Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File:                     nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier:          ooJVpv2mz8LoHZHBTyZALrhHTIyZzo/GC1RKPXa6FI4=
Subject key identifier:   7D:B8:9F:18:72:B9:0D:4C:2B:A1:E7:70:60:79:F0:ED:E8:7C:BD:8B
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer:       /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial:       018F874AA2FBFAFAFBEBDFD2AB46B6CC4FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number:          0C1B
Signing time:             Fri 17 May 2024 16:02:46 +0000
Manifest this update:     Fri 17 May 2024 16:02:46 +0000
Manifest next update:     Sat 18 May 2024 16:02:46 +0000
Files and hashes:         1: KAjIjPLl1mEkUkLPshebZAkITBY.roa (hash: /Gqf2qhz7oNuwIiuJ9u+BuZiRkLS1wLNMfRkwey2n3s=)
                          2: LQa8IoHW0dU6Q14-RNUQVEkB_28.roa (hash: +frmke3f8r+aTY035plKDH8i+yr95ckPiaCtf3qIMBk=)
                          3: ObkUnmrSN2khQmfM8jY7x8JaiFQ.roa (hash: uzUQz65FHnhpwrX9x/lT7ZA3mjBk3kq8ljug3Ai6xk4=)
                          4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: 1lSmNhbHeDm65XpuBXhd1O6lXWZ7YwAFk+u5gyXagHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a2:fb:fa:fa:fb:eb:df:d2:ab:46:b6:cc:4f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
        Validity
            Not Before: May 17 16:02:46 2024 GMT
            Not After : May 18 16:02:46 2024 GMT
        Subject: CN=7db89f1872b90d4c2ba1e7706079f0ede87cbd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:7e:65:4c:2b:42:18:4c:21:4e:0f:24:10:
                    02:9a:4c:8d:36:91:1c:98:b1:59:3b:05:28:8b:c6:
                    95:c7:7e:c2:bc:99:ca:a3:30:66:fe:74:ae:02:42:
                    10:98:a5:c3:cc:f3:a5:71:f7:c2:35:ce:68:21:f5:
                    a1:59:d4:98:ce:e8:2c:bc:aa:fe:3f:8e:af:ee:31:
                    20:5f:65:5c:49:c8:cb:32:67:64:06:05:f2:d3:0f:
                    e6:4c:63:e8:00:23:ff:ae:c6:07:63:67:3f:ee:dc:
                    60:69:ef:28:8a:27:5d:d9:d4:0b:bc:b4:4f:0e:38:
                    f4:73:e9:19:07:f2:a5:07:0d:2f:37:31:ba:bb:75:
                    70:8c:82:3f:45:7e:23:ca:4f:34:46:1b:5e:8c:8d:
                    d3:81:32:15:85:7b:7f:19:53:b7:af:44:b4:00:1e:
                    d1:2f:38:ce:aa:32:c1:29:38:c2:49:95:f7:f9:be:
                    06:a1:2b:ab:a3:cf:62:f1:4e:4a:21:e6:c4:dd:98:
                    16:d1:25:d9:46:dd:d1:b9:6a:53:4a:3a:6b:60:06:
                    12:b5:5f:77:fc:8a:36:c3:1a:55:47:f7:a2:c1:4e:
                    fe:9f:ad:eb:55:45:a4:9f:1b:4e:43:92:42:96:0a:
                    ad:95:56:f3:1e:17:dd:f6:8d:c5:95:9a:7a:cc:ed:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:9F:18:72:B9:0D:4C:2B:A1:E7:70:60:79:F0:ED:E8:7C:BD:8B
            X509v3 Authority Key Identifier:
                keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:18:fb:fb:d7:27:bb:f2:5a:72:c9:c9:e6:26:89:f2:e7:
         de:c3:f1:de:ae:c2:ce:e2:f9:9f:d3:3e:c9:2e:f2:e4:e3:61:
         7a:ba:62:60:4a:be:0d:02:da:ce:96:63:33:54:ec:41:23:4a:
         9a:c2:90:b5:e3:a7:50:2a:5e:18:1a:7b:83:29:e5:52:1b:73:
         93:00:5a:3b:6b:13:fc:d4:1a:b7:cd:fe:bc:48:ae:58:d4:73:
         f6:7c:a0:c6:dc:bc:d2:5c:14:87:d2:41:c7:f3:55:70:65:b7:
         51:16:91:89:1f:bf:07:33:82:fe:06:4a:6a:3f:b4:eb:0e:70:
         7b:5a:e3:0b:90:e8:49:57:88:a4:ec:a5:de:65:dd:e1:9b:55:
         35:71:d9:c0:a9:f5:eb:2e:35:2f:17:b3:e1:98:61:3f:0c:28:
         98:52:e3:fb:71:31:3d:3e:5e:6f:51:8b:e2:fb:bc:bd:ea:c3:
         af:27:b5:8e:ba:6a:5c:84:cb:2b:85:75:2a:b7:e7:71:08:8a:
         68:93:ac:31:fd:ee:de:68:a7:a2:3b:da:0a:41:c4:bb:06:3e:
         9d:97:dc:95:77:b7:a0:ae:06:2e:a7:77:92:3f:92:9b:69:40:
         9b:94:7a:b2:8f:66:db:a2:ff:a0:1b:1f:d2:2e:ac:e7:7e:18:
         2f:dc:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:33 2024 by rpki-client on console-fra.rpki-client.org