Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File:                     N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier:          wB/diLhTQjrT1rlvm9wZQ48I3PqcUTIlLa/ePxmd8pA=
Subject key identifier:   4D:4B:EE:C3:72:24:5E:CC:D2:75:87:97:CF:76:4E:58:53:6B:BA:E6
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer:       /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial:       018F86A3E2F206F0FCC49B2108AC42FBAD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number:          0967
Signing time:             Fri 17 May 2024 13:00:38 +0000
Manifest this update:     Fri 17 May 2024 13:00:38 +0000
Manifest next update:     Sat 18 May 2024 13:00:38 +0000
Files and hashes:         1: 3B3MJNdgrGp8dlmEGWkpih85N6M.roa (hash: HERs/5sN2MqXl0+YF6kuNwxng0Y5mgGy0dUGPES/n2w=)
                          2: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: OnDHmRDIAYruQ83+KQXcrZ2ljKz62/csB+BV7evAntQ=)
                          3: X1rUcshA77fDQkjlnt2lH8F75jM.roa (hash: WQrLTMoX1XnlZTzO/Ej8+Si2mwsocfzFBpN/2bkj68A=)
                          4: bb-Rk5oZtp94IQVhU9o71QNJpRI.roa (hash: klaYXXv9C1nY1tiTOEqVjeVa3ez5w+mKgAmLFYoihJ0=)
                          5: hVVKhcLPSZ85sgqdoxO6cU7YoeI.roa (hash: nSUl2TiszKJPBHC/2P3nRXA3rEu+pCG6DZR4xpkj2i8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e2:f2:06:f0:fc:c4:9b:21:08:ac:42:fb:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
        Validity
            Not Before: May 17 13:00:38 2024 GMT
            Not After : May 18 13:00:38 2024 GMT
        Subject: CN=4d4beec372245eccd2758797cf764e58536bbae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:77:81:5d:1b:1d:2c:07:60:60:18:b7:0e:
                    a5:9e:5b:57:4f:61:a3:78:50:ba:a3:f9:da:00:6c:
                    96:5c:28:a0:ce:8c:07:fb:8b:f9:b7:f9:9f:b6:16:
                    da:0f:69:b6:46:07:3f:45:3c:31:18:ed:b0:45:3b:
                    5e:d2:a9:11:69:e2:86:15:35:c4:0a:ed:65:e4:39:
                    bb:12:81:bb:88:0e:fc:f1:ea:55:95:fb:a8:99:4e:
                    76:c4:11:2b:b6:bf:87:69:a2:78:57:50:09:6c:86:
                    20:93:14:14:7a:7c:c5:5b:00:a7:e7:71:91:a6:04:
                    de:7a:fc:e3:c8:68:ad:8e:cb:25:7d:7e:18:06:42:
                    6d:7d:a6:b7:5e:d1:67:9f:ff:f2:07:b7:5c:5e:23:
                    65:bd:68:ae:08:2a:40:03:de:bf:71:1b:49:73:dd:
                    ef:77:f0:4b:c2:0b:73:a9:bc:52:c4:24:db:da:70:
                    5a:ea:68:b4:bd:42:a5:4a:6d:ef:92:22:94:29:33:
                    b9:27:b8:c1:6d:80:48:5d:ce:6c:c0:3e:ce:94:b3:
                    35:dc:f6:e3:5e:19:b0:38:f4:a0:c2:d1:eb:39:b6:
                    6b:36:f1:31:7c:8d:da:28:ff:83:d1:c7:f3:55:b5:
                    42:93:55:19:05:6f:01:5f:2f:21:d2:1b:79:6e:75:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4B:EE:C3:72:24:5E:CC:D2:75:87:97:CF:76:4E:58:53:6B:BA:E6
            X509v3 Authority Key Identifier:
                keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:ed:03:84:cf:51:db:f8:5a:3f:46:8e:25:81:4e:44:4b:
         ad:96:44:1d:de:0c:4b:b1:2d:a3:8a:88:c0:54:b6:b8:19:7c:
         d3:94:b6:6c:4c:52:e9:81:e8:ce:c8:4d:5b:11:0d:af:88:d6:
         88:f4:8b:ec:f4:92:db:b1:37:78:02:b3:91:4c:ea:60:ab:fd:
         54:49:e7:d8:0f:2d:f2:d3:50:b6:4b:00:87:5e:82:a9:0a:57:
         ef:21:9f:66:16:35:14:08:b9:24:dd:30:40:ed:5e:6f:dd:86:
         d8:b8:50:63:92:06:5b:39:59:52:72:68:06:58:5d:9c:aa:50:
         fa:44:ce:c7:04:87:e0:77:36:df:b3:d4:38:91:9a:7d:15:d0:
         52:c6:cd:3a:da:70:71:55:7a:fc:f6:2e:b3:68:62:e8:b6:53:
         92:7e:dc:15:9d:01:ae:b3:21:ea:c2:77:c7:09:a7:0b:47:22:
         40:b6:0c:f7:ef:9c:ec:3c:e0:ce:f0:16:1c:32:3a:4b:00:44:
         a6:35:7f:02:d4:da:b0:2a:ea:be:f9:9d:43:4f:2c:04:39:8b:
         b0:d5:4e:6b:2a:a5:ab:30:3b:8c:c0:2f:e5:2f:ec:b6:f4:a6:
         59:87:2a:ac:9c:fd:22:ea:a5:fb:27:29:b0:47:94:ff:b4:6f:
         e1:57:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:39 2024 by rpki-client on console-fra.rpki-client.org