Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          37aPYHS9SbiHUDzBiIh81VHmkPH0n4ku97qFKOuwGpk=
Subject key identifier:   20:88:0C:91:69:04:90:B1:72:AF:B1:C8:2B:04:90:67:C8:1E:F3:41
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       0191F93480830CC5AA13B0D3D149C0D2D74F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          0164
Signing time:             Mon 16 Sep 2024 05:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:53 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: jotrse9tdqaT+kdTCyxGlZBninlR3PcB/l1jYMuedQU=)
                          2: M0DeC3lpV5Zoafs-hEu6iMpAxnI.roa (hash: vQqJU/CHmmNnWl37QE2PEPWjW9bOg4oZ0iJ9kDT7rpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:80:83:0c:c5:aa:13:b0:d3:d1:49:c0:d2:d7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Sep 16 05:00:53 2024 GMT
            Not After : Sep 17 05:00:53 2024 GMT
        Subject: CN=20880c91690490b172afb1c82b049067c81ef341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:49:cf:bf:b7:0d:cd:68:23:da:1c:5e:94:
                    c4:6a:62:1c:e8:0a:cf:65:89:88:0c:b9:27:b9:d4:
                    54:3b:8f:1b:e8:09:aa:b8:f2:4a:c1:5b:2c:ec:2b:
                    82:f6:45:61:77:3a:17:c3:54:57:6d:9f:b6:c6:33:
                    9e:3b:f0:cd:b6:8b:e6:36:4d:b8:bf:5c:53:b7:45:
                    d8:7f:09:e3:26:02:80:4f:62:5b:56:26:ab:ec:bd:
                    84:06:a4:08:93:cb:a2:eb:3f:66:3a:cd:af:02:eb:
                    05:6f:27:f2:02:02:a1:12:4c:35:84:ec:e1:d1:7d:
                    43:04:61:7d:83:c3:ae:27:ea:2d:40:ff:50:ea:79:
                    ad:a5:16:7b:bc:6a:a2:83:97:68:6d:5a:55:c1:d6:
                    98:ff:8d:be:6d:b0:56:34:48:99:2b:7d:74:ba:f2:
                    39:b2:72:f4:86:b0:e3:02:dd:7a:ae:4e:aa:ee:7a:
                    d2:64:a8:08:6d:14:29:2d:ea:4d:5a:a3:4d:42:2d:
                    cc:47:a1:ed:3e:47:ae:a1:d7:a2:60:d7:57:fa:e7:
                    b0:ce:a3:6e:e2:35:8a:1a:ef:fa:61:65:8b:ec:ad:
                    44:9b:04:dc:b5:13:e3:8f:e9:0e:61:fe:81:54:65:
                    c4:a5:3d:95:2b:4d:82:2b:04:87:f5:a8:7a:f1:5a:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:88:0C:91:69:04:90:B1:72:AF:B1:C8:2B:04:90:67:C8:1E:F3:41
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:bf:c3:98:1a:a8:db:dc:0b:00:ff:3e:0e:19:c8:1c:2b:
         a5:ce:63:e7:67:b7:15:59:6e:87:80:a9:7d:2b:af:61:0d:45:
         3e:f7:d7:27:ee:c6:1e:2f:71:f1:e9:95:67:71:b4:2c:51:34:
         6d:b4:8e:88:d4:7d:1b:b6:96:25:d7:13:12:5d:6f:1d:0f:42:
         50:eb:c2:63:87:ef:b5:86:bb:85:0d:9e:86:33:28:07:69:95:
         0c:ca:08:4e:bb:71:bd:7f:98:77:24:c9:0e:78:6f:31:9f:77:
         cb:86:17:5c:10:76:13:09:93:d1:88:1e:56:22:a6:00:12:fc:
         bc:78:2f:f1:ca:f1:cf:20:8f:e5:0c:8f:67:51:59:9a:39:5c:
         3c:63:3b:e0:fe:af:21:68:54:af:6e:20:88:7c:04:72:ba:8f:
         33:fc:60:a4:e1:12:56:c2:55:8d:5f:57:b1:c1:1b:13:a1:aa:
         08:d5:4e:92:39:d0:83:cb:9a:a8:a8:6f:b1:c0:14:f1:59:3b:
         01:8f:1e:9d:36:31:3a:fb:d4:7f:77:6b:58:e4:a9:96:4f:a0:
         f2:bb:62:25:43:46:36:63:11:7a:80:32:7c:43:5f:3d:16:a1:
         7e:2c:6e:fc:bd:2b:21:49:28:2e:77:4e:a4:8f:dd:9e:dd:03:
         d3:f9:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:28:33 2024 by rpki-client on console-fra.rpki-client.org