Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File:                     NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier:          ze15yoW+pcK9P5zMnRNuqQLiSrMiaSqFmYJDVsEIxcg=
Subject key identifier:   52:4C:2E:3E:92:35:5A:B8:FD:00:D5:72:4E:60:D0:47:9D:0F:EF:B5
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer:       /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial:       018F86A39EB814BA9B4BAFD451D2A1288606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 13:00:20 +0000
Manifest this update:     Fri 17 May 2024 13:00:20 +0000
Manifest next update:     Sat 18 May 2024 13:00:20 +0000
Files and hashes:         1: 1ge24mR_TVb7zcIxHzdx-BIhFag.roa (hash: /BfMNv7RiNI+LL5/3PlRpg9duDlKUF1+UFFYdpiqBCk=)
                          2: 5r2DKXWFOzJ3O47HmmS-om3sJTU.roa (hash: TdIu0ZqCO/dE5pDnNxxo02P4Y3BL2QuXw0/2/8P4Dlg=)
                          3: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: 2Cv0xkMW2BvXiBDtF7oqs7w1EMvdq+/2ZWwOh2rYVBE=)
                          4: yd0u-uOfH6f0RaT8HMwSM4tkmKs.roa (hash: I9foJDumJEWM7IXephE7pL2jqclsitkMkKwoV3auuPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:9e:b8:14:ba:9b:4b:af:d4:51:d2:a1:28:86:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
        Validity
            Not Before: May 17 13:00:20 2024 GMT
            Not After : May 18 13:00:20 2024 GMT
        Subject: CN=524c2e3e92355ab8fd00d5724e60d0479d0fefb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:6f:d7:da:c1:28:d1:27:ee:03:9c:e7:87:
                    25:18:f9:4b:d9:1b:78:5e:5b:da:d8:28:45:15:db:
                    a7:d2:f9:d2:e5:ca:69:6a:0a:57:b5:4a:31:85:7a:
                    ca:98:49:b1:08:df:2f:3d:6c:8b:61:34:07:01:a6:
                    35:92:b0:46:d2:15:83:59:25:6d:36:b2:1d:67:87:
                    91:d4:a2:d8:18:89:83:e8:8e:97:76:f1:b4:c5:70:
                    d6:a2:8b:ce:0b:52:06:0c:13:d1:ef:18:ac:e4:7d:
                    95:5e:a7:33:86:2c:a1:a1:9b:e4:92:f1:b1:63:7e:
                    3d:7f:d7:a2:b1:38:e8:dc:15:87:ce:bb:b9:24:66:
                    05:f5:f6:d0:78:be:10:a0:5c:3a:d9:4a:04:63:84:
                    06:43:a1:c7:14:a6:3f:c1:2c:d0:19:5c:f6:53:1e:
                    df:f6:2d:aa:6f:ef:da:05:fb:d2:4b:53:80:c6:2f:
                    c5:0c:89:95:9e:12:b4:2a:1c:8b:d6:ee:11:ac:a8:
                    5a:b5:02:6f:eb:10:63:65:6a:5b:e6:11:e1:e1:3f:
                    35:25:c3:68:ca:58:30:75:84:1c:fd:fe:53:2d:cf:
                    70:ab:53:2c:a6:c2:36:ed:93:30:1c:ae:7c:2a:4c:
                    0b:21:c8:3b:8d:8c:f7:fb:2e:8f:37:8f:ab:ec:2f:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:2E:3E:92:35:5A:B8:FD:00:D5:72:4E:60:D0:47:9D:0F:EF:B5
            X509v3 Authority Key Identifier:
                keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:58:1b:ac:2e:64:f9:c5:14:f1:92:e9:eb:4e:2b:3c:e4:
         81:b9:3c:b9:a6:26:05:18:8a:de:72:21:04:88:31:f4:cf:e3:
         b5:35:00:6c:ac:d3:ef:ad:09:58:02:11:db:0c:0a:cc:ee:29:
         c0:9b:5c:21:95:68:d8:b2:05:fe:4b:be:6d:0a:d0:62:75:3d:
         6b:87:2b:74:96:c6:b5:34:a7:50:ca:73:da:b5:07:9c:28:14:
         41:a1:8b:32:fb:3d:09:73:a5:fb:9b:36:1e:53:94:25:82:e1:
         ba:6d:39:5c:cf:ad:7a:bf:9b:7d:31:b6:02:d8:69:97:48:44:
         31:fb:77:c0:46:5d:be:2d:60:a5:82:84:44:cb:54:b0:0e:21:
         a9:87:d4:87:b3:a6:c1:3e:fc:78:97:61:27:3c:f0:f5:55:4b:
         98:f8:8e:87:ae:41:dc:24:02:fe:84:8b:8e:ff:67:68:70:ae:
         96:0c:59:4f:c1:35:17:30:0a:bb:62:65:40:b6:e8:06:a8:da:
         89:7a:4e:b7:dd:a7:a8:4c:8c:56:64:58:81:f1:ed:d3:6c:cc:
         9c:4f:59:b3:91:2a:5e:e2:22:3b:4c:37:97:eb:ea:14:97:8b:
         08:8e:a0:e8:5e:de:53:1f:eb:53:1e:60:c5:49:77:5a:e5:cd:
         c9:67:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:24 2024 by rpki-client on console-fra.rpki-client.org