Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File:                     nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier:          v8uwANDOFJiuK3V7ndwoKFGnjcIdqCPPVxf9/G4GWIs=
Subject key identifier:   11:3C:3A:00:3E:90:B5:C2:9D:6C:57:D2:09:E9:E2:37:7B:F6:5E:47
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer:       /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial:       018F86A3A328454C7626C4684AD0FCBA121D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number:          0B71
Signing time:             Fri 17 May 2024 13:00:22 +0000
Manifest this update:     Fri 17 May 2024 13:00:22 +0000
Manifest next update:     Sat 18 May 2024 13:00:22 +0000
Files and hashes:         1: 12V-ISoS_8heaKX5GVsktWG5jQU.roa (hash: x/j+2Uxnmul+iqExmOasaa5vyjxKzpPF3D0EwCnqqzw=)
                          2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: D5+pLoyTsQxlLR4I7wuqh6++coA7hXDgjwvYPmAzaTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a3:28:45:4c:76:26:c4:68:4a:d0:fc:ba:12:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
        Validity
            Not Before: May 17 13:00:22 2024 GMT
            Not After : May 18 13:00:22 2024 GMT
        Subject: CN=113c3a003e90b5c29d6c57d209e9e2377bf65e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:65:43:f9:34:34:b6:8d:dc:75:be:60:f5:
                    c9:16:50:d7:71:13:18:59:21:66:8f:bd:c7:08:b9:
                    24:aa:11:9c:a0:a9:e6:16:b5:26:19:8f:0d:77:b5:
                    17:92:82:56:23:02:98:99:2c:ac:c8:e2:7a:79:5c:
                    71:6e:c9:a5:96:15:17:de:83:7a:1e:8a:e7:75:2e:
                    76:6c:fc:bc:af:d7:e3:66:e9:ba:bd:1a:4b:d5:66:
                    25:4e:13:72:bd:ec:72:ae:ae:94:26:3b:cd:1c:aa:
                    c1:43:6d:a2:9f:22:4a:21:a4:6f:21:45:6f:6f:e2:
                    0a:07:1f:fa:bd:f1:ed:98:6c:c5:02:5f:3d:4d:62:
                    2a:f0:58:60:2d:0c:80:55:42:86:d4:e6:65:cd:ca:
                    1e:44:1f:7c:cd:b9:9a:69:7e:af:47:d3:32:10:62:
                    19:b2:84:c4:0f:8a:ea:7a:65:e2:ea:06:73:79:41:
                    c0:da:19:eb:f0:98:20:9a:05:e0:6b:2d:6b:de:4e:
                    78:90:a7:8c:fc:16:de:4c:d0:56:cb:3f:a6:69:11:
                    0c:1e:8f:b3:be:a4:07:bd:5f:03:3a:0e:c1:b4:25:
                    87:7a:69:10:7b:fc:35:57:29:b9:b6:f1:23:75:08:
                    85:68:fe:5a:b3:6e:54:6d:94:8b:8b:74:94:05:d0:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3C:3A:00:3E:90:B5:C2:9D:6C:57:D2:09:E9:E2:37:7B:F6:5E:47
            X509v3 Authority Key Identifier:
                keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:0c:a1:b7:1a:76:f5:6b:71:8e:ce:4a:2b:2f:ed:3f:b5:
         30:0d:53:a5:84:f3:91:52:ad:f7:3f:74:09:85:dc:a3:f3:9f:
         eb:c3:39:0f:fb:69:88:31:6b:96:cb:96:98:7a:82:85:8a:fe:
         a5:f4:1e:ff:fe:08:30:bb:ef:52:00:ae:9d:f6:3e:f4:30:6a:
         ef:e1:4d:b7:58:aa:f2:18:e6:88:2e:15:56:ea:6b:55:c6:64:
         f8:d8:d3:db:fe:ae:7e:15:05:f1:5b:2d:f1:79:4c:85:2c:da:
         b6:8c:d9:f1:c0:7d:81:74:5a:d3:02:df:59:a6:e6:92:86:c8:
         ce:9a:48:d6:c3:3f:02:f1:5b:06:e2:bd:31:6c:7b:eb:75:de:
         e7:a3:2e:43:d3:59:c4:9f:35:f3:14:52:e5:dc:68:c2:e7:39:
         90:29:9e:7e:6d:66:ec:d1:a9:1a:22:26:8f:5f:98:8a:bd:07:
         e4:27:2e:ac:67:f2:30:ce:16:24:1f:ee:23:34:c5:39:ab:45:
         af:13:69:05:c6:e7:a6:e8:90:76:11:3b:2a:ad:9a:c1:73:9d:
         59:80:93:7c:89:5e:90:30:95:1e:28:e4:3a:31:f0:5a:fc:c6:
         9b:1a:2b:9d:0a:89:da:d5:5f:55:6c:6b:a1:58:8a:e2:5b:81:
         8d:0f:1b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go6MoRUx2JsRoStD8uhIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZmM2MmVjZGM5MWQxMTk3OWNjMWQyMWE0N2M2ZWMzNzhk
ZmE0MzYwHhcNMjQwNTE3MTMwMDIyWhcNMjQwNTE4MTMwMDIyWjAzMTEwLwYDVQQD
EygxMTNjM2EwMDNlOTBiNWMyOWQ2YzU3ZDIwOWU5ZTIzNzdiZjY1ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhFlQ/k0NLaN3HW+YPXJFlDXcRMY
WSFmj73HCLkkqhGcoKnmFrUmGY8Nd7UXkoJWIwKYmSysyOJ6eVxxbsmllhUX3oN6
HorndS52bPy8r9fjZum6vRpL1WYlThNyvexyrq6UJjvNHKrBQ22inyJKIaRvIUVv
b+IKBx/6vfHtmGzFAl89TWIq8FhgLQyAVUKG1OZlzcoeRB98zbmaaX6vR9MyEGIZ
soTED4rqemXi6gZzeUHA2hnr8JggmgXgay1r3k54kKeM/BbeTNBWyz+maREMHo+z
vqQHvV8DOg7BtCWHemkQe/w1Vym5tvEjdQiFaP5as25UbZSLi3SUBdCrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE8OgA+kLXCnWxX0gnp4jd79l5HMB8GA1UdIwQY
MBaAFJz8YuzckdEZecwdIaR8bsN436Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4Nzgt
MjE1NTEyNmIxNjQzLzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4NzgtMjE1NTEyNmIxNjQz
LzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+0Mobca
dvVrcY7OSisv7T+1MA1TpYTzkVKt9z90CYXco/Of68M5D/tpiDFrlsuWmHqChYr+
pfQe//4IMLvvUgCunfY+9DBq7+FNt1iq8hjmiC4VVuprVcZk+NjT2/6ufhUF8Vst
8XlMhSzatozZ8cB9gXRa0wLfWabmkobIzppI1sM/AvFbBuK9MWx763Xe56MuQ9NZ
xJ818xRS5dxowuc5kCmefm1m7NGpGiImj1+Yir0H5CcurGfyMM4WJB/uIzTFOatF
rxNpBcbnpuiQdhE7Kq2awXOdWYCTfIlekDCVHijkOjHwWvzGmxornQqJ2tVfVWxr
oViK4luBjQ8b1w==
-----END CERTIFICATE-----
Generated at Fri May 17 19:04:30 2024 by rpki-client on console-fra.rpki-client.org