Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
File:                     Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft (raw, json)
Hash identifier:          SxB5Q3WYFtUnt45TFO57Ju1KJmw96s+UeLBCqKJEsMI=
Subject key identifier:   FA:C1:46:C1:CB:A7:49:DD:51:DA:D1:10:1B:36:1E:1B:70:73:5D:F4
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Certificate issuer:       /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial:       018F874A990939B75AD510F137FBC7E8F701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
Manifest number:          085F
Signing time:             Fri 17 May 2024 16:02:43 +0000
Manifest this update:     Fri 17 May 2024 16:02:43 +0000
Manifest next update:     Sat 18 May 2024 16:02:43 +0000
Files and hashes:         1: 3gEkCZlP8XTgKuVIEmJEkCKpncU.roa (hash: ecTRYVWB+2AvUAaJR9CKpxhkduVI9J93qLxTQApmHeM=)
                          2: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl (hash: 2ktzBY62f4DU+GW+8YO8RMpxlkb+5Bw3Ipx2luXoGPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:99:09:39:b7:5a:d5:10:f1:37:fb:c7:e8:f7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
        Validity
            Not Before: May 17 16:02:43 2024 GMT
            Not After : May 18 16:02:43 2024 GMT
        Subject: CN=fac146c1cba749dd51dad1101b361e1b70735df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:69:20:e1:40:c9:1c:84:ec:bb:f0:ca:2c:f0:
                    71:f7:58:b9:21:6e:d3:92:dd:22:1d:95:2a:39:90:
                    37:e2:c7:81:06:44:1d:27:bc:07:d0:c9:ae:af:f2:
                    33:42:2b:19:89:23:2e:0c:8e:d6:59:c8:53:a1:db:
                    0b:a3:7f:f0:3a:d1:0c:0f:ff:5e:fb:4e:74:5f:d8:
                    24:f4:b0:ed:79:f3:0a:37:e6:68:30:5b:09:1d:e0:
                    56:b1:8d:f6:0b:a4:cb:c6:3a:a7:d8:3a:b1:d3:f5:
                    17:a3:c2:f9:fc:a2:3d:c2:b9:65:22:27:23:da:77:
                    6b:88:81:77:4a:3b:6d:97:ca:6b:89:81:7c:5a:17:
                    07:14:2d:48:f9:ae:09:23:1b:53:86:2b:e2:83:ad:
                    43:3c:dd:49:ed:fd:08:c0:fa:7f:9e:d6:46:f8:86:
                    9e:89:a6:bf:5f:79:e1:9d:87:7f:ef:ed:88:b6:43:
                    9a:26:51:30:5c:6f:c6:63:c3:a8:9c:55:ac:43:61:
                    ed:4b:57:ea:40:76:12:d5:63:90:79:11:1d:18:e5:
                    3d:36:20:36:5b:cd:34:1f:04:6b:4b:50:76:de:94:
                    41:58:ad:d9:7a:ae:5c:fb:a7:22:28:b7:a4:a5:9d:
                    70:2f:69:02:c2:b5:24:9e:91:69:1d:60:cc:be:26:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:46:C1:CB:A7:49:DD:51:DA:D1:10:1B:36:1E:1B:70:73:5D:F4
            X509v3 Authority Key Identifier:
                keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d2:36:7c:a4:94:b4:0d:5a:8a:f8:b1:d6:42:64:21:32:0a:
         53:a9:72:8d:8f:69:4d:16:80:19:99:ae:ac:80:b6:d9:5c:f0:
         03:63:d9:2b:72:15:fb:8f:fb:e4:ed:30:7d:10:13:ea:56:af:
         0a:4b:b1:5f:48:46:6a:69:5d:13:cf:7e:04:28:73:ab:a7:bc:
         e6:1c:98:a0:b8:c1:a5:d9:32:85:43:a0:06:b0:26:e5:57:07:
         4e:a1:02:4e:80:f8:48:c7:ce:ce:bf:77:f1:8f:2c:7b:5e:0d:
         d3:3b:44:5b:82:9a:f8:3a:43:a6:62:9f:e7:a8:6b:95:4c:56:
         2b:af:63:24:04:35:77:88:08:38:5a:d9:56:e5:54:86:00:a3:
         ed:60:f7:50:cb:74:13:39:53:c9:1d:d4:b1:53:47:64:b6:2e:
         42:da:b1:92:92:c3:36:24:84:3c:0c:af:cb:29:3a:39:24:be:
         78:fe:31:3b:c0:cf:14:30:98:a1:14:e1:c5:27:ce:c6:74:3b:
         4f:7c:aa:2f:ed:9d:b1:29:50:8f:22:12:43:70:55:e5:3d:a1:
         93:7f:12:75:f5:a4:e3:d6:fc:76:01:fb:9a:c6:16:67:42:62:
         39:f1:92:51:5f:05:ec:01:b4:c1:f1:2a:7f:63:3d:72:3b:15:
         9d:f0:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:48 2024 by rpki-client on console-ams.rpki-client.org