Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File:                     nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier:          s4NxTJ5ocuMG5yb91hytMKU8gt6dDynQjzh6Dg4cbZE=
Subject key identifier:   FB:D3:D5:D7:8D:71:23:02:7A:8F:4C:39:91:CC:1A:81:4F:FC:30:37
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer:       /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial:       018F877F4C174C533ABE720A7892E5115800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 17:00:17 +0000
Manifest this update:     Fri 17 May 2024 17:00:17 +0000
Manifest next update:     Sat 18 May 2024 17:00:17 +0000
Files and hashes:         1: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: y1NMOD0OaffWdPWfwtOR3qTblzgY9hQf+HbxuUoiCfA=)
                          2: v0S8scgTHiX46HbSMnUehC6TDOA.roa (hash: Yty/gkJZGnPVv38cykygNJxBkFZdmoL5tuJQxsvTakc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4c:17:4c:53:3a:be:72:0a:78:92:e5:11:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
        Validity
            Not Before: May 17 17:00:17 2024 GMT
            Not After : May 18 17:00:17 2024 GMT
        Subject: CN=fbd3d5d78d7123027a8f4c3991cc1a814ffc3037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:2d:a0:3e:19:bb:3a:3c:eb:c5:07:91:6f:
                    62:f5:35:65:8e:53:9c:07:9b:47:15:73:93:23:34:
                    7d:26:02:2e:80:a2:88:30:5b:57:b3:d9:82:33:69:
                    bf:cf:51:96:74:4f:9c:11:8b:18:48:71:11:6f:2e:
                    76:c4:3a:73:e2:e0:88:f4:f9:0d:b0:09:f9:50:59:
                    c7:80:e0:20:d1:05:ac:19:2f:9c:28:6b:ee:ae:0f:
                    a9:7f:66:62:9d:2e:9f:3e:75:d4:80:b2:4c:a6:66:
                    52:bf:b3:60:22:92:e3:fb:bf:b7:19:c2:83:6f:f0:
                    cd:08:be:26:16:1e:61:7e:4f:f2:f0:da:0c:3a:fd:
                    a9:61:f3:cf:1c:28:85:71:98:b0:68:ad:9c:d9:03:
                    e5:d0:30:2c:11:a7:3a:e4:64:a0:43:4f:fc:99:48:
                    93:2d:ed:ca:56:1b:cc:5d:0d:34:c1:24:48:3a:9b:
                    36:aa:57:f1:45:ac:8b:38:04:97:0c:40:76:10:c4:
                    69:ae:d7:a7:2e:ba:97:45:c3:7a:21:b3:b3:82:51:
                    b1:4d:16:11:2d:43:81:52:c8:e8:c4:0a:7c:d4:3e:
                    83:1a:59:2e:3e:1b:c3:d3:20:74:ba:87:31:68:f6:
                    35:76:44:70:57:8b:c0:dd:33:7e:ba:ad:c8:20:b5:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:D5:D7:8D:71:23:02:7A:8F:4C:39:91:CC:1A:81:4F:FC:30:37
            X509v3 Authority Key Identifier:
                keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:10:05:1d:ed:bb:24:49:0e:95:1b:fd:16:c1:cf:94:99:
         63:c7:1a:26:c8:4a:51:08:8c:81:d9:0b:42:cd:be:08:4e:d0:
         1e:95:6d:7b:93:2c:29:c6:89:ec:d9:7c:51:36:12:39:d1:d3:
         37:66:2b:45:80:b0:85:23:d6:3c:82:5f:f2:c2:fb:20:a8:63:
         6f:da:3f:ef:8e:f9:35:f4:5a:2c:5c:03:65:7c:f2:c6:f1:cc:
         a8:f4:f6:0d:00:9b:34:b8:d6:81:a4:a9:14:47:f9:e8:7c:0c:
         24:5b:53:d5:28:50:5f:c9:04:98:93:aa:d3:72:60:4e:16:c3:
         88:47:cb:b3:0a:41:4d:79:d0:65:f2:07:95:e8:36:89:0c:46:
         09:f4:62:68:6d:77:22:f2:9b:bc:59:97:46:84:db:2b:8e:9d:
         8a:b4:98:22:d6:22:ba:d1:ed:b9:5a:3f:0a:25:22:1d:50:5c:
         1c:ec:9a:e3:9c:6f:6e:cd:da:19:6b:f9:5f:a4:f7:40:ae:23:
         e1:04:5e:ea:cf:3d:28:07:f2:15:11:7e:af:98:93:0d:da:d2:
         94:31:1d:28:ec:c5:62:8f:04:5f:36:d4:a8:0b:9f:12:4b:e1:
         24:fd:4f:24:fb:7d:d6:53:ff:b4:f3:63:d5:0d:ef:d0:27:2a:
         22:b0:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:12 2024 by rpki-client on console-fra.rpki-client.org