Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File:                     nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier:          gIDpURmuU2TPQBI/swLId04D7QXQ0Qjc4J3s72r3B/Y=
Subject key identifier:   3D:1A:B8:20:36:CE:31:1E:9A:73:61:F8:E1:5B:19:00:26:06:BF:F3
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer:       /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial:       018F8892579DE069CC4F3106455F89788C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number:          03F0
Signing time:             Fri 17 May 2024 22:00:43 +0000
Manifest this update:     Fri 17 May 2024 22:00:43 +0000
Manifest next update:     Sat 18 May 2024 22:00:43 +0000
Files and hashes:         1: CN9w6lCCgWoJ1ywJhnXam1YsxEA.roa (hash: fvAUenF1efktVT4y+z4GvACgPSxN6Ai6tVq5h2vv74M=)
                          2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: H/1olstIWElds90jG8sHcK45vJfvW7UxaCfNPuo1Y/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:57:9d:e0:69:cc:4f:31:06:45:5f:89:78:8c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
        Validity
            Not Before: May 17 22:00:43 2024 GMT
            Not After : May 18 22:00:43 2024 GMT
        Subject: CN=3d1ab82036ce311e9a7361f8e15b19002606bff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:8d:47:6a:5b:04:5d:0c:2b:58:c2:8e:d7:
                    4e:25:2b:c8:31:d2:3b:5a:f4:d0:4f:22:06:83:06:
                    13:44:a3:fd:0a:78:74:82:ba:1f:96:1a:15:06:10:
                    b5:0e:c3:15:3c:37:03:88:7c:6f:f8:fe:7e:2a:20:
                    71:0c:3d:b3:b7:8b:00:40:e9:3e:b5:05:75:dd:ef:
                    a8:1d:35:5f:dc:80:94:f7:07:01:70:60:a6:50:12:
                    de:8e:85:0e:f9:a1:d0:6f:90:0d:5a:62:70:69:1f:
                    c4:37:c6:ac:ed:5b:57:09:c6:5c:af:ff:5a:ca:82:
                    de:73:f9:34:15:b2:b9:2a:3b:30:bf:c7:03:7b:72:
                    da:1c:4f:f9:d7:f3:e1:cb:31:a9:78:79:a5:bd:e8:
                    ae:06:bf:fa:ba:e3:0c:b3:4c:a7:82:a4:b4:6c:91:
                    77:e0:04:19:ba:15:e2:75:18:95:ae:10:93:51:df:
                    ad:84:5f:77:d0:46:92:50:45:0a:e6:bf:48:50:e8:
                    22:13:b7:0c:7d:62:9b:c8:92:fc:c2:29:ef:0f:7d:
                    f2:ea:6b:9b:c4:04:a0:28:91:79:af:a4:e0:e9:86:
                    28:9e:23:13:c1:91:60:7e:da:b6:00:56:3d:a8:ca:
                    79:c1:9b:c2:ed:22:8a:f8:46:fd:0e:18:c8:2c:01:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:B8:20:36:CE:31:1E:9A:73:61:F8:E1:5B:19:00:26:06:BF:F3
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:01:91:f2:e0:8d:d8:c7:e7:57:5c:19:96:ab:ee:11:d8:67:
         1f:83:b1:62:6c:66:4b:02:5d:11:8d:65:5d:dc:7c:f7:c1:7c:
         07:50:f1:e4:51:c9:34:58:67:d4:9f:7e:1e:ac:16:38:9b:bb:
         34:df:67:fe:ba:03:6c:d8:5e:ff:da:2d:21:5f:3e:3a:67:b6:
         e4:51:a5:a5:41:6d:e2:3e:4d:e3:19:66:63:72:e3:b1:b1:ad:
         9b:fd:59:7b:5b:6d:aa:b6:2c:f2:1c:49:a6:2f:6a:f2:67:12:
         43:e8:9f:08:9d:60:a2:c8:c7:a8:06:96:62:36:4c:79:a3:f1:
         d8:f5:78:a7:2f:d6:fb:e0:3f:65:76:b8:cd:4d:2d:80:4f:8b:
         e3:62:d4:57:b5:bd:e2:b4:01:7b:30:2f:59:5c:60:ac:3a:e5:
         09:74:44:81:1c:3d:37:81:2e:82:d3:67:19:6c:f1:44:ab:bc:
         0e:42:46:81:b3:a1:07:26:9c:d2:95:37:7e:81:36:4e:72:f2:
         da:5c:3e:db:19:c2:db:28:4d:d1:03:72:2a:1f:b9:28:c7:00:
         bd:11:2f:4d:ee:24:fa:49:63:8d:96:49:04:3a:b3:0f:41:e6:
         2f:88:b4:a2:4f:bd:4d:09:4c:27:f0:81:c7:f1:5d:e0:68:b3:
         44:11:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:43 2024 by rpki-client on console-ams.rpki-client.org