:0A:AC:80:A0
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer:       /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial:       018F8711572469AAF7E9870B232D75910726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number:          0442
Signing time:             Fri 17 May 2024 15:00:11 +0000
Manifest this update:     Fri 17 May 2024 15:00:11 +0000
Manifest next update:     Sat 18 May 2024 15:00:11 +0000
Files and hashes:         1: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: iUYc0yZkEIIIqejuRhZroPJOE66G/3UtJ7Rk560OABY=)
                          2: oQquGHtVpLfFBe1Te0ECdZW46sA.roa (hash: ZQIuz0g5CFckz1QsZEVIi7kqpbFypvPM/8BBn/5KBpk=)
                          3: p9VLmwle_0A8HS6kzMIdrVQgzu8.roa (hash: WenVUAHK53qWLTs0ckqmnjy3d058fXagfdiezR9I6Tc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:57:24:69:aa:f7:e9:87:0b:23:2d:75:91:07:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
        Validity
            Not Before: May 17 15:00:11 2024 GMT
            Not After : May 18 15:00:11 2024 GMT
        Subject: CN=c756cf1afa8019f49c533eda20ba6bd60aac80a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:df:f2:3a:cb:ec:56:41:da:af:85:ce:db:
                    a7:6c:b2:4b:37:1a:ac:47:0d:88:2c:71:82:48:1e:
                    68:82:14:55:d7:74:f0:40:c4:8e:8f:fb:fc:48:3b:
                    51:9a:ef:37:6e:7a:63:87:59:1d:e1:61:31:99:9e:
                    bd:be:f4:46:e8:18:48:b2:8c:12:28:e9:d2:6f:ee:
                    e9:a2:88:46:15:82:4a:10:91:39:93:a1:a0:37:2c:
                    1b:c6:86:87:dc:3b:ad:28:2e:24:84:77:f7:f9:da:
                    1c:de:df:7d:66:b1:b1:82:fc:d6:99:18:7c:f4:93:
                    ec:55:58:19:5d:e6:50:4e:ae:f3:53:69:38:e5:ed:
                    56:a9:b1:33:a9:d7:95:8f:2e:0b:fa:28:7c:39:fb:
                    49:fe:0c:ba:21:fa:7c:01:b9:70:4e:e0:df:fc:f0:
                    af:4f:76:ce:3f:83:93:43:51:5e:f0:8d:4c:cb:37:
                    4d:bf:2d:28:c2:64:b7:4b:38:4d:e7:57:f5:11:11:
                    09:65:e3:70:33:46:9e:e7:0a:f4:2f:3b:00:1f:43:
                    80:c3:c8:9f:5a:d1:02:72:5b:a9:e9:14:36:0c:24:
                    24:8b:d3:5d:a2:af:3f:51:03:7d:c3:42:ad:88:6b:
                    44:8c:12:bc:ea:33:d4:7e:29:e2:33:77:b9:97:8a:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:CF:1A:FA:80:19:F4:9C:53:3E:DA:20:BA:6B:D6:0A:AC:80:A0
            X509v3 Authority Key Identifier:
                keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d7:1c:70:8e:ec:cf:e3:c5:2d:4c:a0:18:57:bf:fb:ae:2b:
         6a:86:aa:4f:d4:f2:d3:a7:55:2b:58:db:78:35:86:6c:08:d5:
         9a:46:e6:3c:66:ae:b5:21:3c:dc:96:2a:51:e4:0b:aa:42:73:
         4e:26:40:8c:55:1a:b8:0c:95:79:a3:71:59:5a:39:5b:eb:f9:
         05:41:bc:93:b2:07:d0:6b:bc:36:21:fb:6b:ed:28:f8:f4:5c:
         9b:d0:42:f8:3b:eb:79:7d:a3:48:b5:77:a6:a4:be:04:41:f4:
         4b:59:92:45:5b:f2:65:cd:40:2b:ee:25:0a:01:86:da:75:ae:
         37:59:a1:bd:9d:0b:02:40:40:21:ff:dc:f5:ab:5e:cd:d1:dc:
         ef:c2:09:9a:80:ac:a5:23:bf:ae:0b:6d:54:da:c0:b3:1e:25:
         e0:02:b3:7d:38:9b:20:f3:9e:30:51:13:0b:62:6b:7d:59:4b:
         07:74:e2:85:78:54:06:41:37:27:d7:57:cf:21:34:03:1d:39:
         fd:f8:e8:c1:b4:17:07:ea:7c:28:cf:fb:4b:04:2f:78:38:16:
         0d:a9:76:c4:8a:37:87:bf:11:8d:48:eb:d8:5e:2d:4d:64:4a:
         67:34:0e:4f:ea:d9:a9:3f:b0:1f:ef:a3:cc:d1:e7:5e:f1:3e:
         61:76:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:31 2024 by rpki-client on console-fra.rpki-client.org