Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File:                     nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier:          k4R5AxhxdGzP0md0pCKXPAfJ7bGixpEngOPHI5WSQHc=
Subject key identifier:   DE:7B:71:6E:D4:D5:41:46:F8:2D:29:E5:5C:EE:A8:1E:3B:E9:00:9C
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer:       /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial:       018F86362C33F050E0562F62F502B2D22B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 11:00:48 +0000
Manifest this update:     Fri 17 May 2024 11:00:48 +0000
Manifest next update:     Sat 18 May 2024 11:00:48 +0000
Files and hashes:         1: 6aPj84O_XRT7QLm_N4SKBBU3fVE.roa (hash: uFL/n4F4/ANq4fCQ401D7erQJKxUXmBJK802Bs9mmRQ=)
                          2: 89bassPj2ijYviFX3ma2Hx4odWE.roa (hash: wAxhZV9efJefckLPIvrh0TWYFEieAhSz2c+XP3AVKCw=)
                          3: G6lrjXCvNRgyYogYBiQruIGVxe8.roa (hash: vOVjJz/m9iLFiCy8sgZBBBlfsMNRvuS92RaiVfKDMBE=)
                          4: OKxTBazuyTvtvzUkdkB0ywGh0DY.roa (hash: 4FDxnUb2um/JGHqhk50AhMHAdetqJGO3anZnm43s3yk=)
                          5: k1_qr_M5qoi2cYn67yTFXLBVIrY.roa (hash: 5quDZDMCQxcFlTdVdXP/GCEATD8C1IswKC1NM0pROOY=)
                          6: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: Y2VMa+o3Kk1vwmmFKsX+SWTF1r6pQppRhE1PS+ssaoQ=)
                          7: pOJ8TENBhHUvXNElSwI4dP8UU6c.roa (hash: f6hjgYRiuJHikBeLg1d3/o03anemRCvrS7UgvQkgRA0=)
                          8: qY5Vfqk-RO4oDDK4wuLJmMiAyLg.roa (hash: YgSfaCc90LeQ/xe6jYKkISR0ekDlExDB1OVIV+QDHnQ=)
                          9: r-P9SRQaLjCAqODdRPJHFZbQFyY.roa (hash: yiYRKYsvrcXeOhvVDmc7hGjWjv/AwxIf0u1kutAtevE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:2c:33:f0:50:e0:56:2f:62:f5:02:b2:d2:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
        Validity
            Not Before: May 17 11:00:48 2024 GMT
            Not After : May 18 11:00:48 2024 GMT
        Subject: CN=de7b716ed4d54146f82d29e55ceea81e3be9009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:3d:37:26:b5:0c:11:31:8f:2a:26:16:2a:
                    ff:e2:be:05:7b:8e:c6:a2:dd:0d:24:97:c1:51:fb:
                    c6:5b:f3:40:6b:4e:49:73:55:40:53:68:f7:2b:27:
                    a8:27:f7:7f:4c:4b:2a:2f:74:57:c2:56:5c:98:25:
                    79:d0:1f:ff:aa:cf:63:d0:10:f8:43:6d:61:8f:8b:
                    7a:3a:e8:c9:95:62:59:85:fe:01:98:26:3f:ec:9b:
                    99:3e:71:57:f7:da:d3:89:3f:8a:64:90:54:d6:dc:
                    66:13:45:c4:c7:41:46:47:8b:f2:52:d0:ce:0f:3f:
                    59:45:10:b1:40:ef:3d:f9:7f:98:07:f4:94:90:fb:
                    fc:a7:95:f8:5e:6c:ae:64:f2:8c:89:fb:fe:c6:e0:
                    c4:3e:70:19:95:87:c9:9f:d2:02:c7:97:53:34:04:
                    af:8e:ff:e6:26:f2:31:88:af:a8:5b:bd:e4:2f:e6:
                    ab:05:99:eb:74:e6:4d:95:48:97:9d:99:de:bb:13:
                    e7:90:07:9b:ef:bb:26:41:b3:be:26:32:e7:bd:d3:
                    11:eb:a8:ad:d9:0c:8f:23:c9:60:19:4f:7a:80:db:
                    d3:36:3e:8e:6b:e0:7b:05:ea:e5:cc:cb:08:64:ea:
                    37:e1:a9:dc:12:0d:aa:72:7f:ce:cc:45:33:3f:41:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7B:71:6E:D4:D5:41:46:F8:2D:29:E5:5C:EE:A8:1E:3B:E9:00:9C
            X509v3 Authority Key Identifier:
                keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:44:80:15:a2:a6:c3:81:d4:6e:8c:ab:80:ce:47:af:88:
         b1:94:91:cf:c2:ee:4c:bc:df:4e:70:d9:85:5a:47:3d:ba:4c:
         ee:29:db:ea:83:62:48:9b:27:23:ce:94:24:13:37:c3:15:58:
         0f:8d:b2:c1:31:7f:d0:22:fa:83:94:fa:4d:5f:63:57:c2:16:
         8e:4e:88:e2:89:4e:12:b7:f4:8e:20:32:0c:e7:53:aa:a9:8b:
         aa:6a:2b:54:07:51:4e:e8:57:3e:55:c4:97:83:1c:f3:08:b7:
         58:0a:0d:55:7a:29:fd:85:e1:4b:6a:ec:9b:72:8d:0c:37:8b:
         26:cc:08:ff:03:f7:07:5b:ce:75:c1:c3:d6:78:cf:93:bb:dc:
         1c:50:05:fb:33:b5:13:00:cf:01:3e:47:d6:c7:c4:49:f4:80:
         b0:6e:53:bc:3a:a1:0e:ad:bb:b4:ed:72:c0:94:20:95:03:59:
         36:01:8e:66:45:1e:19:79:4b:b1:1e:c5:cf:bb:7f:35:b2:ef:
         37:41:d5:44:a6:a8:1b:87:22:0b:53:57:d4:4a:de:90:d8:40:
         8a:fe:28:0c:2d:c5:0c:29:d2:17:24:fc:77:f4:42:4a:28:13:
         9b:8f:6a:db:ec:23:40:c3:68:13:1e:60:db:7a:a2:df:56:70:
         ec:e3:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:11 2024 by rpki-client on console-ams.rpki-client.org