Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File:                     nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier:          vaBxoG1i8cXh1oASBTQSl3leROyKCpznR+JvszCllMA=
Subject key identifier:   88:DA:B7:D6:B9:8D:4C:72:F6:0E:DC:32:F5:AA:EE:27:AF:08:A5:7F
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer:       /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial:       018F889242A89DFFD09695C4FF3B9308FDA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number:          06A0
Signing time:             Fri 17 May 2024 22:00:37 +0000
Manifest this update:     Fri 17 May 2024 22:00:37 +0000
Manifest next update:     Sat 18 May 2024 22:00:37 +0000
Files and hashes:         1: 8-RFE8LtW8qhn31SJct19K8XoqY.roa (hash: KjeaYfMV5ekZPlncB8x+hDHbocwBRBt2qb5PDAprRzs=)
                          2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: XGb5yc9vI5tiZXyRUQGVsfl4a4ABYnkUlI0FzwDZiqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:42:a8:9d:ff:d0:96:95:c4:ff:3b:93:08:fd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
        Validity
            Not Before: May 17 22:00:37 2024 GMT
            Not After : May 18 22:00:37 2024 GMT
        Subject: CN=88dab7d6b98d4c72f60edc32f5aaee27af08a57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:05:d8:ea:e0:bb:e8:e0:18:69:42:2f:15:
                    54:31:a8:1b:3a:62:2d:23:34:7e:ef:a9:aa:3a:d8:
                    ab:e6:ed:55:a8:14:73:51:12:eb:0b:cf:fc:7c:5b:
                    9b:59:f7:3f:6b:b8:59:df:5b:ea:a5:e7:23:62:be:
                    da:1c:0c:21:f0:79:e3:9f:4a:62:5a:f9:2a:a1:c9:
                    a5:9b:31:23:6b:f0:e6:38:a4:c0:97:ca:c2:8d:99:
                    37:91:e9:73:f3:c3:69:3d:c0:60:3c:03:0b:1e:c4:
                    74:e6:4c:2f:44:0b:5e:d1:f9:67:e1:08:7c:db:88:
                    33:9c:98:3c:fa:ea:fd:c0:38:ae:66:7c:a4:a2:22:
                    1f:27:8e:7f:a7:0f:c0:21:21:48:a4:64:ad:c4:f7:
                    f1:4e:30:44:07:95:45:20:ca:02:c9:8c:c9:a6:8d:
                    0c:4b:68:02:ea:09:85:31:61:12:75:f1:c0:41:6a:
                    40:d7:80:19:43:c6:8c:7a:b7:7b:b3:04:90:92:59:
                    ac:99:4a:52:16:25:ce:6c:4a:6e:f2:9b:f9:6a:45:
                    32:ef:e2:7a:7e:eb:91:f4:5c:08:2f:f9:29:4a:d4:
                    0d:b4:bc:87:cd:c7:54:b5:a7:5e:7c:c8:39:e5:95:
                    6b:83:06:51:dd:30:1c:7a:41:ef:f0:28:73:29:cd:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DA:B7:D6:B9:8D:4C:72:F6:0E:DC:32:F5:AA:EE:27:AF:08:A5:7F
            X509v3 Authority Key Identifier:
                keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:08:33:cb:90:74:ec:6f:ed:29:44:3c:b1:17:12:ca:f2:ba:
         2e:10:55:3d:c5:14:f5:23:82:2d:ab:f8:bb:7b:e1:14:ab:be:
         8e:60:1b:c3:cf:aa:05:cd:af:45:15:f2:f8:83:06:0c:97:c5:
         3e:16:70:8f:70:0f:b2:ae:36:cc:33:75:e3:84:20:86:ed:b0:
         1d:86:26:68:8c:15:1c:74:78:e3:15:36:b2:45:f3:be:21:d2:
         7e:cb:08:09:94:9a:e8:93:63:0f:c8:3f:91:25:4b:23:59:cd:
         ff:7a:7a:65:d8:4b:99:f0:f4:82:14:03:dd:cc:74:d1:59:0f:
         8c:f4:4c:36:b1:9a:cb:aa:e4:5a:29:c5:db:26:46:90:40:ae:
         43:c9:c3:21:db:8d:77:44:cf:01:55:f9:67:c5:fe:f9:25:5a:
         3e:98:b3:b6:3c:6b:b1:fd:f9:cd:32:9e:87:da:56:03:f6:9d:
         77:41:c0:70:2e:5e:e7:ff:9b:26:fa:13:e6:34:2a:04:51:9c:
         2d:c7:4d:c5:ce:fe:cd:97:ea:df:72:0d:6d:1e:8e:41:2b:86:
         d2:31:00:da:41:d8:99:94:00:a4:a8:e8:64:3f:ec:3f:27:17:
         8b:8f:f3:a4:19:38:3c:2f:55:cc:92:bf:59:4d:a4:5e:7a:fc:
         dc:6f:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:36 2024 by rpki-client on console-fra.rpki-client.org