Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File:                     nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier:          32AWnbaqPcKy024ZYmZHmcYA141WG0ixY+PgFt1Vchs=
Subject key identifier:   74:A9:92:95:3D:28:D6:30:8C:85:79:DC:81:DA:54:6C:45:4A:97:13
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer:       /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial:       018F874B73D512ABCA27502A6CCA2A237D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number:          04A3
Signing time:             Fri 17 May 2024 16:03:39 +0000
Manifest this update:     Fri 17 May 2024 16:03:39 +0000
Manifest next update:     Sat 18 May 2024 16:03:39 +0000
Files and hashes:         1: E9QVO0dwJVW-SprLVsl43h1uAxc.roa (hash: xRI0aPYVA2QVLcyiiHzJ4aNkPLyjBTxNshq5C7Cp+j4=)
                          2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: JglKaEk3Y2GS2cxoZFVaNJWG27mdl5MTw2qj1HQ+t94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:73:d5:12:ab:ca:27:50:2a:6c:ca:2a:23:7d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
        Validity
            Not Before: May 17 16:03:39 2024 GMT
            Not After : May 18 16:03:39 2024 GMT
        Subject: CN=74a992953d28d6308c8579dc81da546c454a9713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:cd:97:b5:66:2f:c3:d9:ce:6a:e1:a9:10:
                    c3:f3:65:77:f5:e1:3f:92:40:1d:da:76:0d:84:70:
                    89:69:a1:69:a4:90:d3:83:d9:f5:bc:c6:a1:aa:a9:
                    bb:b3:17:76:ad:14:ff:97:70:d5:40:8e:c8:5d:a4:
                    b4:78:e6:01:1f:fc:b4:eb:f9:a2:9d:46:d4:78:4b:
                    f5:bb:f1:c5:fb:06:8a:a0:d2:06:72:37:ba:eb:6d:
                    92:7f:dc:a6:18:3b:41:d9:e4:1a:bb:e9:8b:87:42:
                    7c:ea:8e:86:0e:33:6c:8c:91:2f:8d:85:40:7c:c4:
                    e8:94:5f:dc:65:57:bf:0e:27:9b:98:47:47:2e:bd:
                    2e:ef:18:a6:90:47:94:0f:d8:e7:92:c9:b0:3c:09:
                    d8:59:3c:64:8a:f5:d3:a8:be:eb:a1:17:47:ef:cf:
                    e6:fd:e0:10:a1:e1:0b:b8:dd:b1:4e:98:44:d4:c1:
                    fc:7d:e0:d6:49:07:0e:39:59:a7:5d:df:d1:29:0f:
                    93:73:49:a3:a0:41:b0:a2:4c:27:2a:fe:03:da:7d:
                    c7:d1:b7:a4:d9:3f:ff:06:33:3d:67:60:8b:29:d7:
                    74:d1:f5:9b:f3:df:0c:2b:a7:b5:f7:b7:86:3b:6d:
                    72:e4:36:ff:be:3f:43:41:58:e9:cc:7a:72:93:51:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A9:92:95:3D:28:D6:30:8C:85:79:DC:81:DA:54:6C:45:4A:97:13
            X509v3 Authority Key Identifier:
                keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:e0:91:20:04:49:99:74:13:e0:b3:e8:67:08:da:76:f1:
         c2:3b:87:8a:cd:83:8f:9a:90:ff:7d:b0:37:fe:aa:4d:ae:48:
         a4:c5:68:5e:45:05:7a:4b:f9:7c:e8:e5:34:da:7e:b1:37:29:
         c0:eb:76:01:31:f2:26:c7:9b:94:ef:ce:7a:cf:33:d2:a4:8f:
         50:64:c7:5b:58:85:ce:1a:ed:46:c4:27:84:a3:45:eb:86:29:
         d9:3a:84:e7:65:91:96:35:fa:05:6a:38:2a:73:eb:95:96:4b:
         c7:96:8b:9e:ff:c1:7a:74:7b:9f:91:f1:64:1d:fd:dd:af:26:
         ca:82:d6:df:57:75:81:b0:f1:6a:99:9d:12:f2:f2:74:8f:a4:
         4b:19:3f:43:04:e2:61:d3:2b:3b:23:84:2e:01:f7:81:8a:39:
         c0:51:e3:c8:0e:59:47:a1:db:7d:6b:cf:75:41:ea:0f:c4:c0:
         16:d6:18:e7:5e:fd:70:b8:4e:58:3a:34:f7:48:f7:fc:0c:45:
         3a:42:f9:45:60:f5:32:2c:0f:31:16:14:99:37:0f:e0:80:a9:
         bb:b3:72:e9:9f:c3:1b:c2:92:74:ab:49:1b:a5:ef:54:3d:b7:
         fd:ef:59:f3:7a:1b:4c:ad:79:ae:59:17:38:03:98:73:a6:9c:
         55:9a:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:48 2024 by rpki-client on console-ams.rpki-client.org