Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File:                     nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier:          uvS9ZJiickAOa4U8TZuFZTrygypIm62x0hLld7453n0=
Subject key identifier:   4D:05:1D:88:12:50:F2:9B:DD:36:38:C6:1D:1C:A9:A9:F2:0E:88:67
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer:       /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial:       018F86A3F67EC9009D6D456C249F4380E896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number:          1187
Signing time:             Fri 17 May 2024 13:00:43 +0000
Manifest this update:     Fri 17 May 2024 13:00:43 +0000
Manifest next update:     Sat 18 May 2024 13:00:43 +0000
Files and hashes:         1: dKbxlOmsWGzLro9QYmiDOGiXvLA.roa (hash: CrXpAfGCbwvAWSAQGFKbLElZvxiksDEx09fDLaZ1+zs=)
                          2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: AI745OKhfo1zlII4Y3nVJG7RXGUN/Xnv2NfHte3Vx6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:f6:7e:c9:00:9d:6d:45:6c:24:9f:43:80:e8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
        Validity
            Not Before: May 17 13:00:43 2024 GMT
            Not After : May 18 13:00:43 2024 GMT
        Subject: CN=4d051d881250f29bdd3638c61d1ca9a9f20e8867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:70:ee:84:a6:b7:5e:87:2a:6d:b4:7d:0e:d6:
                    f4:c4:e1:41:2a:d9:0f:7b:79:a2:3d:37:03:dc:c9:
                    1d:e7:c4:bf:63:36:34:64:18:e0:cf:b1:0c:21:1a:
                    21:b3:3e:18:f1:ab:54:70:79:8e:e2:49:24:5a:ad:
                    a3:59:7e:e8:22:75:27:52:5b:d3:82:d2:5f:36:c0:
                    68:35:ed:2e:5e:c1:5d:e9:72:e8:48:71:d6:85:94:
                    b1:1d:ad:8c:21:9f:63:9d:03:1a:3c:d1:3a:89:28:
                    16:e2:0c:9b:63:1e:9f:dc:4d:5f:05:52:0f:ab:54:
                    d2:bb:f8:4c:eb:cc:8b:af:2e:ed:d0:78:c2:a4:9e:
                    c3:ed:9e:8e:a3:21:62:01:33:96:32:54:1e:5b:f4:
                    dd:11:3d:03:b6:43:eb:46:0c:98:9e:f3:39:5e:ea:
                    f6:75:99:50:bf:3f:8d:97:c3:89:6e:f2:8f:f7:84:
                    34:ea:3b:2d:7d:e6:24:3e:28:fc:48:f3:c7:32:4d:
                    93:2f:6f:e6:e0:16:97:42:92:38:9c:21:87:c4:ec:
                    8e:7f:0a:07:88:00:5d:99:6e:0f:6d:a7:d9:73:1b:
                    c8:5e:fc:83:61:91:43:94:e2:a2:25:ab:5a:3f:34:
                    92:c1:30:e7:57:5a:b3:6e:34:45:b4:f3:05:02:f7:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:1D:88:12:50:F2:9B:DD:36:38:C6:1D:1C:A9:A9:F2:0E:88:67
            X509v3 Authority Key Identifier:
                keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:41:8f:fc:d8:ab:04:40:8d:6f:c8:de:ea:ba:0d:8a:ab:
         ed:c1:d1:34:ab:60:83:f2:c4:cd:59:9d:2d:32:1d:14:62:e4:
         10:03:9e:a5:a3:cb:9f:ee:81:13:a9:89:2f:5e:f8:08:ec:2e:
         ce:d6:a8:d6:53:b2:5c:d8:32:70:ec:61:f0:fc:95:a0:54:82:
         70:68:fe:a7:68:30:ea:5f:ee:fe:f9:cb:dd:f7:fe:46:8b:73:
         a8:4e:4a:f4:28:0c:2f:eb:e7:d5:74:2d:90:0f:a2:d4:98:b5:
         5d:13:ec:46:9a:ce:d6:10:34:87:b8:7c:51:2d:6e:32:3b:3d:
         0e:db:a7:0b:48:77:c7:ac:9b:11:b7:d9:b5:b2:8a:13:e3:0d:
         3b:44:1e:52:85:44:5c:f4:4d:e9:20:de:23:0a:f4:44:ca:43:
         f6:0c:ea:aa:c1:75:57:54:8a:74:97:5a:ea:db:f1:e9:cd:c5:
         d5:7a:ae:f4:f0:3b:da:a8:03:e9:13:a8:40:23:d4:7f:cc:23:
         42:63:88:3f:39:d0:3e:2d:b4:e6:1d:dd:11:57:a2:9e:77:85:
         5b:5a:39:e5:da:03:55:67:3f:f9:14:c8:3d:56:42:99:ac:26:
         37:9b:47:d2:4b:02:08:d8:3d:b3:82:b3:35:54:31:13:af:48:
         dd:7c:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:11 2024 by rpki-client on console-fra.rpki-client.org