Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File:                     NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier:          uwjiXRSeR8dCMktLAcsaVmam8A/+t1SBKHx12kobx6E=
Subject key identifier:   53:A7:E9:7A:B1:4C:DD:6C:60:18:EF:F3:CC:81:5F:D5:61:1D:A8:6F
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer:       /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial:       018F6B2D165CFBE27F3B06F1A872119AF1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number:          116F
Signing time:             Sun 12 May 2024 05:01:07 +0000
Manifest this update:     Sun 12 May 2024 05:01:07 +0000
Manifest next update:     Mon 13 May 2024 05:01:07 +0000
Files and hashes:         1: 1-dBWc-gjB6UFJ9qKVrHu2ayToSs.roa (hash: B+t4UKZ5yoCDLEwgMpcdYCeJmu6Mxq0A3H26XanQ8WM=)
                          2: 8X80FMCDyoFkLCbC5l1YtdWAyBE.roa (hash: dVtUfRg6vAbM2BbJSrh3zX5rpcOVoDwi3DEXsahX4DE=)
                          3: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: AFbEaZHhDsCgWo8D8TcC6Q7yRePQPGW0XyeVJeJzpPg=)
                          4: NGFpI09iUmrJ91Y3MJnGVBst-g4.roa (hash: e/w6E9kjdPyHtvuAlroCEQNqnpwy0RTGRByFojmRUyY=)
                          5: Xz0wI_pCJDd8UUw9CH5KX_N2MDg.roa (hash: /P4xOvM5B/PHo+LRVBhU15slC6fDxyjhv0TWk60KuMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:2d:16:5c:fb:e2:7f:3b:06:f1:a8:72:11:9a:f1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
        Validity
            Not Before: May 12 05:01:07 2024 GMT
            Not After : May 13 05:01:07 2024 GMT
        Subject: CN=53a7e97ab14cdd6c6018eff3cc815fd5611da86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:e5:ec:5a:b4:87:3d:60:4a:0a:89:cc:0d:
                    a0:16:b1:0f:e4:62:31:e0:dc:b5:a7:77:c5:74:45:
                    23:02:b5:aa:55:94:ba:cd:a2:b7:e5:39:6e:a0:e2:
                    33:37:15:d6:3f:0f:ef:ae:89:c4:f0:44:82:c7:f6:
                    4a:5e:98:4d:fd:c3:6e:cc:9f:e9:f0:21:d0:f2:04:
                    6f:2d:4b:6e:d3:4e:f9:d6:49:a9:64:2a:ac:53:67:
                    d6:af:c0:e5:6c:cf:47:43:b2:d0:47:f3:20:5b:8c:
                    f2:8d:dc:c0:e8:34:a9:d4:9e:37:f0:06:17:b0:29:
                    e5:d1:f2:25:77:21:24:b7:b3:5e:84:80:84:b4:82:
                    72:33:75:30:51:d2:8d:99:6e:12:52:fe:62:88:8c:
                    82:d0:1e:73:24:f0:fa:3b:66:d7:20:d5:76:a8:97:
                    c7:47:cb:1f:21:d0:f3:80:cd:bf:1d:ee:d6:d3:ae:
                    6a:ad:50:50:7d:b3:fb:e2:cf:0a:64:1a:96:6e:13:
                    e3:ce:71:84:80:75:06:4f:be:c8:d7:41:cb:56:35:
                    41:35:10:c6:6a:24:73:db:b1:6b:11:31:fe:23:79:
                    7f:16:c7:62:90:e9:ca:7e:a7:1e:f8:20:64:13:7b:
                    47:3b:5a:ac:9e:75:9f:f4:f6:0e:fd:76:2f:56:b0:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A7:E9:7A:B1:4C:DD:6C:60:18:EF:F3:CC:81:5F:D5:61:1D:A8:6F
            X509v3 Authority Key Identifier:
                keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:53:96:9d:c8:ba:e9:f9:7d:e5:4b:36:a4:77:5d:3d:12:32:
         7a:66:52:d7:bf:fe:b7:49:97:2e:ef:eb:b1:9d:80:9d:2b:f8:
         67:8d:37:98:15:f2:9c:1c:5a:29:ba:4b:74:50:cf:13:61:60:
         60:a1:03:66:9a:34:94:88:f6:31:f5:ee:10:11:c0:1e:a3:93:
         05:91:4d:11:3b:4f:46:3a:dc:fb:55:29:95:b6:f0:53:a7:a5:
         6f:4a:9f:c9:cd:b3:38:fd:32:96:e5:fa:ad:f0:b9:ff:28:56:
         5d:9f:f5:43:de:ef:6f:15:4b:d5:94:20:5e:b0:c7:f3:8f:0f:
         3b:b6:55:07:1d:26:d7:0e:f1:c7:f6:c4:0c:64:b7:05:18:d0:
         85:03:3a:14:bc:f8:40:23:09:79:4c:57:79:86:d5:8a:2c:71:
         c9:ec:7c:76:44:b1:6b:18:76:f3:6c:34:ce:96:8a:40:75:a3:
         26:f6:a6:67:b8:ec:b7:36:51:46:90:9f:c5:47:ba:4f:fe:7e:
         42:d0:15:c6:30:de:2f:38:2d:24:25:e1:ce:dc:6c:57:d1:c4:
         d3:be:15:92:72:f1:35:1b:db:57:1b:ae:1f:ba:bd:62:72:ba:
         e5:bc:65:9c:1c:a1:34:37:9f:95:75:23:2a:ed:c4:24:20:3c:
         66:3c:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 12:31:36 2024 by rpki-client on console-fra.rpki-client.org