Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          YTqe++yyCXl4/kfkLtl0r4pDh1mV3rOK/onks1ZnZ4g=
Subject key identifier:   AA:00:37:BD:59:73:00:C5:09:6E:5F:D1:58:BF:9A:5B:13:51:82:AB
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       018F877F2F82C5596CF2C69C7D82C4A2F728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 17:00:10 +0000
Manifest this update:     Fri 17 May 2024 17:00:10 +0000
Manifest next update:     Sat 18 May 2024 17:00:10 +0000
Files and hashes:         1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: RzkE+pNM0Kr79Slhjgwz0Ts1NhYnGoFmWhd7q0aHTjY=)
                          2: ZQpq2AGUvJTb5VR5KHaDG-IWFIY.roa (hash: zJsG9JzTuhIOnURP5WuUUrYKI5S6BY+MeJGEVRBeL90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2f:82:c5:59:6c:f2:c6:9c:7d:82:c4:a2:f7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: May 17 17:00:10 2024 GMT
            Not After : May 18 17:00:10 2024 GMT
        Subject: CN=aa0037bd597300c5096e5fd158bf9a5b135182ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:fe:12:ed:45:d5:24:e0:36:37:d3:46:f3:
                    b6:7f:5e:23:7d:34:19:2f:63:19:99:6b:6d:08:f4:
                    ed:48:fb:e5:e6:16:7c:ca:f9:09:28:53:10:9d:c4:
                    92:df:e2:ee:6e:08:97:6d:a4:b1:7a:55:cf:f9:65:
                    10:8f:90:a7:a9:3f:ea:38:f8:4b:93:1c:1b:6b:11:
                    24:70:db:e0:9f:c4:db:2f:5e:3a:d0:27:d4:82:3f:
                    39:22:fe:a7:1b:fc:02:c9:93:39:dd:e9:8b:4f:09:
                    95:00:fb:14:3c:86:62:45:ae:1e:99:b4:d8:57:7e:
                    57:2a:cd:39:ca:4a:54:e0:df:59:f5:6a:70:7c:a9:
                    80:31:6f:92:65:5a:bf:6f:4b:7f:fc:d3:45:67:eb:
                    ab:67:b5:3e:22:4e:b4:f0:cc:31:b4:81:d4:74:e8:
                    51:30:44:4d:61:5d:3a:75:74:7f:24:db:68:15:5e:
                    c6:0a:b9:c5:7c:fe:b1:34:8e:29:db:d1:a5:d5:17:
                    19:1f:eb:9a:34:5b:f2:00:f3:8e:6d:3d:37:64:f0:
                    71:2b:2a:6e:b1:1b:ae:d8:29:ca:ff:90:8d:ee:d9:
                    8a:8f:57:db:e4:76:24:f4:bc:28:24:f5:1a:59:9f:
                    01:57:f9:5b:67:1e:5c:c3:cc:03:e9:ed:3e:c5:8b:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:00:37:BD:59:73:00:C5:09:6E:5F:D1:58:BF:9A:5B:13:51:82:AB
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:43:8d:4e:22:82:75:1c:68:df:2b:63:0a:15:eb:4c:28:28:
         bc:1f:a0:8f:79:5c:d7:53:26:ea:5c:56:ea:b8:e2:35:d5:26:
         7a:14:b9:cd:06:f2:a3:fc:b8:87:dc:74:26:2b:41:f5:6b:25:
         80:00:7d:58:78:26:07:b9:c5:5f:89:2d:86:71:2d:1b:dd:13:
         a9:7e:83:56:dc:f6:fa:2e:8b:c6:8d:e9:3f:55:58:0e:ab:22:
         eb:f6:d1:f4:22:43:fc:31:c1:1a:b4:2d:e9:e3:a4:98:9f:f2:
         f4:09:33:d2:f0:da:1f:3e:1e:cc:93:97:61:f1:23:31:92:ee:
         18:ac:27:eb:a3:25:27:c6:d8:a5:72:8f:49:cb:78:7e:b4:85:
         64:0e:f1:0a:cb:7f:6e:78:fe:37:95:b8:40:c2:ec:08:fa:34:
         45:81:0b:d8:fc:ba:ea:3f:e5:e7:b8:4d:f6:78:bd:5f:2f:f0:
         a5:5e:d1:82:99:78:4f:2f:89:59:e7:28:71:5e:2e:4a:75:36:
         72:a8:98:22:9d:4e:bb:17:bd:b2:6b:de:5c:d9:15:22:ce:b4:
         09:32:10:17:d6:cc:55:f7:03:02:ab:40:72:87:71:22:44:67:
         44:e9:52:56:dd:dd:a0:64:ea:02:9b:21:63:e2:02:a6:a7:d4:
         a7:d5:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:45 2024 by rpki-client on console-ams.rpki-client.org