Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File:                     NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier:          zCj4juk/SjOgVl/LWgea16Sk0wzmXEut5xj4kUvhIr0=
Subject key identifier:   F7:E6:DC:61:3A:1A:F1:F5:C9:84:00:8F:2A:1D:EB:3E:CD:3B:91:C6
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer:       /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial:       018F8748F5FB1DE37798CBB592F1619CF351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number:          0554
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: I3P-1JDt-ma40qgbCfRMi1GO9Tg.roa (hash: /jSSWOSASybJeOp0KI7FVJCVhNtjnFG7CWxxqpOJfkM=)
                          2: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: AocVsRrjAFG7/IA9wNNygLfwPU4ou17iBa7yuhR9t3E=)
                          3: jx4vfHZ6Iu5vlAP_0vleiEEMGkE.roa (hash: a3HqUHsrBCmWeZA/q1a9oUEINmIY/+BAooVjVAKyDwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f5:fb:1d:e3:77:98:cb:b5:92:f1:61:9c:f3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=f7e6dc613a1af1f5c984008f2a1deb3ecd3b91c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:50:3f:be:40:12:2d:e0:1d:60:e7:02:31:
                    70:93:98:f6:d4:fc:01:66:11:49:28:54:74:6a:4d:
                    36:b7:05:81:a6:c5:89:95:58:64:94:56:16:64:0f:
                    3d:98:ba:d6:ae:de:a1:50:3d:22:74:8e:03:da:95:
                    89:ed:ab:7f:9e:ec:1e:73:01:cb:c0:eb:78:d6:64:
                    13:85:43:75:50:2c:aa:b0:75:24:3e:fb:75:fe:ec:
                    99:c4:e7:4b:12:87:38:33:dd:8f:8c:9d:e1:c6:e9:
                    82:de:72:ae:db:71:c4:0a:6b:f3:58:89:37:12:e5:
                    17:b9:21:a4:ec:c4:98:68:43:e1:c2:c8:18:36:5e:
                    1b:7f:58:fd:ba:e8:2c:ab:5f:fe:1b:3f:5a:9d:bf:
                    78:98:93:04:3a:9b:ca:57:dd:c0:0d:c2:18:91:eb:
                    3c:5a:7d:17:96:15:90:7e:d7:51:5d:a6:11:dd:46:
                    99:64:16:d4:5f:8c:8c:03:46:80:07:be:77:a9:11:
                    c6:69:3e:fb:69:93:c1:57:21:e2:79:b3:b4:90:c8:
                    de:2d:ae:b9:90:52:dc:24:98:9b:b2:ff:bf:09:8b:
                    70:dc:7c:6d:64:3c:e7:32:08:0a:ca:54:c4:72:81:
                    5d:38:53:42:db:35:f6:8b:07:5e:90:4b:7e:7c:5e:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E6:DC:61:3A:1A:F1:F5:C9:84:00:8F:2A:1D:EB:3E:CD:3B:91:C6
            X509v3 Authority Key Identifier:
                keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:70:75:72:6b:da:28:75:a1:c0:0c:dc:1d:8c:5f:02:d2:1c:
         ac:9a:15:b4:d2:64:e9:68:fd:e1:02:33:01:d9:d6:2b:69:78:
         c5:f5:4a:84:40:4e:e7:92:3c:c8:19:78:7b:a8:4b:f7:9c:51:
         e8:60:9c:00:4b:cd:ba:8c:96:c7:09:6d:d0:28:7b:db:21:e6:
         a0:e6:eb:ef:3e:c0:da:04:57:b8:61:9b:88:a0:88:04:b0:8a:
         fd:f3:c0:60:4a:19:8e:56:ec:a4:81:f0:bc:5c:ac:18:54:fa:
         2f:58:60:0e:18:f8:05:a3:17:40:73:d7:9f:67:df:78:1b:45:
         8f:94:77:c0:d2:da:e9:09:53:10:c9:55:46:f3:07:b6:52:be:
         6b:00:14:f1:7e:fc:a4:ff:e0:03:a1:19:60:62:04:19:2a:1f:
         c5:d9:b6:7b:72:f8:0b:8d:ba:c9:c0:61:8a:ff:ac:79:c3:c7:
         c8:7a:24:f6:c5:24:bb:03:1f:b3:d5:d2:6a:7c:bd:85:a5:bc:
         5f:b1:08:de:5b:26:fd:24:3b:ac:4d:f5:cc:88:04:be:0b:fa:
         4b:1d:c7:93:c4:77:c1:1c:bd:b1:6b:42:55:cc:e2:aa:0d:40:
         c7:96:b2:7e:81:4c:dd:a7:99:6f:d8:39:0b:45:b4:7e:d0:bb:
         a7:5b:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:05 2024 by rpki-client on console-ams.rpki-client.org