Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File:                     nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier:          iv6i1WI9WsUMXfQs83BOG2Fxrc+z3/sFSba7/7pGtyc=
Subject key identifier:   96:67:A0:DA:B3:24:5C:FD:15:C0:20:1B:79:35:6B:71:C1:86:84:C2
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer:       /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial:       018F877F2B2594DD58881E8083FE3816B5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 17:00:09 +0000
Manifest this update:     Fri 17 May 2024 17:00:09 +0000
Manifest next update:     Sat 18 May 2024 17:00:09 +0000
Files and hashes:         1: G5pFJaTuaYcrShNrsSUbtnWpdr8.roa (hash: LJkgJmknQpa5rr5/YNP7g1IGh/1f1rqZltFU8qXIg14=)
                          2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: bcfSKmBVy0ZTEyrWA0IFK9mesQXbs9HZzd9ntaBu9Vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2b:25:94:dd:58:88:1e:80:83:fe:38:16:b5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
        Validity
            Not Before: May 17 17:00:09 2024 GMT
            Not After : May 18 17:00:09 2024 GMT
        Subject: CN=9667a0dab3245cfd15c0201b79356b71c18684c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:59:22:ce:21:73:bc:63:45:7b:84:b2:2a:
                    f2:e4:b3:23:06:f6:1d:c7:33:3f:4b:39:92:9b:0b:
                    67:84:ee:c9:3d:83:bb:c4:b1:23:15:33:7e:ad:49:
                    cd:a3:a9:a8:3c:88:9c:e6:68:60:02:5f:8c:9b:11:
                    92:33:0a:56:c4:2a:50:65:fe:0d:4c:0c:32:b2:99:
                    b3:f9:3e:d5:61:1c:21:14:8f:8e:04:5a:b5:0b:18:
                    88:b4:a6:d2:e3:dd:24:95:14:cb:b9:b3:fa:d4:c0:
                    da:02:53:04:4b:37:70:41:46:63:4c:be:4b:3e:d5:
                    23:cc:73:e1:d9:cd:61:87:dc:fc:45:d4:63:06:91:
                    2c:c9:58:9b:f4:d1:08:63:67:f5:bd:f3:41:7d:77:
                    67:ff:9b:c5:e7:43:86:a6:da:25:a4:c0:85:68:26:
                    91:9b:61:b7:45:14:c0:fc:17:59:2e:45:fb:b2:f2:
                    f3:a2:2c:b0:9c:5e:a8:d7:bb:d4:c6:04:fb:13:95:
                    1a:9c:1a:75:f5:84:89:9d:24:1b:92:f3:14:36:77:
                    f5:e4:1d:5c:42:a0:6c:52:6b:f9:65:bf:b4:70:14:
                    08:06:8c:b1:14:65:06:4c:cd:f8:d9:f3:9f:99:c5:
                    25:69:96:91:5d:1b:83:9d:fb:d5:bf:87:cc:d2:6d:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:A0:DA:B3:24:5C:FD:15:C0:20:1B:79:35:6B:71:C1:86:84:C2
            X509v3 Authority Key Identifier:
                keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:6f:50:de:03:d9:18:fe:0f:2b:00:e5:40:72:40:a5:01:
         eb:b9:b3:d1:67:7d:0d:14:93:bd:77:11:bd:90:60:fe:a2:a1:
         da:51:57:8a:19:e7:5e:ba:f1:84:33:39:d8:6d:90:17:07:86:
         b1:9a:91:c5:3f:ac:a4:e0:79:02:47:b3:e6:b9:54:ce:df:67:
         bc:3a:30:b2:6a:b5:dd:76:2a:e2:6d:ee:95:e8:51:a3:e6:7d:
         57:2c:c7:a6:91:91:6d:8a:69:af:5f:c5:fc:50:63:6e:b3:c6:
         c1:35:d3:86:cb:a8:5c:b5:4e:ac:c9:11:d1:fe:96:5e:1a:a1:
         79:0f:18:f2:52:0f:96:1c:ba:47:a2:94:4a:16:4f:a9:0b:d7:
         4b:ed:5a:4a:ec:43:3b:7a:4d:58:27:f6:b1:27:9f:e4:3c:89:
         af:8a:b2:e0:76:bd:93:90:f1:85:cc:c7:33:26:96:aa:70:7b:
         56:e0:96:42:8f:f0:40:90:59:d0:9d:5f:84:64:6e:2c:0e:95:
         a8:c2:66:54:60:2a:1d:a3:7d:06:e2:50:27:12:68:ea:9a:10:
         7d:74:14:a9:5f:92:19:78:ed:b7:37:06:d9:a6:86:52:ac:8c:
         57:53:7f:1c:c2:2a:33:33:f2:46:18:8c:dd:69:38:72:63:32:
         1e:78:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:45 2024 by rpki-client on console-fra.rpki-client.org