Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
File:                     NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json)
Hash identifier:          nNupyBsat318mUUmypfvm/3DZdZZOwEuoYneo4qr34M=
Subject key identifier:   61:B4:82:F0:CB:84:27:C4:00:8D:3D:21:84:0B:AD:BA:3D:73:7E:BD
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Certificate issuer:       /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial:       018F55B82C372F1D689EBA60E2A07D4A3241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
Manifest number:          0E99
Signing time:             Wed 08 May 2024 01:01:24 +0000
Manifest this update:     Wed 08 May 2024 01:01:24 +0000
Manifest next update:     Thu 09 May 2024 01:01:24 +0000
Files and hashes:         1: 98_9CoAMX8vA5L3MYhfBSBgXfro.roa (hash: IwsJMuEY5xWJbdx7MeR39o7So0mLisUmoGY6ITCrBvA=)
                          2: AIpnQMeGHFVQY9kyWMKEUvA7GYk.roa (hash: +tHz4QUGRwtz9pgY5wrXeTpRh6ChmvrwdsFN3JYemak=)
                          3: EStMkQNsaAUNugMHWcUUmUGRd5Y.roa (hash: BmfnQVJUbzTVrPnURQaE2FANFrkJ40gg3mpiKwSBcpY=)
                          4: IZ0aT9r6slKc2ejZ33smDqZji30.roa (hash: zBodWuQQWiLp31i/PFzDqwgn84LKWjZxxdQCWwRb+dg=)
                          5: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: qVfn9vkXgX35FWze4QG9kTYEDKQFAja+IzY1O1ggRYY=)
                          6: PT2U70hZCuZnaYziH6MoTZd24LI.roa (hash: X0h4jJds2AEW8Bu/ILBnzPT0GXMkGXVc5PPzRuCvChU=)
                          7: U0SSKgPDMmVFomhihIMu8PYtQnM.roa (hash: PJNEf5OwPTDHhNy+rf6ie6uy8JOauKbSToGOs4WxfWM=)
                          8: birz4Ut0IdAeA4AG5Saz_dgkPzY.roa (hash: NFkOkkBJpfWDah6+4r0MNiX29vPes7DkDOfhwhOANMQ=)
                          9: dHtPKlL-LW1SCev9joX7i4AD3rc.roa (hash: O3ebPBiWGqkEjSgUMJOqtgt83PH9+sZLimIHiI6HIUI=)
                          10: nIHQVUFj1kVIS5V6jICu6mVlUFY.roa (hash: 9g4Lao/DzmFhufOPmiSUlpSRlN0noeOnjfUVNj95Deo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:b8:2c:37:2f:1d:68:9e:ba:60:e2:a0:7d:4a:32:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
        Validity
            Not Before: May  8 01:01:24 2024 GMT
            Not After : May  9 01:01:24 2024 GMT
        Subject: CN=61b482f0cb8427c4008d3d21840badba3d737ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:56:b7:c4:b1:c5:fd:48:e1:ef:3b:7f:51:
                    e4:e6:e8:8a:58:6d:1d:67:ab:ed:82:de:30:fa:e2:
                    d9:e5:af:05:66:c5:52:ff:8c:b2:0e:de:bd:a1:3b:
                    6c:ea:8e:81:fb:c2:b2:9c:c4:54:e4:bf:f1:37:8e:
                    9d:85:a0:8d:81:d6:91:b6:57:e4:6a:32:a3:48:56:
                    63:f7:1c:d7:74:f4:15:66:40:a7:f8:da:e3:58:b7:
                    be:7a:90:bd:25:46:42:f9:21:30:4e:2e:d4:71:2b:
                    76:70:33:ee:cc:38:0d:97:29:a1:89:c6:79:f3:6f:
                    cf:70:1a:3d:05:38:c9:b0:ee:d0:c0:c2:96:57:3d:
                    95:08:69:89:9a:ea:d0:a4:e2:a5:ee:bf:f7:ff:87:
                    91:42:9f:59:35:8a:f9:b2:ed:ac:bd:9c:21:8c:5d:
                    e0:4e:d3:08:a5:b4:51:51:ab:0a:71:1c:f6:9d:bf:
                    77:14:71:b9:f0:4a:2d:a5:d9:ea:9a:ba:02:fb:2b:
                    6f:a3:e2:88:71:3a:59:7d:1b:ce:f6:88:45:48:8f:
                    8c:ab:28:79:19:f5:82:42:e6:97:39:2e:ec:4c:b3:
                    80:0c:93:69:65:13:aa:95:f1:de:7f:8b:e1:55:9f:
                    ac:07:99:cf:18:10:51:ca:3d:c3:23:ce:5b:c4:30:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:82:F0:CB:84:27:C4:00:8D:3D:21:84:0B:AD:BA:3D:73:7E:BD
            X509v3 Authority Key Identifier:
                keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:05:04:5a:cb:72:06:9f:28:e5:8e:0d:d9:50:41:1f:34:
         79:52:66:82:05:c6:02:b2:96:b7:57:a4:46:ce:51:5d:a8:51:
         5c:9d:32:f4:9c:35:04:6d:75:4b:b6:39:43:d4:62:49:ee:07:
         27:20:82:ac:4e:67:d5:57:bf:73:d8:7f:f0:c6:da:71:7b:40:
         5d:1c:91:e4:04:c6:8b:af:c1:16:64:9b:91:67:c5:cd:79:ef:
         b3:d3:ed:c1:9f:76:45:cd:64:c4:b4:6e:bd:0b:3a:4a:c0:80:
         b6:e5:56:a7:bc:6e:c0:39:88:2c:ce:ec:21:41:3f:bd:77:cd:
         dd:a7:c0:3e:47:65:1d:d4:18:f5:83:ca:14:37:b9:a2:73:1a:
         4b:1e:0c:35:f2:2f:79:94:b0:c9:2c:64:e8:ab:d8:ac:6b:7d:
         21:ae:55:b6:dc:cf:7d:1f:43:3a:ab:8b:7a:09:57:02:1b:3d:
         54:cc:0d:c9:f6:76:9f:3e:eb:f8:2a:c3:c4:6b:5d:26:fb:2b:
         85:80:4e:35:21:f8:1f:69:d9:3f:00:95:ad:c3:be:90:9e:ae:
         51:c2:ad:1e:65:2a:7c:c2:b3:d6:22:bc:a7:1e:02:3d:4b:70:
         73:c1:e0:78:c5:b7:ca:01:3d:0c:bf:ee:bd:22:12:69:3f:90:
         0e:04:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:21:07 2024 by rpki-client on console-fra.rpki-client.org