Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File:                     nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier:          E9uGypII+P9s7OObAVzvgAKhVTY/x2cAS6IXuwo0i5k=
Subject key identifier:   56:5D:71:CA:59:2B:A5:21:99:38:CD:7E:FD:9F:EB:32:A9:35:9C:4C
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer:       /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial:       018F87489BE631132E02D7EAC35F9F31995B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number:          0E56
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: 54KK4aZZz4FI6mWSAjSjd1MRiPA.roa (hash: N53RX9q3oKYPM6AEFYUQ7vsBY/k1sVwgiPFn1643sfg=)
                          2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: vFIjve9LIt0ZXPuj+zS8FnbVrx0x9N889oeTVqAAklI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9b:e6:31:13:2e:02:d7:ea:c3:5f:9f:31:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=565d71ca592ba5219938cd7efd9feb32a9359c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:25:e1:28:3f:87:87:96:24:5c:4b:d5:a8:
                    b3:ae:c8:8e:cc:b9:b4:64:b5:2a:f8:af:6e:9b:f8:
                    dd:1a:d5:e0:87:f0:cb:cb:8d:fd:b7:eb:9d:a2:bf:
                    5e:0f:d7:f8:50:30:8b:9d:34:6a:ac:c4:94:b1:4d:
                    9e:e4:fa:c7:f5:b7:8d:7d:3d:b9:50:15:35:0e:9e:
                    b8:7e:f2:7b:99:95:41:68:35:d2:b5:79:3f:35:6a:
                    7e:b4:2a:96:29:34:56:8e:d7:5f:7b:71:64:ae:d9:
                    8f:80:f7:48:4e:43:75:13:1a:57:08:04:a3:7c:8e:
                    6b:e8:83:92:2e:8c:5a:72:9b:e3:c5:c3:b6:6c:ac:
                    48:c8:d6:57:4d:ad:cb:2d:c4:64:1c:70:4f:dc:e5:
                    16:67:07:c1:b6:49:b9:8c:db:d6:99:ca:85:9c:d7:
                    ce:7a:74:09:5a:82:10:41:1a:ad:5a:2c:97:66:90:
                    3c:de:2c:fc:67:7f:c5:32:61:5c:5f:fe:cb:a8:82:
                    a9:24:18:70:68:93:35:9b:fd:47:81:35:02:86:e0:
                    a1:31:c6:fb:82:98:f6:61:76:1e:81:08:24:4f:86:
                    97:03:ca:3a:bd:a6:1e:a3:0e:69:2a:c3:55:b4:45:
                    c9:fa:0f:87:0a:89:c4:ec:30:8b:72:12:f2:fa:36:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:71:CA:59:2B:A5:21:99:38:CD:7E:FD:9F:EB:32:A9:35:9C:4C
            X509v3 Authority Key Identifier:
                keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:67:63:8e:14:49:c7:a7:8a:c4:ff:9c:9a:1a:33:27:a7:d5:
         65:af:5b:23:0c:91:4a:c3:fc:67:67:76:ea:4b:38:28:be:e1:
         e3:77:ef:5d:0f:cc:60:c2:8f:74:04:b1:99:c3:f6:4a:83:97:
         00:08:bd:f3:32:af:4c:1f:80:f7:90:57:40:e4:ba:c8:63:b8:
         00:a1:46:d1:b9:04:b1:49:19:b5:18:86:a9:1e:38:86:12:63:
         dd:cf:9c:21:47:c8:0d:34:43:6b:e7:ba:a2:60:76:d9:43:38:
         f8:ac:3a:ef:c9:9a:53:20:f7:ce:c0:f1:e2:f2:05:9f:94:ba:
         91:b2:e7:c8:27:bc:17:e5:17:d4:5f:ad:c5:6b:ea:13:e0:a7:
         f8:a0:21:bb:b5:c1:d2:fa:ba:f1:98:87:77:56:4e:f1:21:c5:
         88:da:d9:a2:ec:b6:67:20:97:e1:74:55:52:eb:9b:d8:26:14:
         c5:b0:db:64:87:03:4b:13:0f:dc:92:28:3e:e3:24:7e:1a:c2:
         70:73:25:5b:0d:a2:e7:9f:26:10:c0:da:fa:4f:d1:e1:70:08:
         c8:bd:23:25:7f:47:3c:f3:6a:d4:40:bb:1c:61:71:a1:f2:fd:
         b0:52:03:9d:af:42:0d:22:9e:4c:b2:85:1a:d1:f7:73:a0:ca:
         69:4a:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:48 2024 by rpki-client on console-ams.rpki-client.org