Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File:                     nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier:          L5jKs074JP6hvCeOiyuP6AawzPV4URuKByOisYlHXo8=
Subject key identifier:   08:40:95:3C:9F:B2:F4:71:8B:E7:5C:9A:41:F3:3A:C1:8A:3A:C2:32
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer:       /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial:       018F877F4D9886A5770BA8561360CD7B5CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number:          0133
Signing time:             Fri 17 May 2024 17:00:18 +0000
Manifest this update:     Fri 17 May 2024 17:00:18 +0000
Manifest next update:     Sat 18 May 2024 17:00:18 +0000
Files and hashes:         1: ZXdIvBTI-IdKjiomddQAWbnLa80.roa (hash: E37cbmEY/FwFwBGHU5Hs5d7Zn0Vba5Xx5/FZNLnsb0A=)
                          2: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: Xi0gucJ04dazsSjh4woKM973ABxJEX0SdRvaMQsnkbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4d:98:86:a5:77:0b:a8:56:13:60:cd:7b:5c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
        Validity
            Not Before: May 17 17:00:18 2024 GMT
            Not After : May 18 17:00:18 2024 GMT
        Subject: CN=0840953c9fb2f4718be75c9a41f33ac18a3ac232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:48:56:54:ec:61:af:08:8d:89:e6:47:6e:
                    8f:8e:43:e8:76:b0:42:41:50:45:18:fd:ed:31:5b:
                    eb:c0:7e:03:98:98:44:c5:68:ef:8f:f8:84:d8:97:
                    49:34:4a:ca:c0:ea:06:71:ba:4e:4f:0e:27:2c:f6:
                    1e:67:f0:ea:70:d0:7b:0d:7f:be:07:b2:6f:5a:6b:
                    50:3d:5f:2c:9c:78:fd:32:a1:cd:42:32:b7:7f:c4:
                    5f:bf:23:0f:42:6e:b6:3b:47:38:b3:7c:a3:27:43:
                    79:9f:b4:c3:8a:c2:ae:43:75:d1:79:d3:36:f2:ec:
                    40:ae:25:36:df:c7:8c:aa:39:16:10:ef:b3:7f:36:
                    c4:37:42:e7:19:86:97:64:e6:54:7c:36:77:47:61:
                    74:76:6d:49:31:f7:d9:38:14:63:a2:86:6f:69:ac:
                    b9:de:47:44:65:47:8d:b4:ef:9f:7c:fa:d7:70:58:
                    02:a8:8e:78:c4:f2:23:f2:6d:c4:df:4a:6b:0b:72:
                    1c:db:68:61:6f:e8:4c:e2:04:3a:5b:c2:92:5c:4e:
                    6e:a4:db:1a:82:6c:df:33:6b:8a:fb:3d:f8:fb:49:
                    80:55:d7:9a:0f:09:c1:8d:cd:87:39:a9:24:2f:df:
                    1b:a6:c7:6b:15:85:25:27:c2:c8:c7:2e:05:cc:12:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:95:3C:9F:B2:F4:71:8B:E7:5C:9A:41:F3:3A:C1:8A:3A:C2:32
            X509v3 Authority Key Identifier:
                keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:91:62:df:5a:93:0b:96:2d:1b:a8:60:54:4d:c8:d2:66:
         34:6c:15:dd:02:a8:53:a5:20:b6:9f:73:ff:3e:e2:f3:f9:d3:
         f3:7e:6e:12:ce:f8:ab:ee:8e:21:93:2e:15:0e:d9:32:53:49:
         9e:c3:d4:16:53:fa:c2:d2:42:cb:cc:30:44:18:2c:ae:49:c9:
         13:92:86:93:48:21:0d:cd:80:a7:fe:f7:44:ba:76:1c:ea:7a:
         ea:a3:44:df:5d:67:55:50:90:80:1a:ca:ed:ce:9f:91:83:24:
         8a:7e:7c:b2:31:ac:2e:ee:f2:31:3c:54:e0:e2:da:7f:13:65:
         9c:2b:b4:4d:b8:40:c7:bb:98:d9:05:84:f3:cf:82:ab:1d:9f:
         90:05:f3:16:68:aa:ab:0a:b3:da:cc:69:15:e9:1c:db:cd:28:
         cc:39:30:28:40:e1:8d:77:1a:33:7f:79:e9:37:21:a9:f6:a7:
         b5:b0:3f:84:1d:42:d6:41:ef:a0:d3:8f:05:16:d6:9c:1e:ad:
         ba:7c:a2:a4:29:1a:63:2a:77:41:35:58:46:cf:a2:8b:64:43:
         69:49:36:66:eb:66:e8:80:57:5f:4a:ee:8c:aa:31:40:26:01:
         28:52:fa:57:6d:f7:b8:c0:28:7c:f7:16:a6:67:8d:b1:33:c4:
         4e:e0:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:18 2024 by rpki-client on console-ams.rpki-client.org