Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          lNjzShxtRI6T6dr6WsWeYojvn9bwE8lsCLwzH+CvRt0=
Subject key identifier:   29:78:70:EB:83:DD:CC:FF:58:89:1A:AC:B5:4A:3A:2A:B2:56:14:86
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       018E885F7F1947A34ADF4C2D8DC2593E5178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          10A9
Signing time:             Fri 29 Mar 2024 04:02:23 +0000
Manifest this update:     Fri 29 Mar 2024 04:02:23 +0000
Manifest next update:     Sat 30 Mar 2024 04:02:23 +0000
Files and hashes:         1: AGCjlep1Ca-6AtXNZN-AYMpLYd8.roa (hash: eSOZRz75i1apXYI1R8A5tHk6ae5ysQQRz/gxl2iy1Iw=)
                          2: DzpKo4r5ltsdkdIJ81IKEwJLo7I.roa (hash: B3mWdf7rXyp3870KJRzWLCq2XDI+ZecR5nsOoyPc1Bc=)
                          3: jHXcNAHznksHHEsoQentdu06YzM.roa (hash: +XaxezL32vHXsweTZ4yC7cUBLU/HjLLVVO63UV1U9s8=)
                          4: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: cId7yNu05cNhH+J2pbRZfKyybGIimr2ArpUGXSlDq40=)
                          5: pF8mlLa4DIaVdawERlI1KCLszjw.roa (hash: HGS4cH68Z8DRPCcmZJ/IZZk3cp5ommT7GdIMzeiE9M8=)
                          6: q2WuRD__g7owa7jwZPoKNOBX21s.roa (hash: MuFkeuCZVY1sEiUIjo12aOnxza77ZfKzRHxggdO9WMc=)
                          7: rNJg8rMdXwsE_FEZ-6DjjbmEJQY.roa (hash: A2NoCY1wO1d56JByIJNMwBKgNyVZCCyCcaqDTN19A/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 04:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:88:5f:7f:19:47:a3:4a:df:4c:2d:8d:c2:59:3e:51:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Mar 29 04:02:23 2024 GMT
            Not After : Mar 30 04:02:23 2024 GMT
        Subject: CN=297870eb83ddccff58891aacb54a3a2ab2561486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:9a:89:3e:5c:76:3e:af:28:96:b2:b7:69:
                    56:41:84:e2:6b:de:a5:28:d7:d7:a8:95:5a:13:8e:
                    7a:20:1e:7d:ef:34:93:0c:ea:e0:14:a6:d6:8f:2d:
                    bc:9e:91:f2:ec:f2:48:55:3c:32:be:9a:bc:11:b6:
                    8b:76:be:8d:27:e3:5b:8f:ea:d2:fb:ac:85:30:09:
                    db:7b:1a:b9:44:3b:92:3a:63:51:32:f1:7b:5a:1c:
                    92:54:0b:29:28:cc:3d:24:6f:10:32:4f:f1:48:3d:
                    96:2a:46:87:36:ea:f7:3a:e1:9a:61:da:6c:3e:ca:
                    af:07:af:ae:b2:05:94:41:f1:e4:75:56:47:f9:88:
                    ba:39:ca:86:2a:a7:d4:2c:d1:d3:c1:85:ef:e0:53:
                    8b:3b:24:09:db:cb:b1:3f:bf:57:a2:ca:b4:06:7c:
                    19:d4:11:1c:81:bb:5b:7b:b8:3c:5d:12:8a:10:da:
                    e4:aa:73:7f:a1:8d:84:4f:95:87:c3:17:d7:fa:de:
                    61:64:9b:85:b1:48:97:56:6f:d8:82:40:f5:0c:80:
                    e1:be:87:0a:ff:d0:58:4a:ba:56:74:ad:cc:55:b3:
                    14:eb:3e:0b:e8:3b:f2:e6:23:f9:bc:e5:1f:d4:e1:
                    0b:cd:5b:91:9a:20:fe:da:66:6d:3a:c5:ea:88:ec:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:78:70:EB:83:DD:CC:FF:58:89:1A:AC:B5:4A:3A:2A:B2:56:14:86
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:69:40:16:61:dc:d2:0c:d1:39:99:cc:dc:2c:0a:1a:74:8a:
         4b:17:e3:5b:90:7b:e8:79:5f:d1:4b:5e:28:2d:61:00:d0:66:
         a2:b4:25:30:8f:c2:b0:c9:ad:20:c8:8f:cf:48:5a:48:55:01:
         a0:bc:d1:86:d4:68:85:2c:a0:95:85:1c:ac:27:c0:4f:ec:41:
         71:aa:9e:7e:1b:c3:70:b8:d7:cf:98:94:5b:ef:75:be:52:9d:
         44:1c:17:52:8c:95:8d:f3:53:81:0d:b4:92:07:20:c7:55:01:
         7f:d2:fd:2a:89:b9:d8:2a:9f:27:4b:30:21:4c:82:a5:c4:b1:
         4a:5b:d5:70:6a:57:4d:f2:9e:e7:73:9e:a0:e2:91:e5:8a:ab:
         69:2c:a9:9b:0f:10:6c:4f:e3:27:6c:48:37:2e:09:1d:c6:6e:
         4a:22:dc:80:70:90:48:d8:81:4a:9d:8f:29:a5:1f:9c:84:5d:
         e7:95:99:be:1b:10:01:c0:ba:77:6a:d2:c8:39:b8:60:74:fb:
         e0:53:81:c5:af:33:8a:31:fe:a5:35:52:ea:ed:ae:fe:db:ad:
         98:37:e1:f0:84:ba:d0:40:33:c3:46:25:69:2a:6b:84:f9:ce:
         39:54:1d:f0:4a:18:43:e4:07:65:66:e6:cd:21:ee:d7:76:1f:
         73:38:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:39:42 2024 by rpki-client on console-ams.rpki-client.org