Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File:                     nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier:          COrstg2OpV28V6Ole+lOv5cjpqzQWey0Yx6cMcBgcjs=
Subject key identifier:   2F:B5:06:B7:17:41:FC:4F:77:9D:7B:99:CF:7E:36:07:83:2B:74:12
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer:       /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial:       018F89371857EB0B89AA1C3544905D5B8B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number:          08EF
Signing time:             Sat 18 May 2024 01:00:40 +0000
Manifest this update:     Sat 18 May 2024 01:00:40 +0000
Manifest next update:     Sun 19 May 2024 01:00:40 +0000
Files and hashes:         1: HEmh3H-HBQK2tGb9oO_s1TOMBuk.roa (hash: 5UxxeOvwTgQ3zzKZhCNJUrETC2wPQCmwkiiCDdcXxXU=)
                          2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: vQ3Rf9qpkuVvqz9cfRxW+Dp1hFshTnDxBvYl+s6DDvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:18:57:eb:0b:89:aa:1c:35:44:90:5d:5b:8b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
        Validity
            Not Before: May 18 01:00:40 2024 GMT
            Not After : May 19 01:00:40 2024 GMT
        Subject: CN=2fb506b71741fc4f779d7b99cf7e3607832b7412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:91:c9:13:ce:fd:d5:04:77:f1:7f:85:c9:
                    04:2b:d0:72:42:c8:4b:e7:3d:23:0a:ec:f4:09:7c:
                    f4:16:11:e3:6e:7c:38:3f:63:2e:0f:da:36:3e:24:
                    80:49:89:65:df:11:a8:e4:3e:67:1e:3a:14:f7:cd:
                    4d:b3:49:ef:8a:e4:db:3e:b1:b8:c2:a4:05:da:09:
                    eb:57:b3:64:be:5c:79:74:02:8b:e4:79:ab:c7:30:
                    ae:ac:f3:ee:49:de:00:01:e5:6d:64:ef:cc:87:1e:
                    a7:08:1e:60:b1:6f:e4:0f:55:d5:bf:f0:c5:f8:c5:
                    13:21:f9:96:b2:ad:70:8e:31:44:5e:85:75:cb:15:
                    a5:20:08:45:35:8b:da:69:93:42:78:28:02:31:00:
                    99:6e:a2:fa:e5:13:5a:2e:0c:b2:36:a3:e6:d5:c2:
                    57:d5:a8:b0:8b:37:d3:78:eb:e6:18:4f:da:ca:1f:
                    7e:1d:a3:99:46:2a:4a:e5:29:3e:1d:21:66:81:3f:
                    1c:3e:3e:aa:0d:91:89:f1:ed:32:16:62:81:e9:c4:
                    3d:d0:69:5b:41:08:29:19:10:ff:15:c8:61:3c:09:
                    fa:c7:9f:dd:e0:ac:d2:c1:54:c5:55:74:b7:93:08:
                    f3:f0:41:33:a3:58:1e:e1:21:46:f7:88:87:66:51:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B5:06:B7:17:41:FC:4F:77:9D:7B:99:CF:7E:36:07:83:2B:74:12
            X509v3 Authority Key Identifier:
                keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2e:b9:b0:ae:1a:d1:14:9f:9e:4b:f0:d1:3e:1a:bd:0e:6b:
         67:5e:48:38:95:b6:58:77:3e:9d:9a:df:d7:c0:df:51:f4:43:
         44:ab:a1:d1:2e:b2:05:5d:e3:70:0f:84:a6:41:e1:20:59:ce:
         88:81:81:29:70:a2:57:fc:b5:5a:f0:2f:d2:6d:4f:db:4e:bb:
         f1:46:02:5f:a5:ed:64:3f:42:94:4a:52:1d:a3:51:b4:08:c1:
         00:04:11:65:2b:1e:78:61:87:12:11:e9:24:16:b7:fa:e4:19:
         54:bc:a1:68:a6:c6:2c:aa:c8:56:84:9d:78:75:db:74:69:7e:
         cb:85:17:ff:3c:9d:ab:04:66:e4:f7:ba:7b:ff:01:c4:df:ed:
         28:65:fc:ae:b3:a4:8f:9e:0a:a9:43:14:ef:cd:96:12:3d:2e:
         c2:b3:ad:49:b2:3e:04:54:e8:12:c1:7d:cd:81:75:e2:4f:59:
         3e:fe:f2:42:15:4f:48:ea:57:34:29:88:62:78:b6:15:20:c9:
         1d:8d:cb:0a:d8:42:c9:cc:90:3c:60:af:54:fa:29:98:51:31:
         2e:2e:4b:8b:a1:b1:0f:1b:a4:32:79:90:58:90:27:79:a6:ae:
         fb:e7:97:52:06:76:11:d6:45:0b:71:46:4e:a4:a1:d3:4e:cc:
         2f:6f:48:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNxhX6wuJqhw1RJBdW4s8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3
ODJjY2UwHhcNMjQwNTE4MDEwMDQwWhcNMjQwNTE5MDEwMDQwWjAzMTEwLwYDVQQD
EygyZmI1MDZiNzE3NDFmYzRmNzc5ZDdiOTljZjdlMzYwNzgzMmI3NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+RyRPO/dUEd/F/hckEK9ByQshL
5z0jCuz0CXz0FhHjbnw4P2MuD9o2PiSASYll3xGo5D5nHjoU981Ns0nviuTbPrG4
wqQF2gnrV7Nkvlx5dAKL5HmrxzCurPPuSd4AAeVtZO/Mhx6nCB5gsW/kD1XVv/DF
+MUTIfmWsq1wjjFEXoV1yxWlIAhFNYvaaZNCeCgCMQCZbqL65RNaLgyyNqPm1cJX
1aiwizfTeOvmGE/ayh9+HaOZRipK5Sk+HSFmgT8cPj6qDZGJ8e0yFmKB6cQ90Glb
QQgpGRD/FchhPAn6x5/d4KzSwVTFVXS3kwjz8EEzo1ge4SFG94iHZlHzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+1BrcXQfxPd517mc9+NgeDK3QSMB8GA1UdIwQY
MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt
MzcxZmM1YzgwOTUwLzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw
LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi65sK4a
0RSfnkvw0T4avQ5rZ15IOJW2WHc+nZrf18DfUfRDRKuh0S6yBV3jcA+EpkHhIFnO
iIGBKXCiV/y1WvAv0m1P20678UYCX6XtZD9ClEpSHaNRtAjBAAQRZSseeGGHEhHp
JBa3+uQZVLyhaKbGLKrIVoSdeHXbdGl+y4UX/zydqwRm5Pe6e/8BxN/tKGX8rrOk
j54KqUMU782WEj0uwrOtSbI+BFToEsF9zYF14k9ZPv7yQhVPSOpXNCmIYni2FSDJ
HY3LCthCycyQPGCvVPopmFExLi5Li6GxDxukMnmQWJAneaau++eXUgZ2EdZFC3FG
TqSh007ML29IyQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:14:49 2024 by rpki-client on console-fra.rpki-client.org