Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File:                     njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier:          16arLKhKdjPMVZYcbeLoAbehNw7IgXVlBtjzMaCmkng=
Subject key identifier:   C1:18:7B:9F:9A:9B:45:E0:15:BA:8D:92:35:70:82:B8:99:E1:8E:56
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer:       /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial:       01902FBAC4B28EC852E0F33E732CA7509DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number:          0EFD
Signing time:             Wed 19 Jun 2024 09:01:27 +0000
Manifest this update:     Wed 19 Jun 2024 09:01:27 +0000
Manifest next update:     Thu 20 Jun 2024 09:01:27 +0000
Files and hashes:         1: ZQuc3eiJ_pjnCfm4KPAujnCUyPY.roa (hash: AxM2gnlWDlR2cqh64pu8Bmxv3mingG1abjHAS+j2Q/s=)
                          2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: NTLYv+yFMIchso6CPGmor9FfG4FKdqAlgiHBEGheTOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2f:ba:c4:b2:8e:c8:52:e0:f3:3e:73:2c:a7:50:9d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
        Validity
            Not Before: Jun 19 09:01:27 2024 GMT
            Not After : Jun 20 09:01:27 2024 GMT
        Subject: CN=c1187b9f9a9b45e015ba8d92357082b899e18e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:00:3e:f9:f6:c9:09:bc:60:e9:37:33:d2:
                    44:fa:ef:72:55:df:b5:e1:2b:10:c7:c0:f4:ba:5f:
                    e1:f5:5b:33:fa:40:17:2f:f3:c8:67:fb:03:aa:53:
                    84:a9:c4:ca:09:01:90:e4:0d:f5:1e:97:76:79:ef:
                    a7:92:0f:fa:0a:b1:93:f5:1c:71:2a:ee:17:fe:98:
                    36:1e:d1:b5:ed:0b:50:5f:e9:ca:ec:13:a7:6e:80:
                    a1:f8:ab:6d:94:7c:39:1d:da:8e:6a:57:09:2c:90:
                    1f:8a:d3:78:6e:d8:60:5e:b0:fa:71:ad:10:27:99:
                    40:fc:89:3f:4f:17:88:63:c5:4c:6e:af:5d:3a:fa:
                    4f:ff:6e:d7:25:87:0a:f7:55:28:25:8f:d0:b3:6a:
                    f0:55:52:20:dc:75:db:8a:21:e0:4f:35:57:a9:91:
                    12:63:42:0b:51:ae:bc:cb:c6:31:6a:71:f3:91:dd:
                    5a:3f:25:5c:24:46:08:b0:ea:b7:82:a1:b9:31:32:
                    1d:d5:6d:81:fc:b0:40:61:e4:9e:0c:0d:0d:95:f5:
                    2e:bb:f9:9a:33:8b:62:2d:1e:cc:26:a5:ea:c3:a0:
                    d8:2c:b0:20:0e:01:3f:c0:ef:e8:e8:b8:30:15:34:
                    77:6c:4d:cb:89:6f:ce:94:a5:1b:e3:f1:de:a4:fb:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:18:7B:9F:9A:9B:45:E0:15:BA:8D:92:35:70:82:B8:99:E1:8E:56
            X509v3 Authority Key Identifier:
                keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:34:6a:d3:19:91:fa:f8:88:b4:64:f1:6a:24:cc:e7:3a:bb:
         59:a3:ba:ff:6c:01:79:52:7b:5d:ac:02:94:60:c0:cf:a6:e8:
         0f:17:9c:4b:11:cf:ef:a6:7a:6a:95:11:a7:1b:b2:d3:40:e5:
         fa:eb:ac:a7:65:5c:d0:fd:c4:52:9c:f8:1f:4a:af:c1:72:98:
         94:0a:de:35:8d:e4:89:51:0c:b4:e3:a0:68:1f:fd:aa:cc:5a:
         4c:91:ba:9f:d1:7e:58:fa:88:1c:1c:86:78:a1:ed:d7:52:a2:
         42:77:27:60:3c:8a:bb:6a:41:86:ba:68:6f:f8:7a:9b:42:1c:
         dc:1f:04:d5:c2:e4:2f:7e:4e:50:5e:76:21:46:03:78:0e:cf:
         a2:d0:01:65:d5:95:78:53:40:e5:87:10:54:3b:2e:bf:16:f0:
         b7:59:d9:17:c1:30:c2:74:0d:61:0d:d0:24:b8:90:48:7d:ab:
         fe:9e:a5:c8:31:3a:53:2f:65:20:41:1e:22:aa:b1:f1:84:86:
         14:bb:af:d1:ce:a9:f8:5f:47:3b:45:9a:e4:c8:88:6f:69:dd:
         43:06:0e:59:49:f6:d0:f5:15:61:d9:11:b1:5f:d8:26:be:ae:
         1e:d4:f6:7e:3b:55:3d:72:3a:13:38:80:cf:5a:1b:e0:ae:dc:
         9b:ce:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 17:49:56 2024 by rpki-client on console-fra.rpki-client.org