Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          KYqME/8kooOghAVrZtIe2W8loW+WPzRuaD8sPDJEeDU=
Subject key identifier:   C0:28:B3:DC:6F:96:E2:72:92:C1:1D:6B:D7:3F:94:54:CF:EC:0D:AB
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       018F88244D4FE51861C80862368EBC468527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          0AB7
Signing time:             Fri 17 May 2024 20:00:31 +0000
Manifest this update:     Fri 17 May 2024 20:00:31 +0000
Manifest next update:     Sat 18 May 2024 20:00:31 +0000
Files and hashes:         1: CXzhaginQm8wMXa5xQ8ZwG1naCM.roa (hash: EjINqhMlozpu5mlXsSbKPvUq3AcuVqdUt/ohLh+uhN4=)
                          2: UsZS8spxYoyfTqlhL5f51pDRWw4.roa (hash: uESjvjL2EDqML37vLZn3AXXagrr6OnDUWBZOxf282wA=)
                          3: gggO8DVV7iZwCSasEaLPQ42soKk.roa (hash: 8+/dNDI7lcw8y3xnk3m03RDxAtchKvl9eJ6s7qo82gU=)
                          4: hEDKa4ik2AZRGOVL80X309OnsT8.roa (hash: 5iRlVi/Dp13FRyPytbDcIxT4xVsccFTI4WiZ6hzMc0s=)
                          5: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: yGsS3fJAcfn9KM+Bbb/+Zrkolfnif3QgyJnlnCXQws4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:4d:4f:e5:18:61:c8:08:62:36:8e:bc:46:85:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: May 17 20:00:31 2024 GMT
            Not After : May 18 20:00:31 2024 GMT
        Subject: CN=c028b3dc6f96e27292c11d6bd73f9454cfec0dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:c2:b5:ac:04:79:db:ab:f6:6e:66:c8:9f:
                    50:8d:1e:6a:49:ea:9a:ea:b9:f0:0b:99:72:af:b0:
                    c9:80:26:ce:e6:90:88:60:e8:fa:e7:53:48:19:a4:
                    a1:80:24:13:09:2e:c0:58:79:fd:63:fc:e5:b7:e4:
                    42:8b:50:22:47:99:60:5d:fb:e3:89:32:b3:13:ab:
                    9d:71:09:22:ab:b0:33:e9:ff:67:76:a3:4b:ec:98:
                    a0:47:70:e2:9f:e9:39:54:85:bf:6e:9b:49:16:af:
                    fb:16:60:f0:6a:94:e5:1f:9e:ae:7f:43:45:fe:c5:
                    66:24:92:35:50:f9:ae:fe:d5:1e:5b:a0:af:d8:ce:
                    5c:12:41:f8:e2:e9:b8:8a:66:9d:d7:c2:16:18:5d:
                    14:2f:5b:c5:e2:5d:0f:ee:18:a5:f0:62:25:5a:7c:
                    07:7e:5a:ac:af:9e:29:68:3a:5b:e5:d2:a2:fc:a8:
                    bd:24:f9:54:97:bb:f5:eb:86:24:1c:f2:05:14:63:
                    ff:af:f1:9e:c9:2d:9f:f7:19:35:47:2e:1e:7d:58:
                    22:d7:0f:e4:6b:ee:20:cc:7a:2a:6f:61:81:33:4f:
                    1f:77:04:86:22:24:58:93:7e:d0:d7:f8:08:cb:f0:
                    ae:3f:90:ed:9f:0d:1e:03:1b:af:fb:f7:fc:d8:41:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:28:B3:DC:6F:96:E2:72:92:C1:1D:6B:D7:3F:94:54:CF:EC:0D:AB
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:bf:13:d8:b9:84:ad:df:0e:f6:ec:af:a1:cf:aa:81:8a:
         13:bc:09:b4:66:02:77:5d:4c:aa:d4:6b:51:b0:14:6f:d3:b5:
         54:94:f1:42:29:54:d2:ad:f6:5f:4d:9d:5c:3c:1f:15:37:5a:
         00:70:00:b9:da:38:f3:4c:00:99:0f:50:0c:5b:66:d6:64:7c:
         ee:b6:99:6b:bc:a4:d1:78:ae:07:74:09:b8:8a:be:c6:ab:38:
         ce:d5:33:89:1e:9d:54:30:e6:32:ab:69:76:96:57:38:58:dd:
         72:0a:82:af:4a:70:46:46:5b:df:ab:b5:5e:2b:c3:ac:1b:50:
         8f:87:60:bd:f9:da:ea:ac:5d:26:22:6e:9b:b7:92:8a:17:4b:
         b4:c3:ba:77:92:cc:5a:c7:26:b4:41:5b:7d:78:ce:0d:b0:5a:
         b9:96:c0:3f:2a:89:82:b3:df:3c:79:e8:db:d8:7f:0d:be:01:
         b3:36:81:50:44:c8:2f:9b:0e:7c:a2:3b:00:09:e7:32:f3:78:
         2f:18:4f:e9:2f:90:b3:1e:32:39:9a:38:27:4b:74:54:08:26:
         72:74:15:3d:fb:2f:e0:69:90:03:d1:e6:b9:53:95:e7:7f:80:
         a0:c9:48:34:0e:1d:b8:3a:98:61:20:cd:86:fc:36:ed:d7:06:
         0f:32:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:05 2024 by rpki-client on console-ams.rpki-client.org