Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File:                     nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier:          MuQ/tZqzAG6heXSuaGKYxECGdhVxBQVnDuYfhm2+pUs=
Subject key identifier:   D2:FC:C7:0B:90:51:50:B1:1C:01:E2:D7:AD:0E:08:8A:D3:7F:2A:2B
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer:       /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial:       0190298232C2A5011D8FCB8445C551E9E27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number:          11CD
Signing time:             Tue 18 Jun 2024 04:01:56 +0000
Manifest this update:     Tue 18 Jun 2024 04:01:56 +0000
Manifest next update:     Wed 19 Jun 2024 04:01:56 +0000
Files and hashes:         1: TOjF_EMwfYi8gZOM8JzTccH8l0M.roa (hash: 3DgAupwbmnUPDztrT2+zrZEZXdXe9TssQviPFXSzdsY=)
                          2: lXIDFG1AP_kexA_cJaDNRNW6Whk.roa (hash: lIVPeSP4ugNBKBDxS4PMg+bYQkYtMEa8QTePFcJhq48=)
                          3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: 8q0QQhH5Ttja4xgoJ5H6pk58V6N12HSxkcA/pXVRGWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:82:32:c2:a5:01:1d:8f:cb:84:45:c5:51:e9:e2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
        Validity
            Not Before: Jun 18 04:01:56 2024 GMT
            Not After : Jun 19 04:01:56 2024 GMT
        Subject: CN=d2fcc70b905150b11c01e2d7ad0e088ad37f2a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:5d:96:dd:e0:31:58:aa:b0:a3:cc:b2:f2:
                    d0:35:c2:21:d6:0a:63:df:9c:de:d1:50:78:89:17:
                    a3:91:c6:1b:3d:d7:44:4c:54:12:00:f3:c2:b4:98:
                    10:78:a1:16:df:63:80:6b:a0:1e:c6:29:6e:cf:2b:
                    13:d4:50:9f:2c:8f:50:d2:dd:1f:ef:97:6e:de:a0:
                    50:da:08:dd:54:a2:13:71:97:8e:75:a3:cb:94:6a:
                    fb:8c:d7:49:0e:56:60:a5:8f:71:ab:5b:c5:23:3c:
                    3c:6a:86:f2:30:71:9c:e2:b9:0b:96:4b:81:54:8d:
                    ed:d6:c1:6e:c6:40:ac:8b:b6:3b:fa:62:4c:6a:15:
                    b0:0f:89:67:15:f4:17:6c:9d:3e:af:65:63:1c:29:
                    85:4b:e2:6a:6e:a0:0e:91:83:4c:20:ba:5b:1d:22:
                    c4:33:3c:28:15:21:7e:ed:24:80:bb:2b:b8:73:4f:
                    d7:da:62:53:f2:c8:c0:b7:05:b6:eb:bd:d7:30:2a:
                    8a:28:92:19:ef:59:6a:4f:90:6d:e9:f8:ba:f3:6d:
                    04:f3:f4:c8:da:6b:b2:47:bf:32:70:c8:fd:b5:bb:
                    9b:99:28:c4:37:b4:b0:dd:37:d9:bc:30:f2:9d:6c:
                    7e:88:31:34:3e:97:c9:4d:1e:05:04:64:20:66:81:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FC:C7:0B:90:51:50:B1:1C:01:E2:D7:AD:0E:08:8A:D3:7F:2A:2B
            X509v3 Authority Key Identifier:
                keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:ac:81:83:c0:42:aa:1a:5d:2d:1b:f8:24:80:56:82:f3:
         79:82:c5:af:94:e7:c0:3f:37:0b:1f:5b:8a:b5:f2:a0:f1:b6:
         9e:45:a2:d7:42:bf:75:03:e6:7c:33:77:88:b1:d0:20:ab:87:
         52:ec:d6:6f:05:87:b6:58:aa:15:36:c9:99:ac:12:20:e3:84:
         08:6c:9f:ae:b6:2d:28:96:7c:7e:32:8a:03:32:83:52:b0:10:
         e8:3f:58:e9:06:ab:fc:ce:82:a5:43:74:37:89:5c:34:ec:8c:
         20:b4:74:b0:94:fc:d9:99:34:9d:09:97:af:7e:23:6a:82:14:
         2a:d0:8d:ee:22:28:a0:9f:c4:a6:4d:8a:9f:38:08:80:d0:e2:
         ae:8a:ce:9a:51:df:a2:8a:f0:92:e5:2c:bb:86:ad:bf:30:e4:
         12:1e:cb:97:14:66:3c:16:2a:68:48:66:61:6d:20:00:22:5d:
         2d:34:cf:55:52:5c:29:ed:59:d8:6e:ef:5b:a6:2e:05:d3:12:
         e9:18:6f:d1:b1:e3:d3:aa:b5:5c:92:7d:39:1f:c4:bd:b8:1e:
         1a:23:be:81:0a:77:cd:ca:49:dd:9a:56:73:0d:09:c7:09:40:
         bd:96:61:ba:0e:99:74:cb:41:06:14:dc:5f:85:85:54:49:88:
         5e:7a:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:20:47 2024 by rpki-client on console-ams.rpki-client.org