Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File:                     nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier:          jTUncaTqnVPOYcqXzorocK4Szu1pn2cdawfoP+PgcRY=
Subject key identifier:   3E:3D:27:54:0D:46:C8:AD:73:61:3A:F6:40:92:55:B8:69:10:1C:F8
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer:       /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial:       018F874AC5A0FBD53CB9C56518A75C3D57F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: 6MGpGNmAc2eKZx3rQxF5WtKufAI.roa (hash: BkrWWXNy+7GTvAguv1jvpPZOTKucu81jxgJRWQ8cbOg=)
                          2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: FdISzsPJOcM6wxZMuRusk3hDUVWR2HpvSTYT5XqClGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c5:a0:fb:d5:3c:b9:c5:65:18:a7:5c:3d:57:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=3e3d27540d46c8ad73613af6409255b869101cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:e0:f2:22:93:b7:90:ab:00:12:a4:9b:4b:
                    46:6d:33:76:33:b7:ef:79:61:d9:fe:4a:64:ba:fe:
                    4d:47:9e:c9:95:5f:ac:da:28:13:39:8d:97:4b:77:
                    2b:08:f6:db:6e:23:4f:2f:68:50:05:f1:3d:11:80:
                    e4:94:66:70:50:ba:5e:1f:5c:92:f5:e6:62:71:d4:
                    aa:f9:d8:62:6a:cc:aa:fb:8f:7d:5a:71:31:ee:1d:
                    a8:6f:0b:57:cb:7e:1c:2c:12:34:36:3e:1f:30:8c:
                    bd:b8:3c:b4:ec:35:61:fb:f3:cc:c6:c4:63:42:71:
                    b3:46:19:1e:83:53:40:09:68:4a:28:1f:ab:15:7d:
                    5e:c9:bf:de:fa:63:ba:e5:81:86:c5:9c:4c:77:41:
                    6e:b4:88:57:41:87:06:e5:b5:c6:82:ab:a7:60:ad:
                    68:11:f3:29:e2:ec:8a:6e:0a:3b:89:80:8d:df:46:
                    ff:d1:ec:27:aa:b0:4b:fc:b8:1b:33:73:e1:94:2f:
                    65:fe:9b:55:3a:7a:e9:bc:8f:5c:45:53:18:0f:19:
                    8f:09:8f:fa:50:3c:61:0b:eb:c3:df:14:1b:72:1e:
                    a9:95:1f:ef:14:75:d0:64:fd:25:cb:db:55:83:2b:
                    4c:fd:58:59:e2:cd:b4:6c:7d:57:95:d0:87:d9:b6:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:27:54:0D:46:C8:AD:73:61:3A:F6:40:92:55:B8:69:10:1C:F8
            X509v3 Authority Key Identifier:
                keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:5d:04:a1:a4:c8:62:92:d2:d9:60:27:65:85:39:cc:69:
         2f:e6:91:94:36:b9:c3:30:41:21:63:5e:d2:f2:5d:3b:ae:b7:
         c5:1f:d1:a2:69:79:47:fa:19:fd:40:9c:c0:c4:ee:30:50:af:
         49:01:eb:c9:89:d1:03:88:88:49:14:75:8c:b0:88:40:9c:82:
         37:80:ba:72:d4:82:ce:4e:7d:48:0d:46:89:97:7b:60:17:84:
         c0:de:03:53:ff:88:9b:be:f9:eb:4d:41:db:f7:a0:a6:9e:8c:
         26:df:b9:1a:cd:b8:31:88:07:e5:38:20:5a:68:e7:33:1f:46:
         de:1a:2a:de:9e:27:ab:58:cf:c6:f1:17:f7:09:93:23:fb:3a:
         b8:c1:b1:15:24:87:9e:a9:40:bf:d4:f4:79:85:4b:3b:df:f7:
         67:b2:58:64:8e:59:a7:7a:a9:04:a9:25:a7:19:39:c7:93:75:
         6a:5f:d2:09:17:c2:e4:0f:0f:8e:ea:f5:4c:fd:a5:64:23:e6:
         1f:c8:b0:39:cd:44:93:ff:28:ac:54:05:64:cc:3e:9b:39:00:
         5c:47:20:5b:1d:d9:7a:56:19:76:90:c6:ac:a7:46:19:59:68:
         81:2d:76:d5:f5:ef:05:9d:93:be:5b:ff:99:d5:20:84:db:fa:
         a8:d2:72:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSsWg+9U8ucVlGKdcPVf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZmI1NjQxNWYzNWU2M2ZhNzQwM2E1MDFmZGVkZGFlZWNl
YTQ3NWEwHhcNMjQwNTE3MTYwMjU1WhcNMjQwNTE4MTYwMjU1WjAzMTEwLwYDVQQD
EygzZTNkMjc1NDBkNDZjOGFkNzM2MTNhZjY0MDkyNTViODY5MTAxY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo/g8iKTt5CrABKkm0tGbTN2M7fv
eWHZ/kpkuv5NR57JlV+s2igTOY2XS3crCPbbbiNPL2hQBfE9EYDklGZwULpeH1yS
9eZicdSq+dhiasyq+499WnEx7h2obwtXy34cLBI0Nj4fMIy9uDy07DVh+/PMxsRj
QnGzRhkeg1NACWhKKB+rFX1eyb/e+mO65YGGxZxMd0FutIhXQYcG5bXGgqunYK1o
EfMp4uyKbgo7iYCN30b/0ewnqrBL/LgbM3PhlC9l/ptVOnrpvI9cRVMYDxmPCY/6
UDxhC+vD3xQbch6plR/vFHXQZP0ly9tVgytM/VhZ4s20bH1XldCH2bZSYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD49J1QNRsitc2E69kCSVbhpEBz4MB8GA1UdIwQY
MBaAFJ77VkFfNeY/p0A6UB/e3a7s6kdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEt
YWE4MzJkYjdiNTBhLzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEtYWE4MzJkYjdiNTBh
LzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSpdBKGk
yGKS0tlgJ2WFOcxpL+aRlDa5wzBBIWNe0vJdO663xR/Roml5R/oZ/UCcwMTuMFCv
SQHryYnRA4iISRR1jLCIQJyCN4C6ctSCzk59SA1GiZd7YBeEwN4DU/+Im775601B
2/egpp6MJt+5Gs24MYgH5TggWmjnMx9G3hoq3p4nq1jPxvEX9wmTI/s6uMGxFSSH
nqlAv9T0eYVLO9/3Z7JYZI5Zp3qpBKklpxk5x5N1al/SCRfC5A8Pjur1TP2lZCPm
H8iwOc1Ek/8orFQFZMw+mzkAXEcgWx3ZelYZdpDGrKdGGVlogS121fXvBZ2Tvlv/
mdUghNv6qNJytg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:04:10 2024 by rpki-client on console-ams.rpki-client.org