Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File:                     nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier:          bR9R/mI7sB8PMfBSQI+DUMo2OpzN5teED50KyfZRVMQ=
Subject key identifier:   DB:2A:06:51:8B:CB:9B:1C:FB:50:13:61:50:E4:49:86:25:48:6F:35
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer:       /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial:       018F8748AD414FCAF7237F14A0C3A012BD21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number:          0577
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: 7E-S6HHR_p7xdUtQ5SGVTH0ouNM.roa (hash: NjlfCHmzMrjcrt6yP1FGwmnxI5pOcyz3Ru1fnD+9Rs0=)
                          2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: fOem4/fGLLje4+DxzG36CTELpFF9gZ8DXzcvQDsWPPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ad:41:4f:ca:f7:23:7f:14:a0:c3:a0:12:bd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=db2a06518bcb9b1cfb50136150e4498625486f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:06:76:a8:70:32:24:89:dc:c8:95:f0:6f:
                    06:2e:55:03:48:5c:c5:fd:46:c7:73:a5:83:26:c4:
                    b2:33:4f:6b:8b:7d:ec:72:64:d5:db:11:c2:57:58:
                    84:10:2a:16:d2:c3:1a:1d:06:74:b4:19:ab:c2:17:
                    f1:08:0e:6e:35:37:f4:7f:61:14:e4:f3:24:cf:dd:
                    11:30:5a:d7:fc:04:67:e5:f9:d6:26:dd:eb:43:11:
                    ba:ca:f6:b3:df:5b:b8:d8:e5:2b:85:5c:7f:47:e4:
                    6b:d0:9b:d9:d4:5b:4e:10:b4:6f:68:35:8f:24:70:
                    ac:07:3c:22:40:64:35:b5:c2:b1:34:51:80:87:e6:
                    c9:5d:df:a4:20:9a:0b:a6:e7:34:24:1c:e8:66:f5:
                    4e:01:49:a5:e1:7d:d1:0e:9c:6c:58:b5:17:6b:ff:
                    61:27:20:a4:1d:26:a6:39:9d:ae:7b:56:b6:b8:1e:
                    44:e4:ca:5b:b1:7c:7d:17:8b:6f:6d:f8:b3:db:22:
                    1f:5a:0a:e1:61:b6:70:ee:78:8a:32:40:a7:fe:d1:
                    02:66:4b:60:8d:62:dd:97:1d:ff:21:38:13:5f:3d:
                    a9:02:f9:7a:4b:cd:be:97:55:60:84:f4:e3:56:d4:
                    bc:0e:5e:74:fd:ce:dc:9b:b0:79:d2:dc:76:20:2d:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:06:51:8B:CB:9B:1C:FB:50:13:61:50:E4:49:86:25:48:6F:35
            X509v3 Authority Key Identifier:
                keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:2d:bd:73:98:02:f0:d3:d3:92:9d:5a:d4:45:7e:04:57:
         53:83:15:35:c8:82:93:16:a9:b9:85:d9:1f:f1:db:c6:75:25:
         ee:64:eb:55:a0:e2:a5:b4:06:5f:14:9c:f9:6d:17:ea:d4:bc:
         e2:e1:c4:b8:b3:45:c8:6e:b6:f9:e8:8b:cd:46:9f:e7:f7:da:
         df:bd:ac:94:ef:81:a1:a8:1b:44:bf:08:4e:d6:5b:97:26:ae:
         71:a3:e9:f2:5e:01:f6:fa:11:21:4e:53:30:30:54:9a:21:40:
         a5:42:08:d0:78:b5:24:f4:22:76:a2:a8:b0:67:af:da:c6:80:
         54:c2:fb:86:e1:8e:5f:0b:46:ef:fd:89:e0:8e:a5:6d:9c:bc:
         a8:53:a4:c5:58:77:d6:0b:d8:8c:9a:c7:d9:26:6b:ed:3a:2c:
         74:73:0d:f8:8d:36:d9:42:03:cc:42:7f:04:71:08:2e:fc:a0:
         20:ab:b8:75:c9:2a:66:87:cc:68:45:1d:f2:a2:63:b9:99:98:
         c5:f3:e7:b7:07:d0:40:c1:dd:9b:86:9b:46:78:18:80:95:e0:
         0f:6d:bb:c2:1c:92:2c:48:13:89:2c:1d:31:1d:35:84:ee:31:
         a1:5b:f5:ac:f3:28:d9:29:0d:0c:cf:d3:7d:80:eb:29:92:13:
         e6:33:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:02:13 2024 by rpki-client on console-fra.rpki-client.org