Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File:                     m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier:          /1pIt0nHwIbruDG6sztU+aIOdQzHon2WMgBmQ3m3cQs=
Subject key identifier:   7E:B8:F9:41:36:BD:31:4A:AD:96:33:45:1D:AC:21:FD:F3:BA:B8:13
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer:       /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial:       018F874A53DD96176A19B5E6CB3652EBD192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number:          0562
Signing time:             Fri 17 May 2024 16:02:26 +0000
Manifest this update:     Fri 17 May 2024 16:02:26 +0000
Manifest next update:     Sat 18 May 2024 16:02:26 +0000
Files and hashes:         1: UyywyPkaNA9IpHwp-y1p5SZFhf0.roa (hash: T0isqaDgigjeK08c0LqyjoF9nNlC/TKbY6Zrka7cAPU=)
                          2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: uSzhF1wIMtcSzw/MjYhyo4OoE3wpq3NLtbtEJGfXeF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:53:dd:96:17:6a:19:b5:e6:cb:36:52:eb:d1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
        Validity
            Not Before: May 17 16:02:26 2024 GMT
            Not After : May 18 16:02:26 2024 GMT
        Subject: CN=7eb8f94136bd314aad9633451dac21fdf3bab813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cd:2b:93:ed:cf:7f:64:d8:16:c7:e8:ee:6f:
                    0c:fb:0a:60:c0:46:bc:46:36:bc:5b:f4:90:de:89:
                    d8:57:43:0e:52:64:97:14:45:ad:f9:03:e3:44:eb:
                    0f:b3:02:3a:8b:da:a5:1b:22:36:d5:20:3a:6c:e8:
                    fe:c1:2b:b4:43:61:94:ff:9e:1e:3e:77:14:dc:09:
                    58:35:40:3e:59:a3:98:cd:e3:00:e9:bf:e2:d4:75:
                    09:7f:aa:0c:9b:7a:04:12:4e:e6:4d:42:d4:52:80:
                    41:ef:44:dc:f3:1d:71:8f:d5:30:fe:ee:e8:cd:d3:
                    b2:4e:b0:bd:6e:34:a7:25:09:7c:49:98:57:eb:cc:
                    bc:d4:c6:60:9d:24:b6:7f:3a:69:2e:b2:2e:2d:c5:
                    89:57:4a:00:99:24:2d:7b:98:b5:ef:07:61:23:5e:
                    4b:68:5a:14:82:5a:8a:1c:68:90:d2:27:38:1e:1d:
                    72:c4:78:78:fe:ca:53:27:9b:66:2d:c2:92:7a:e1:
                    d5:cd:73:e6:7a:a0:65:da:37:b9:3f:4e:f3:56:ff:
                    ed:21:ee:68:4a:4d:10:59:eb:41:7b:cb:e6:11:9a:
                    39:13:a6:4a:1d:1c:d2:c5:23:97:7d:54:15:dc:95:
                    47:92:24:2c:13:b3:a3:f4:60:c4:97:ce:5e:7b:72:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B8:F9:41:36:BD:31:4A:AD:96:33:45:1D:AC:21:FD:F3:BA:B8:13
            X509v3 Authority Key Identifier:
                keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:76:25:79:ca:4c:4d:ec:54:21:1e:28:1f:a8:72:b0:76:
         92:f9:ea:02:ef:ed:db:2a:dc:cb:e0:b4:46:28:7e:f4:7f:7d:
         15:3c:0a:a4:79:e8:86:dc:ee:e9:61:1a:6b:98:e7:97:91:09:
         7f:49:93:8a:83:c5:b3:8a:ec:37:01:87:18:08:1d:a0:c5:47:
         55:8c:3e:5c:33:d9:c1:b6:51:b2:c7:14:2b:5e:e1:0f:a2:ed:
         3c:16:d4:d1:fd:75:54:4d:a6:ed:f6:f8:a3:d8:16:e3:5b:da:
         64:b5:85:6e:1d:a4:6e:99:30:57:ac:29:ca:5b:b1:2c:69:95:
         a2:81:7c:ed:da:fa:f8:75:b2:86:ad:3a:4f:b3:69:2a:32:20:
         3a:d2:7a:5e:66:25:aa:c6:de:94:35:5a:bd:ec:18:1b:01:55:
         6f:be:53:7f:a5:e3:09:58:8f:41:94:ce:bd:2e:85:5e:2d:d9:
         91:d8:ad:16:47:2f:a5:e6:ee:f8:9b:16:ef:14:56:68:1f:6e:
         7e:ac:66:6e:60:d5:74:8e:dd:aa:e5:cd:e9:b7:22:24:87:c4:
         d3:b0:61:b7:b2:1e:3e:82:0e:38:29:e4:e3:2a:d1:fa:80:28:
         00:a9:87:c0:20:ae:2e:8f:ff:83:d9:9a:90:af:6f:0e:24:3d:
         67:42:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:35 2024 by rpki-client on console-ams.rpki-client.org