Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File:                     9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier:          VfK9SKCY9ssWkWWAUCavCyfDv65XuFEvu8vx9Eq+ofc=
Subject key identifier:   B0:39:10:D4:00:FB:39:78:B3:AF:FB:2D:13:51:5B:BE:88:68:D0:01
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer:       /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial:       018F40B11A0259C5F8C26537488B6D397FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number:          1154
Signing time:             Fri 03 May 2024 23:01:39 +0000
Manifest this update:     Fri 03 May 2024 23:01:39 +0000
Manifest next update:     Sat 04 May 2024 23:01:39 +0000
Files and hashes:         1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: mmnhIUrlVBkyUhc+3E+y49mleoLW9W7DJ9/xGdpsuT8=)
                          2: _cCbmMhIBo-nTmyNbrp2iiKmAJM.roa (hash: tXucB6McOPG7XrvAHkgkD79uDeNyFaSaVC3Bp/dJ24M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b1:1a:02:59:c5:f8:c2:65:37:48:8b:6d:39:7f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
        Validity
            Not Before: May  3 23:01:39 2024 GMT
            Not After : May  4 23:01:39 2024 GMT
        Subject: CN=b03910d400fb3978b3affb2d13515bbe8868d001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0c:45:74:98:73:12:d7:65:7b:f5:f9:57:48:
                    27:c9:de:0e:32:db:76:49:25:84:de:07:12:c1:0e:
                    dc:55:9b:c2:d6:5f:7e:bb:d6:1e:17:0d:fa:ae:de:
                    89:62:97:80:85:12:a0:5a:27:d1:7a:35:d9:c8:e9:
                    9a:5d:fb:40:25:8a:d2:e6:b9:d7:84:a3:d4:d6:26:
                    a4:bf:f0:a6:7f:b1:4f:ed:07:2f:0c:50:9b:04:b2:
                    e9:94:bc:1a:ac:6e:31:b2:ed:e5:c3:60:39:21:0b:
                    80:5b:90:85:a9:07:80:07:bc:ff:dd:38:4e:8c:4f:
                    3a:c6:fa:e0:14:74:ec:95:d4:84:8e:91:23:c6:98:
                    84:23:d3:4b:5a:0c:15:cf:42:85:9d:c7:a5:77:04:
                    5b:27:05:d5:b2:1c:ad:1e:73:c2:8e:a7:ff:72:31:
                    d7:77:da:05:0f:4b:17:45:66:05:1e:67:08:c9:37:
                    b4:e3:9b:aa:99:a9:63:19:fe:9e:3e:1e:46:1e:16:
                    b7:62:4e:eb:20:ed:e4:6f:8d:c3:ed:e7:e7:91:f7:
                    e7:42:d6:69:5a:29:14:b1:56:7e:f7:70:3b:11:80:
                    1a:8d:1e:90:3b:52:28:51:ac:5b:83:10:05:8c:fe:
                    de:75:30:f4:cb:ed:85:6d:1b:19:64:2a:cb:21:28:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:10:D4:00:FB:39:78:B3:AF:FB:2D:13:51:5B:BE:88:68:D0:01
            X509v3 Authority Key Identifier:
                keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:ed:ae:ab:cb:3e:5f:48:fe:a8:ff:b6:1f:dc:cc:83:ed:
         64:b0:83:ca:97:7d:02:fd:68:d8:2e:a4:d2:ca:77:18:69:ca:
         72:30:66:6e:42:d0:ac:b0:2b:3b:fe:b5:b6:83:81:2b:68:96:
         cd:33:f2:b4:7a:75:e7:3d:fa:24:af:99:6a:e0:da:f6:c2:7c:
         85:2b:94:44:05:c9:23:69:fb:54:f1:6b:50:e8:c8:fa:d4:1d:
         02:e5:ed:8b:6d:8d:fb:3e:4a:41:97:aa:48:e2:c9:06:f9:4f:
         e8:3c:2f:ab:87:9f:44:4a:51:df:0b:c6:3b:99:54:64:68:48:
         26:eb:18:d3:82:01:98:77:79:28:00:a1:bd:4e:fa:c5:ba:8c:
         b1:90:1d:9c:aa:6a:f9:f7:8f:57:43:48:51:56:10:dc:af:cf:
         e9:76:17:0f:44:d0:c2:94:3a:73:2b:d9:2b:a3:28:00:9f:1c:
         4d:65:8d:de:99:3e:5e:70:ad:f9:d3:bf:f8:c4:76:f7:23:41:
         8c:26:7a:76:e7:51:a4:6b:24:2e:ea:15:5e:a4:5a:3c:80:5d:
         ad:04:96:24:27:0f:b1:05:c1:82:41:8b:b4:cc:dd:f3:24:82:
         57:35:83:26:1a:0b:aa:62:95:39:06:26:67:21:3f:86:0f:fd:
         63:34:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:14:07 2024 by rpki-client on console-fra.rpki-client.org