Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File:                     ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier:          yUrD+WUSHSXlfJW4rlpOEOHzTBTmh664iTR+XPmCrVY=
Subject key identifier:   2F:00:43:DC:26:D1:16:62:9F:5D:1E:E4:EE:CE:5D:C6:04:97:20:B1
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer:       /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial:       018F98AADF4E16D0406D708ED791C61269AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number:          113E
Signing time:             Tue 21 May 2024 01:01:25 +0000
Manifest this update:     Tue 21 May 2024 01:01:25 +0000
Manifest next update:     Wed 22 May 2024 01:01:25 +0000
Files and hashes:         1: n7oWdnxl9oxjGM2CaIz9f346dUg.roa (hash: 8T4lPsUTCWjCLn3DOc3LGBg1PfPB5gYyeiWLj1YwZCE=)
                          2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: KUbFj5Ms636xCBw2bloz9SpSDijdwMUtR44PQ5b1wZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:df:4e:16:d0:40:6d:70:8e:d7:91:c6:12:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
        Validity
            Not Before: May 21 01:01:25 2024 GMT
            Not After : May 22 01:01:25 2024 GMT
        Subject: CN=2f0043dc26d116629f5d1ee4eece5dc6049720b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:9a:b9:fb:45:5a:49:4e:05:98:b9:41:59:
                    aa:a7:39:7e:1c:af:3f:b7:02:0c:9b:82:2a:be:0d:
                    53:84:6a:c5:29:c9:52:ce:ec:57:11:fb:f4:10:01:
                    73:73:45:58:77:13:64:6f:47:f5:04:c7:e1:9d:d8:
                    02:c5:9c:b0:78:1b:08:0a:a0:bb:fc:88:f0:2b:70:
                    47:04:4d:f6:b7:e9:8e:da:aa:14:42:72:89:0e:96:
                    83:a5:fd:df:9a:fc:64:db:4e:f4:54:63:c4:b3:65:
                    a7:8e:2a:0a:da:b2:e7:e3:cc:b4:f0:1e:a1:46:5e:
                    63:80:ce:7e:08:fa:5c:0e:0d:bc:28:5e:11:f3:ab:
                    1a:1f:7e:7d:04:f6:7e:15:4c:e9:d9:9d:1a:ae:ba:
                    4c:a8:a4:0c:c3:7d:b2:e8:0f:e1:d6:34:0f:17:92:
                    2e:9d:29:bb:7c:d5:45:1d:b3:c2:ea:73:76:c7:44:
                    9b:34:b4:49:b2:1a:fe:8f:c7:ad:af:68:55:15:62:
                    25:db:3f:6f:d6:2e:ed:29:21:b9:75:75:71:29:68:
                    5f:19:f3:10:2f:a9:e8:8e:07:fb:bc:06:36:75:af:
                    cc:25:d1:c4:d7:1e:6b:0b:d3:dd:37:3f:0a:78:65:
                    1b:6f:61:d6:33:16:5c:cc:2e:a8:0a:03:f9:8e:2f:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:43:DC:26:D1:16:62:9F:5D:1E:E4:EE:CE:5D:C6:04:97:20:B1
            X509v3 Authority Key Identifier:
                keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:f5:3e:39:73:cc:35:d7:4a:02:1a:f8:a3:37:04:49:a0:
         e0:2c:52:d1:d8:d0:86:bf:70:70:88:a6:b3:2f:3d:4a:35:b3:
         1d:73:75:a1:05:a7:fe:34:85:82:fa:3a:e9:47:b6:fc:b5:4a:
         4d:b4:3b:bc:2c:ad:80:ee:b0:e7:68:a1:25:85:fb:a6:c8:74:
         22:e3:1e:7d:92:4f:cd:4a:7c:2b:d3:87:b9:21:d8:cb:99:64:
         0c:e0:c2:c2:20:6f:36:c3:d5:f5:b6:2b:ce:2b:fa:de:b5:48:
         18:ad:07:38:d7:77:f1:b8:bf:4e:a3:8b:c1:77:81:d6:dc:a7:
         a3:74:4f:b6:25:94:95:49:c0:f2:89:6f:43:23:85:cd:00:d3:
         e3:0c:21:40:ca:58:2b:63:5e:cb:f3:b2:0e:be:66:b7:26:a4:
         56:d9:c8:d4:27:50:0a:43:16:87:84:57:49:1b:9c:6c:83:63:
         22:f8:3d:ee:1a:8c:c9:b5:83:6d:11:e8:ba:5b:12:8e:d3:31:
         41:40:6f:51:ed:b9:8c:d0:b0:2c:33:81:67:79:6e:f5:c0:76:
         0a:2c:6f:81:7c:9a:25:04:6e:d0:04:9f:05:14:55:5c:bb:7e:
         b3:bb:61:89:11:9e:10:eb:4d:ab:ac:35:58:22:8a:60:12:6e:
         26:75:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:01:32 2024 by rpki-client on console-fra.rpki-client.org