Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File:                     nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier:          xRxd3kIj045eryxw31pTVj5OkPBi02te+RFl7j1d0wE=
Subject key identifier:   69:77:62:33:88:F9:13:45:7D:CA:03:9C:B9:B8:8D:F1:BB:46:81:5A
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer:       /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial:       018F86A3E68E916FB4950CEB9BC2C233E388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number:          0A4B
Signing time:             Fri 17 May 2024 13:00:39 +0000
Manifest this update:     Fri 17 May 2024 13:00:39 +0000
Manifest next update:     Sat 18 May 2024 13:00:39 +0000
Files and hashes:         1: NIYX35bpMwAJ3HZJzo3t6s9eeO4.roa (hash: z4OfIlXqlAz16dL0dJqh5pOqIS9ftGoxK6M48YXIiD8=)
                          2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: H7ZfRs0HoyWEY/r2YiyyGxNCSw+3tixv8AaKjaMnho8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e6:8e:91:6f:b4:95:0c:eb:9b:c2:c2:33:e3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
        Validity
            Not Before: May 17 13:00:39 2024 GMT
            Not After : May 18 13:00:39 2024 GMT
        Subject: CN=6977623388f913457dca039cb9b88df1bb46815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:7c:ca:12:81:e4:91:7b:e7:6d:3e:80:20:
                    ed:3a:27:a1:61:5e:11:58:72:ce:93:d9:a8:94:6e:
                    54:46:17:75:9a:48:0d:d1:f1:9f:a1:e9:be:56:c2:
                    be:58:4c:a9:92:c8:28:1b:55:ea:c3:48:bb:cb:ae:
                    6c:8a:96:be:9f:c8:7f:36:68:a9:16:66:63:1f:69:
                    f2:0e:1c:cf:20:2c:04:75:43:04:37:d6:f6:73:ae:
                    4d:37:94:d5:aa:d3:6b:0c:c1:32:5e:b3:e2:a2:0c:
                    02:e8:dd:f7:57:af:fd:0b:45:b0:e7:36:75:d5:f5:
                    ba:43:71:f1:87:72:03:73:c1:95:5c:d5:d0:8e:69:
                    ef:f7:86:ba:47:38:99:c8:8d:3f:bf:c3:30:e8:67:
                    ea:07:48:f7:84:72:cb:97:16:b6:42:c3:b5:cf:a3:
                    c7:e4:8a:c0:02:74:b9:01:1d:95:05:22:b0:76:f9:
                    2e:5d:ec:fd:fb:e2:d4:33:15:2e:fb:5f:c9:ff:dc:
                    fa:6b:75:7e:ec:aa:50:84:c8:b9:8b:b6:3b:2a:78:
                    2c:e4:30:de:5c:b3:63:55:02:56:d3:b6:d3:67:49:
                    32:74:34:6c:57:75:e6:ba:7e:9c:27:a3:b8:94:50:
                    61:e0:90:b9:a8:c5:c7:14:68:c4:9b:9c:c0:1e:55:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:62:33:88:F9:13:45:7D:CA:03:9C:B9:B8:8D:F1:BB:46:81:5A
            X509v3 Authority Key Identifier:
                keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ee:2a:b8:ac:16:b3:d7:7c:41:18:a3:b6:ac:c1:92:e2:0e:
         db:1e:d5:e5:ed:7c:72:41:87:ca:c1:36:4a:e3:6e:12:42:47:
         ec:24:7e:8f:f4:16:0d:16:c2:14:d8:7f:8d:4b:88:c4:fb:04:
         4c:84:0c:3e:93:19:c2:d5:41:ce:26:ae:96:d1:89:b5:ab:2d:
         57:7c:7f:69:df:0a:8a:68:61:8e:b5:82:fb:de:e4:ba:8f:a8:
         15:13:af:9f:65:43:39:fc:59:6e:ad:55:12:72:ac:bb:94:d6:
         f1:f0:7f:6e:4b:cc:fa:4a:6f:af:26:59:8b:ab:bb:09:a6:6a:
         1f:01:40:69:66:01:51:de:6d:42:df:80:c3:a4:d8:b1:1d:31:
         1c:5f:15:ef:30:27:35:ec:00:be:6d:9e:62:39:61:88:b6:b8:
         d5:4f:c3:74:78:19:6f:d8:1b:b5:69:f3:0e:f9:02:9b:c4:7b:
         a5:5f:69:98:78:61:bf:d7:3e:a8:b7:a5:d0:c6:6a:39:79:3e:
         56:f7:43:e9:14:9b:b0:c5:ac:b5:72:56:ea:b2:21:a7:2f:9a:
         60:5d:71:b8:9c:ac:a1:e5:59:0a:e4:c2:de:f6:07:cb:18:b5:
         ed:b5:dd:37:a9:7e:e9:63:0e:fc:ce:fc:51:ea:c3:18:f8:51:
         3a:82:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:08 2024 by rpki-client on console-fra.rpki-client.org