Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
File:                     NIVmBh42jK_xiBviusZzff08Hbo.mft (raw, json)
Hash identifier:          jRcCL81nZr4Cjxnsu07vfequn8z1wEHk4U+4TTKsgKM=
Subject key identifier:   15:47:64:7A:E3:38:91:88:87:EB:93:74:01:82:74:62:AA:68:FF:35
Authority key identifier: 34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA
Certificate issuer:       /CN=348566061e368caff1881be2bac6737dfd3c1dba
Certificate serial:       018F874A760DF61C2701BB16EB3ECA98B761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:35 +0000
Manifest this update:     Fri 17 May 2024 16:02:35 +0000
Manifest next update:     Sat 18 May 2024 16:02:35 +0000
Files and hashes:         1: 4EPwSBuCr2Myig3q53sADtC5kXE.roa (hash: Y2/KvQUwGukvpm5ANnSg8bOhNs6SjaEKEdLM/XvXOpM=)
                          2: NIVmBh42jK_xiBviusZzff08Hbo.crl (hash: BLeXMMZDBu/cbr6mK6wpFIYrJ9i5th4tdh1OJ2lW4cQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:76:0d:f6:1c:27:01:bb:16:eb:3e:ca:98:b7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348566061e368caff1881be2bac6737dfd3c1dba
        Validity
            Not Before: May 17 16:02:35 2024 GMT
            Not After : May 18 16:02:35 2024 GMT
        Subject: CN=1547647ae338918887eb937401827462aa68ff35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:57:7d:4f:18:8e:be:7f:11:d3:98:09:3e:
                    64:22:a9:1a:23:1f:63:0a:f7:09:c0:a8:d1:cb:c9:
                    8f:6e:9a:d2:16:f1:0b:2b:9f:eb:2d:30:e5:3b:bd:
                    79:0b:0c:39:e3:20:ce:50:90:13:97:fe:71:21:3f:
                    1e:80:99:b5:d8:fe:cf:46:a4:6f:21:18:06:d1:af:
                    67:0a:cd:e3:21:a2:82:19:2c:19:d2:1e:96:2f:5e:
                    00:99:aa:57:9a:67:8f:c6:49:35:75:59:d7:a2:f7:
                    c4:c3:b7:ad:ea:8a:b9:3b:91:b8:d9:97:56:90:10:
                    0c:6c:1a:28:ee:14:de:67:6e:79:1c:75:ff:b0:aa:
                    46:2b:c6:26:0c:e4:45:bc:b0:9f:d4:80:94:d4:11:
                    42:0e:71:58:4d:6a:3b:70:13:cf:99:80:df:37:bf:
                    4c:39:54:4a:1f:db:6f:d0:3b:6b:7c:e8:65:20:ff:
                    93:95:d5:a7:fb:aa:32:2b:7a:ff:c9:41:b1:3d:6c:
                    70:d0:41:ea:2b:1b:a0:c3:de:9d:11:78:09:cd:50:
                    08:32:2d:28:6e:58:8d:84:f5:32:01:bf:3a:07:d0:
                    93:06:eb:19:27:c8:8b:3f:b2:c1:a3:d7:5b:f2:6f:
                    92:69:65:13:fa:c4:03:5f:00:1d:b3:68:6f:02:04:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:47:64:7A:E3:38:91:88:87:EB:93:74:01:82:74:62:AA:68:FF:35
            X509v3 Authority Key Identifier:
                keyid:34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:31:c5:60:2b:bb:7c:9a:b9:2e:71:2e:f3:b2:c9:59:f2:10:
         3b:88:da:7e:60:76:c7:84:52:d4:21:dc:4c:ec:bc:22:f9:da:
         1b:dc:89:56:2d:41:25:c3:2e:e3:81:1e:9b:2f:3c:d4:fe:cc:
         dd:b2:c2:b8:f6:3a:ce:2c:6f:09:4e:8e:21:d4:40:d6:2c:51:
         ef:76:d6:e6:85:63:6a:fe:4e:2e:75:a6:1a:5c:d0:b7:e2:99:
         8e:53:8f:de:5e:6c:0d:f0:16:4a:ad:c8:0b:89:38:67:74:13:
         07:6b:6b:d5:a8:ae:2b:37:56:1f:9c:cd:ab:e0:7a:c2:50:c3:
         81:6a:ab:d6:c4:b0:c2:d5:66:84:38:73:85:84:66:96:6b:fc:
         c0:4e:3d:ef:21:52:89:fb:3d:5a:af:ee:92:cd:8f:c9:f7:14:
         bd:b8:5a:cb:dd:3d:d2:3c:47:8f:3a:4f:db:40:fe:c1:81:03:
         26:a4:2c:5b:43:19:11:33:5e:1d:63:99:d9:a9:7f:a5:13:97:
         a5:d7:2f:b0:fb:71:c0:0f:5a:32:37:07:c8:33:91:bf:e2:3c:
         c1:4b:ca:27:b2:ff:4d:36:a6:52:bf:79:4c:2b:36:d3:cb:9c:
         e8:de:00:63:f2:c3:3b:cb:4c:0d:75:42:fd:b0:c4:2a:17:11:
         6b:4f:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:12 2024 by rpki-client on console-ams.rpki-client.org