Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File:                     nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier:          Vz8ex4Xv7TIVgRJbx0W/CKVgWk9qm8O34B7QNX/6ySw=
Subject key identifier:   C2:39:DE:D3:4E:6C:D1:E6:A5:DF:D9:2A:60:AC:86:EF:4B:90:94:B3
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer:       /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial:       018F8937633641E987E6000856B905D17626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number:          0D97
Signing time:             Sat 18 May 2024 01:00:59 +0000
Manifest this update:     Sat 18 May 2024 01:00:59 +0000
Manifest next update:     Sun 19 May 2024 01:00:59 +0000
Files and hashes:         1: c-RbyGnGhSMe5FlI5JzwFGNODlU.roa (hash: fF24mdqK3PXSP4ptWuJn6iNKUNjfO12Q/MpEFcdYpNY=)
                          2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: Ro8HYyGnXdtVTnVlWNmaAU+6LanBpl2SpJ1N9AL5ROo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:63:36:41:e9:87:e6:00:08:56:b9:05:d1:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
        Validity
            Not Before: May 18 01:00:59 2024 GMT
            Not After : May 19 01:00:59 2024 GMT
        Subject: CN=c239ded34e6cd1e6a5dfd92a60ac86ef4b9094b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:f9:4f:be:d8:1f:68:36:b4:30:e2:42:7c:
                    06:2b:9c:c9:ab:c4:f3:e7:28:2a:b7:28:28:b3:bf:
                    ef:4c:61:26:04:27:26:0b:af:6b:5c:b6:9f:56:0d:
                    94:ab:aa:81:e8:af:88:01:82:5d:ea:3d:ed:90:6c:
                    55:6e:6a:8f:e9:dc:88:e5:66:82:76:6b:cd:e9:10:
                    90:f4:f3:25:0e:22:ec:80:4c:ff:ae:1e:96:33:02:
                    13:79:a7:33:fc:4c:35:5d:c2:cb:85:94:f4:bc:c6:
                    1e:74:e7:48:79:d2:e9:8f:25:e8:34:ce:4f:ac:6b:
                    d1:1f:bf:10:1e:b0:4b:24:18:4d:b8:b2:7d:d0:12:
                    cb:20:0e:e2:40:29:04:ca:44:83:85:28:d0:e0:dc:
                    12:04:01:02:c6:17:cf:e9:f2:4f:86:a4:e4:d8:4c:
                    b8:9b:cb:9d:af:30:24:d7:75:dd:63:5c:28:45:23:
                    41:82:ff:be:35:13:1a:bf:b3:80:d7:37:07:43:49:
                    7e:e5:9b:1e:78:06:18:90:bd:04:43:2b:6d:85:1e:
                    dc:86:09:02:26:e6:3d:26:96:8c:d0:0c:c5:13:b3:
                    9a:a4:d4:41:f2:80:ff:b9:35:9b:15:72:49:cb:32:
                    71:e2:98:15:ac:0f:58:c3:ba:2d:62:6a:fd:96:9b:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:39:DE:D3:4E:6C:D1:E6:A5:DF:D9:2A:60:AC:86:EF:4B:90:94:B3
            X509v3 Authority Key Identifier:
                keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fd:b6:ef:ab:f7:07:8f:55:9c:c2:83:eb:f4:c2:dd:2b:a5:
         93:ad:e9:68:cb:56:4f:c7:e0:c1:fa:ad:c7:1f:55:e1:c6:50:
         7f:47:2d:49:8e:ab:99:81:3c:58:e7:57:cf:79:79:4b:bf:0b:
         8d:8b:98:9e:10:33:ba:1c:7a:6b:0e:09:06:16:4b:11:c0:89:
         8d:3a:06:c8:93:1e:31:0b:ab:c3:a9:f9:43:93:ec:04:36:18:
         f8:37:dd:79:66:f3:1c:82:7c:53:95:6a:23:0d:b3:65:41:e6:
         e9:1f:c6:21:ed:d7:9e:89:46:cb:7c:50:44:f0:c5:a8:95:72:
         de:b6:00:bc:86:e4:96:00:7d:10:c5:63:fb:43:04:87:9e:64:
         2f:78:1e:91:9e:9a:4d:a8:5d:33:f9:24:90:47:e2:b4:c5:66:
         0b:3f:98:12:e5:ca:d2:c4:c5:a9:b2:27:40:67:69:59:bd:60:
         cd:ef:0e:07:ab:cd:2d:19:1e:ed:84:9d:69:4a:d6:9d:de:64:
         91:b7:d7:ac:2e:2a:6d:e2:60:34:5f:bb:83:c2:df:d1:75:6e:
         7a:40:e2:17:9a:83:74:db:d6:ca:c9:0d:1b:67:6c:37:86:7d:
         15:7e:f1:78:f5:b4:d1:25:b8:0e:d3:b6:46:6d:bc:b2:9e:97:
         01:13:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:00 2024 by rpki-client on console-fra.rpki-client.org