Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          QjwbQVR0PLoYBqwqrClZ0MQp//TCE2OSoU8OnRtIp4I=
Subject key identifier:   A8:EF:C5:EF:8F:68:38:00:3F:B8:05:06:05:44:42:00:A2:43:5D:B4
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       018F87492ADD8CA3A98D119A47B2F9421AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          093E
Signing time:             Fri 17 May 2024 16:01:10 +0000
Manifest this update:     Fri 17 May 2024 16:01:10 +0000
Manifest next update:     Sat 18 May 2024 16:01:10 +0000
Files and hashes:         1: O0E6RR3f6pz6EiWVa7MtUL2X8lA.roa (hash: PFVDGSuZeO4ixIFmHC8Gz67dV331gA+s565MxUvC1y0=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: JdepdEGJJ4EoIj6ZyuzwXpHP/lNS4P4fM5vA1by7P3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2a:dd:8c:a3:a9:8d:11:9a:47:b2:f9:42:1a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: May 17 16:01:10 2024 GMT
            Not After : May 18 16:01:10 2024 GMT
        Subject: CN=a8efc5ef8f6838003fb8050605444200a2435db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:ac:65:64:66:14:c7:b4:0b:c4:8f:8f:68:
                    a1:20:00:63:a4:62:f3:4d:2b:54:cb:69:bc:6a:b1:
                    c0:f7:59:47:ac:da:ea:4b:43:73:d5:2f:91:11:60:
                    04:da:e7:05:67:c0:99:6e:8b:54:f3:d8:a2:e9:53:
                    38:5e:7a:05:f8:7b:1b:a3:8d:68:85:eb:ff:97:d3:
                    2f:1e:ca:06:f2:66:95:9a:ff:99:12:20:ed:bd:69:
                    23:60:ba:48:7e:da:79:52:da:e3:f8:82:db:6a:02:
                    8e:04:37:9f:04:9c:8a:a1:f0:38:23:86:7d:5a:f5:
                    1c:01:14:bd:c2:d9:f3:eb:a6:c4:98:33:13:f4:55:
                    26:50:38:f7:4b:95:11:86:56:37:2c:03:3c:bc:d9:
                    d4:9d:5b:67:0d:51:82:8e:48:4c:bc:41:63:ad:f5:
                    b2:1f:5f:31:6e:05:14:83:84:ff:25:9b:f8:1f:41:
                    d3:7c:bd:55:3c:27:fe:0b:b7:35:d2:03:5e:37:d2:
                    2b:17:45:8f:ba:f1:49:c0:fe:f4:6b:95:17:ac:cb:
                    6d:be:99:bc:e0:73:76:13:3e:e5:a0:81:c0:b6:80:
                    fd:75:f5:32:08:20:48:c2:92:60:f0:77:6a:d7:02:
                    f5:52:f5:90:d6:31:a8:8b:21:5f:fb:dc:90:59:77:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:C5:EF:8F:68:38:00:3F:B8:05:06:05:44:42:00:A2:43:5D:B4
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:3d:ec:00:b9:8e:3c:f3:46:aa:fa:46:06:15:53:3f:99:
         a4:e4:8e:94:11:35:4f:60:5b:d2:d6:c3:3c:c9:17:1d:f5:01:
         d9:fa:b5:c1:14:14:7e:d9:3f:26:fa:df:04:b5:65:55:30:09:
         02:ce:fd:df:9a:af:7a:0c:a2:00:a7:da:91:1e:18:96:ae:ad:
         5b:65:df:23:d4:6e:2c:71:b1:26:45:d6:e9:99:51:6e:91:37:
         21:15:0b:d5:84:75:3f:13:a2:6b:e9:19:6a:27:ce:42:f4:9c:
         9c:ba:45:19:62:a0:f4:1b:bb:63:69:04:9a:f5:ba:16:27:2f:
         17:ae:ac:d1:53:ea:e0:ab:32:99:42:21:27:c1:b3:2e:a3:d2:
         68:f2:cd:0d:81:c4:ce:01:49:74:7c:14:6f:ad:48:5a:0d:4f:
         55:3d:de:73:d2:c9:aa:8d:44:c0:14:a2:0c:97:50:f3:4f:d7:
         73:77:a4:a9:14:2f:12:bf:29:44:9d:da:c2:47:be:27:ca:2e:
         dd:57:57:87:5e:36:c4:5a:cd:8e:75:28:fc:15:59:c4:c9:7c:
         2d:39:4a:6b:7d:ee:c2:31:fc:d9:8c:9c:6d:2b:6d:f8:7b:2e:
         11:01:b3:21:8e:00:3f:3d:06:c4:0e:ba:85:0e:58:87:1f:b3:
         a5:f4:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:40:59 2024 by rpki-client on console-ams.rpki-client.org