Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File:                     NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier:          XkdtJKPpc7oyqrKDGhnvAlOO/P02db4bpYiygdOtO5k=
Subject key identifier:   F4:8F:21:36:6D:C7:BE:75:8C:CC:B2:AC:04:55:70:0A:29:27:08:F8
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer:       /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial:       018F882457EBD85DCB23409F57B8BE93D743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:34 +0000
Manifest this update:     Fri 17 May 2024 20:00:34 +0000
Manifest next update:     Sat 18 May 2024 20:00:34 +0000
Files and hashes:         1: 9aVuxmNAtqyxlU-ql9VTZiP80-0.roa (hash: nzkLDX+XoqC0FODbMgwCTFLOnHtexEzj09CD+ATPgyk=)
                          2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: zLjevLGE99sIYeMvimTEoLNkqz7QHrlgb0WEcrTgPw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:57:eb:d8:5d:cb:23:40:9f:57:b8:be:93:d7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
        Validity
            Not Before: May 17 20:00:34 2024 GMT
            Not After : May 18 20:00:34 2024 GMT
        Subject: CN=f48f21366dc7be758cccb2ac0455700a292708f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:87:07:c2:b0:fe:0b:9a:af:bc:9d:48:cb:
                    b4:0f:a4:13:b0:8b:37:cd:40:51:57:49:24:02:91:
                    b9:18:3e:a4:42:a1:3e:8c:4a:64:49:0e:b4:3e:cf:
                    5b:6a:2a:7d:64:6a:79:9e:0e:9b:73:5b:82:83:56:
                    5e:75:60:b2:90:1a:ad:2b:a6:38:b7:e5:35:08:83:
                    b1:c2:0d:2f:3b:d5:8f:e4:36:6d:01:2e:f8:2f:4d:
                    ec:b1:e2:3f:20:b9:83:a6:5d:a8:a3:5e:1d:4e:d9:
                    02:05:43:7b:c2:f3:53:fa:b7:8c:f0:98:07:cf:7e:
                    83:8d:8f:5a:95:6c:7f:ec:c8:ef:55:61:f7:17:54:
                    d4:fe:f4:cf:c6:54:06:7b:bd:ff:b3:a3:06:ad:c6:
                    ff:2d:e3:8f:e8:34:91:5f:06:97:a7:68:88:95:45:
                    50:e3:2d:32:f5:aa:00:21:b5:39:08:8d:c1:d5:99:
                    61:c4:b5:d7:40:04:72:58:75:98:d1:54:67:44:81:
                    a3:cd:dd:d1:ca:23:64:3f:c8:dd:dd:63:ed:36:0a:
                    e3:61:e5:73:04:0e:e6:4e:42:f2:77:ba:d4:6a:88:
                    0d:6b:d0:ae:83:8b:aa:d3:5a:c9:28:29:e6:c6:ff:
                    fd:77:28:9f:52:a5:e6:29:81:55:04:8a:b3:c6:81:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:21:36:6D:C7:BE:75:8C:CC:B2:AC:04:55:70:0A:29:27:08:F8
            X509v3 Authority Key Identifier:
                keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a7:22:73:74:7d:92:8a:2b:f0:02:4d:2a:ed:f0:9d:56:01:
         84:d8:1a:6f:44:01:e8:dd:b2:2d:96:02:dc:86:e7:6f:9a:b6:
         c1:27:85:f1:c5:97:dd:c6:bd:44:d4:48:c3:27:b1:dc:da:98:
         64:a6:ed:c1:9f:9d:77:18:20:de:40:17:ef:5a:4f:9f:28:b3:
         13:69:00:4c:d6:f1:f1:f9:15:47:02:7a:4d:91:4f:b2:4d:d6:
         76:c7:2e:85:0d:7b:8b:51:4e:e6:e5:76:fb:6a:07:35:e5:07:
         c6:f9:2e:1b:4a:fd:fa:e8:3c:5f:dc:ee:35:db:cf:fa:5a:4d:
         1e:03:a4:47:d0:25:01:95:85:eb:e5:fb:5f:45:c4:7d:18:04:
         e3:a5:d6:33:39:fc:1b:d5:cf:38:e7:ed:a4:c1:b5:d1:31:1f:
         ea:db:9f:a6:9a:cc:ef:d1:80:ec:48:0b:17:ca:4f:2b:2e:de:
         c3:e5:a4:f7:b9:7a:f9:12:cb:3f:0d:e5:04:7f:8c:e7:f8:ba:
         74:7a:09:e0:b0:33:68:d4:30:81:cd:04:43:91:b4:b5:a7:4d:
         0e:71:88:3e:a3:82:54:01:aa:b2:f6:36:e8:59:52:a8:fd:6d:
         11:20:44:90:5b:6c:db:80:63:b0:75:f7:93:37:6f:74:29:4b:
         f4:2a:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:38 2024 by rpki-client on console-ams.rpki-client.org