Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          MH3iau5akNFqap/tCE2R+dgC1Fo1ukjpRFwzPPAmwmo=
Subject key identifier:   A3:2F:BB:0A:16:C5:D3:BA:4D:8F:7A:66:02:55:EA:77:BF:2C:5B:3C
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       018F8ECAC9A59ED8DEE38C424EF93E8B8475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          11B9
Signing time:             Sun 19 May 2024 03:00:05 +0000
Manifest this update:     Sun 19 May 2024 03:00:05 +0000
Manifest next update:     Mon 20 May 2024 03:00:05 +0000
Files and hashes:         1: 6kFKBlQMJFxKYHdo5rLb8nZHVG4.roa (hash: +5rZCIfEGw9sYIHiF45MRt2MUgq5EH9RZ1d41bqYhCY=)
                          2: LmC7S1D8W95_Pqo11oEkGzQUpzc.roa (hash: 8BkpcInQjzgRUVuV+8NStvmI14bmu1J8X9973GZR8jg=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: 4ApeSJI9hthiQ3roEfnpV/hxw69+COCm5H6d53Z0+SA=)
                          4: Tnmwf58ZqiaSDbieiWisiJYOhdY.roa (hash: LsqUvWFvTKzgt4fEhCi44TOqnGXOLJAnWVNFSVMbUmo=)
                          5: Y924OVgloYlMoRdOWJ-EwA1bblQ.roa (hash: bUDa5iut7/Z0Xqm0fs3CLvy6ChJwyNoaz3TbedH3qpk=)
                          6: gaGPiCBEun1FIVsNwxzGLf8NLj8.roa (hash: CexXJQsquOa5xlATYrAZE8gOVdAGDZaJYPgs2Zgtut4=)
                          7: j_QdLyr9CYD26dzvpXPe2Bg_q5I.roa (hash: k+YldsLVD8JcwMTz6pYi6Qtit9Hx6Ow8zz9l4uGsQ9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 03:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:ca:c9:a5:9e:d8:de:e3:8c:42:4e:f9:3e:8b:84:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: May 19 03:00:05 2024 GMT
            Not After : May 20 03:00:05 2024 GMT
        Subject: CN=a32fbb0a16c5d3ba4d8f7a660255ea77bf2c5b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:b6:5a:24:5f:d3:be:76:2f:ff:e5:9f:59:
                    61:e4:01:35:7d:17:bb:17:82:64:67:49:c1:89:3c:
                    04:6b:98:6e:81:4c:a6:1a:b3:98:4e:37:f2:04:30:
                    e5:fa:93:11:d8:cf:47:aa:c6:36:76:17:80:05:a7:
                    6e:51:84:1d:02:9a:75:a1:53:4a:01:38:7e:7a:6e:
                    07:62:cd:78:8a:97:30:4c:59:a5:23:8b:9a:1c:b0:
                    fd:d7:5c:24:10:40:57:a6:50:bd:c9:8f:18:09:19:
                    42:c4:9c:af:2d:3b:98:17:15:66:9e:46:f5:5b:3e:
                    ff:f1:a3:e4:0b:83:dc:39:4f:9e:78:a3:87:86:0c:
                    8e:99:ae:1f:51:d6:ea:6b:ef:18:3b:81:b5:d9:d6:
                    87:fe:e4:2c:2b:92:19:77:40:53:87:36:aa:b3:d9:
                    1f:51:22:45:06:30:78:1a:48:cb:ee:e1:c6:a2:79:
                    70:1d:4f:6f:e9:17:77:08:ed:19:40:85:4d:7f:0c:
