Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File:                     nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier:          rqw3KQ3yRMiSv8kIck8ynBdFiZ1RC4ogPhjtdawTSlk=
Subject key identifier:   90:AA:25:2A:18:B0:0E:01:BF:B7:B1:03:51:73:5E:D7:98:E8:6A:A5
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer:       /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial:       018F9A992529543E2122218D2713020D5944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number:          0814
Signing time:             Tue 21 May 2024 10:01:18 +0000
Manifest this update:     Tue 21 May 2024 10:01:18 +0000
Manifest next update:     Wed 22 May 2024 10:01:18 +0000
Files and hashes:         1: M6e7K950_k_iGtU7n78oPS42P9s.roa (hash: 0QQstbMgZ2SlYYroQ7gISeplIyCONm6168shRCkNgAc=)
                          2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: svqFFtT2YHRYohlkbbJ1QGMloB4/Dd8YZc7Olma6fxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:99:25:29:54:3e:21:22:21:8d:27:13:02:0d:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
        Validity
            Not Before: May 21 10:01:18 2024 GMT
            Not After : May 22 10:01:18 2024 GMT
        Subject: CN=90aa252a18b00e01bfb7b10351735ed798e86aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4a:db:04:f5:f8:48:cb:20:8c:86:bd:a1:41:
                    5b:87:5b:c6:ae:26:3e:29:85:34:4c:44:85:b2:ae:
                    af:d7:7d:c8:50:de:e3:b8:b7:a9:fa:69:6e:4c:26:
                    21:4b:bf:ef:8f:51:77:9d:01:9b:d5:31:b6:ec:0d:
                    55:bc:f6:9b:b0:6c:e1:1c:5c:64:cd:8e:56:7e:29:
                    d0:fb:2d:9c:3a:14:df:85:49:ef:dd:0f:5e:5f:a3:
                    cc:0e:92:36:65:93:5f:51:6f:e1:04:2d:03:b2:da:
                    f8:9c:a0:2c:29:98:f1:6d:4b:cb:8c:b5:1a:e5:7e:
                    74:37:9f:b8:80:46:8e:9d:83:38:85:51:01:29:20:
                    42:96:73:64:d6:5d:c7:ce:be:a2:de:a0:ad:38:ee:
                    73:c1:c6:6f:11:07:42:59:e8:de:d5:61:f5:9a:96:
                    08:00:cd:49:f3:a6:ff:41:45:b7:3e:7d:b1:b8:ad:
                    da:6b:47:99:a0:bd:cd:28:d2:14:57:34:82:2d:05:
                    84:1b:c2:b9:af:d1:6c:38:b6:6a:5d:97:f7:93:16:
                    36:2f:d0:47:e0:50:5b:f2:e0:6a:ad:5f:c9:7f:ba:
                    90:75:f3:b8:38:0c:25:8e:d6:a8:9e:d5:62:c4:d2:
                    90:17:62:2a:b4:f2:e6:26:63:28:a5:dc:a4:c8:f9:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AA:25:2A:18:B0:0E:01:BF:B7:B1:03:51:73:5E:D7:98:E8:6A:A5
            X509v3 Authority Key Identifier:
                keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:00:6d:99:64:ce:01:c4:c0:05:c7:1c:f6:1a:77:fd:10:6f:
         b0:db:a5:22:22:75:ec:27:c2:aa:6c:9b:3a:f0:f8:56:35:7c:
         c1:ca:61:b0:d8:b5:26:69:13:ef:5d:07:9a:a5:87:fd:89:87:
         99:65:ff:af:70:f1:18:71:3a:7b:49:2a:4a:5c:4c:1c:77:d4:
         53:78:31:52:e2:43:c6:44:f9:88:b0:ed:41:55:15:63:e1:ca:
         a7:e7:9f:19:1e:61:6a:fa:27:aa:df:83:9a:d0:bf:82:f9:91:
         94:ea:38:5c:30:6c:6a:2f:ee:57:b8:0c:83:2f:1b:5b:40:65:
         12:34:53:0e:fd:82:7d:d2:d0:fd:3d:cb:50:a0:0d:d0:e3:a6:
         21:60:88:7c:ab:7f:09:1a:5c:c0:7e:3a:29:38:8d:6e:db:1f:
         f7:78:c5:18:54:91:16:53:c6:fd:d4:ff:97:c3:55:32:51:f3:
         c0:fe:2c:65:83:39:c0:d9:4d:de:a0:c7:1a:95:51:63:e3:01:
         c1:c6:c5:9e:89:41:af:fa:47:66:19:1e:7d:64:aa:6e:a5:52:
         42:92:c6:2e:9c:6b:d4:3b:0d:30:d3:2a:c7:ba:e2:ae:af:a5:
         a2:81:81:43:4d:c5:be:76:cd:d4:5d:5c:37:f4:b0:90:1f:6b:
         00:10:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:16:32 2024 by rpki-client on console-ams.rpki-client.org