Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
File:                     nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json)
Hash identifier:          kP9aPd5NMgPtI8yPFGAmG4Kf3lzvvu3C09GB9s+MTGs=
Subject key identifier:   B6:74:D3:3C:28:5A:AC:3A:B5:0F:1A:24:DB:C2:28:AA:5A:C0:5E:AB
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Certificate issuer:       /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial:       018879421096AFAA8C64B919CF958A17E4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
Manifest number:          0776
Signing time:             Thu 01 Jun 2023 23:19:12 +0000
Manifest this update:     Thu 01 Jun 2023 23:19:12 +0000
Manifest next update:     Fri 02 Jun 2023 23:19:12 +0000
Files and hashes:         1: 50kUjKf30_-gggdqkR7ruMNBLyw.roa (hash: Rc/dwsOUZ5JyqcPNWUJBJaVeiYn0RLWqeyzIaUJe5Kc=)
                          2: IB5G6euG4JFWt6WVhSG0Y0LxoiE.roa (hash: lhwB7sN92ShL+ZXoG3XOl/12nMGjVWiPF2hpCadDK4E=)
                          3: LXBNmyn4LE8ee_REByrzWaqi_N4.roa (hash: wiEn7IgJIDp0NbPT7q1Dgd7Gy5m3vIOku6HzbGitD+8=)
                          4: RpL1NrsI4aI_U4ow8TSSn6BJPRc.roa (hash: pLp3WxOzvRkkAP/0XGebTjcfk2ZA8CqBdZIQWUM1fSs=)
                          5: kMMasNgWxtX8vyoCQp4grxouSjQ.roa (hash: D5s5wvUg655th/zrqcWFn+Y6jMnQ36AZXeWn2/3RaGg=)
                          6: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: pPrAkIsW8Xnb+L/+IAZC/nFQgifUiGWZTXa2f0PeTFs=)
                          7: w9kG8q5QVqoD1NfzoXKyOaV4Jj0.roa (hash: qDgr2rMF0eZH6X5EVClzv9x17vXA5T9W9zR4JTGsaxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jun 2023 16:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:79:42:10:96:af:aa:8c:64:b9:19:cf:95:8a:17:e4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Validity
            Not Before: Jun  1 23:19:12 2023 GMT
            Not After : Jun  2 23:19:12 2023 GMT
        Subject: CN=b674d33c285aac3ab50f1a24dbc228aa5ac05eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:2f:2f:8d:bf:f2:5e:a4:3f:94:44:3d:98:
                    ff:0d:07:c6:39:a4:d0:ec:2e:7e:4e:ee:03:e2:8d:
                    f7:6e:10:9e:18:30:31:52:a5:65:8d:e2:a7:19:23:
                    56:32:66:6c:55:bc:bb:61:03:72:c0:46:0a:92:72:
                    01:0b:04:ec:84:53:15:6d:0f:7e:e4:02:df:d5:fc:
                    c3:d4:18:5b:71:25:96:69:a2:8e:13:15:d2:d8:af:
                    6e:a5:69:d8:7c:fc:fb:47:89:b2:91:af:19:8a:d3:
                    2b:9c:bf:75:b1:d0:7a:34:d5:dd:ab:e8:c8:9f:f2:
                    f6:51:94:a7:98:29:18:b2:67:9d:38:94:39:72:98:
                    f6:75:e5:dd:66:6f:ea:2c:cd:16:22:cc:4d:46:08:
                    df:43:15:42:32:51:b7:56:44:73:58:a9:11:a6:cc:
                    01:ca:91:21:20:50:2b:44:08:1b:26:27:63:8a:6f:
                    00:b6:40:e3:ce:da:a4:be:dc:c6:f7:02:00:44:ce:
                    48:43:f5:06:91:00:7e:58:d7:01:55:b5:17:e1:50:
                    75:0d:e2:f0:46:8a:be:e9:7e:a0:a2:00:3d:24:ef:
                    17:f9:34:4e:d3:06:e0:47:1b:c8:ca:25:f2:b1:8b:
                    d8:af:17:5c:04:21:83:aa:8d:de:68:73:f0:27:9c:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:74:D3:3C:28:5A:AC:3A:B5:0F:1A:24:DB:C2:28:AA:5A:C0:5E:AB
            X509v3 Authority Key Identifier:
                keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:15:ed:50:04:53:a0:00:86:23:2f:bd:99:a8:11:ce:be:d4:
         77:26:14:61:d2:49:97:f2:b8:11:ea:16:6b:e9:26:3b:3b:e9:
         5c:6e:b2:c1:2a:5d:1a:91:a3:a1:e6:9a:13:ac:f8:1d:b1:0c:
         16:51:d7:3b:3b:37:d6:be:21:a6:bf:e6:94:b8:eb:70:9a:76:
         f8:27:b5:6b:f4:65:d6:d8:19:53:28:9f:ca:38:0c:6f:6d:27:
         fb:6b:15:9e:68:dd:42:77:2d:f4:86:0d:53:30:1b:81:da:72:
         79:25:5d:91:ed:3a:0a:26:7b:f3:07:c5:d2:c2:4c:b6:80:07:
         56:b1:19:f3:57:6a:c9:44:5f:37:d6:90:c9:f6:a9:72:c1:4c:
         8a:f8:f9:9b:22:e4:26:58:d4:6b:4c:b5:2d:3c:07:b2:7b:ad:
         93:05:7f:d1:49:f9:d3:58:5a:3c:b5:8f:24:4a:01:93:69:42:
         a1:64:75:d1:50:6d:8a:9c:e6:8e:b1:46:d7:ba:be:29:22:f1:
         4f:c7:56:c6:d4:85:7b:e8:90:57:0c:32:1e:e2:30:6b:20:31:
         cf:ca:a0:f3:cf:88:9b:90:64:2f:8b:7d:a1:93:6b:04:20:d9:
         1f:e0:67:99:c1:4d:fd:56:7a:69:c9:90:84:24:1f:03:e8:06:
         6d:31:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 1 23:48:45 2023 by rpki-client on console-ams.rpki-client.org