                    ee:3b:29:bc:41:3d:2c:2e:f5:24:e0:00:a6:5c:81:
                    b0:5c:9b:11:11:46:48:ac:1c:9c:3e:72:ff:47:11:
                    c3:81:9e:11:9d:d1:a8:27:29:30:22:ef:40:20:ac:
                    c5:25:cf:cd:d5:29:07:d1:ea:85:57:ea:f2:47:33:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2F:BB:0A:16:C5:D3:BA:4D:8F:7A:66:02:55:EA:77:BF:2C:5B:3C
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:17:f2:dd:a5:ca:9c:d9:df:be:6d:a1:04:04:22:39:fb:89:
         73:ff:9f:cd:71:09:20:d5:44:7e:da:39:c6:bf:db:1b:e6:21:
         cb:52:f6:6a:22:bd:1f:ca:46:3d:ef:61:6b:f8:4b:95:f2:7c:
         b0:26:06:09:50:c9:77:0a:29:51:9f:8e:27:f8:af:ac:ec:fe:
         04:96:d1:d9:c3:66:ab:eb:5f:37:87:83:ac:ba:5c:1a:5f:6b:
         e5:45:6d:51:1f:25:2f:04:ca:f0:bb:e1:63:1e:b0:14:d2:7e:
         1f:b7:84:62:b9:26:66:0e:ff:d7:cb:04:b6:ef:6e:30:05:1e:
         ec:cd:0d:18:26:02:c9:38:3a:00:4d:62:a3:1c:b8:85:05:86:
         68:f0:48:8e:c3:db:ba:33:cc:b8:47:30:cb:bd:cd:e7:f6:92:
         de:8f:dc:c3:ca:7f:7c:78:f2:31:01:2c:3b:23:7b:9f:10:29:
         18:80:8e:e8:45:20:4b:8a:a6:04:b0:ec:0c:b0:d0:eb:28:e2:
         d3:0e:2b:e1:3f:1b:b5:cb:f8:2b:3b:13:fd:cf:63:66:b8:f6:
         48:e0:a1:ae:08:71:9b:36:a3:6a:af:d4:89:2c:f3:8a:06:c8:
         fe:44:ec:78:f1:e6:65:a2:b7:8e:ad:60:1f:af:a1:e7:08:0a:
         41:7b:99:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Oysmlntje44xCTvk+i4R1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjQwNTE5MDMwMDA1WhcNMjQwNTIwMDMwMDA1WjAzMTEwLwYDVQQD
EyhhMzJmYmIwYTE2YzVkM2JhNGQ4ZjdhNjYwMjU1ZWE3N2JmMmM1YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIy2WiRf0752L//ln1lh5AE1fRe7
F4JkZ0nBiTwEa5hugUymGrOYTjfyBDDl+pMR2M9HqsY2dheABaduUYQdApp1oVNK
ATh+em4HYs14ipcwTFmlI4uaHLD911wkEEBXplC9yY8YCRlCxJyvLTuYFxVmnkb1
Wz7/8aPkC4PcOU+eeKOHhgyOma4fUdbqa+8YO4G12daH/uQsK5IZd0BThzaqs9kf
USJFBjB4GkjL7uHGonlwHU9v6Rd3CO0ZQIVNfwzuOym8QT0sLvUk4ACmXIGwXJsR
EUZIrBycPnL/RxHDgZ4RndGoJykwIu9AIKzFJc/N1SkH0eqFV+ryRzMwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMvuwoWxdO6TY96ZgJV6ne/LFs8MB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxfy3aXK
nNnfvm2hBAQiOfuJc/+fzXEJINVEfto5xr/bG+Yhy1L2aiK9H8pGPe9ha/hLlfJ8
sCYGCVDJdwopUZ+OJ/ivrOz+BJbR2cNmq+tfN4eDrLpcGl9r5UVtUR8lLwTK8Lvh
Yx6wFNJ+H7eEYrkmZg7/18sEtu9uMAUe7M0NGCYCyTg6AE1ioxy4hQWGaPBIjsPb
ujPMuEcwy73N5/aS3o/cw8p/fHjyMQEsOyN7nxApGICO6EUgS4qmBLDsDLDQ6yji
0w4r4T8btcv4KzsT/c9jZrj2SOChrghxmzajaq/UiSzzigbI/kTsePHmZaK3jq1g
H6+h5wgKQXuZpw==
-----END CERTIFICATE-----
Generated at Sun May 19 07:09:29 2024 by rpki-client on console-ams.rpki-client.org