Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File:                     N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier:          tv5OOM7FiEKEumJCyZaXqIXJlAYMcGGnGqxUu2TAIKc=
Subject key identifier:   0F:B4:9A:D3:8C:BE:B8:53:62:A0:1B:58:8C:27:05:52:A0:14:DC:D1
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer:       /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial:       018F83D9486A651422BCF8E5EB5DF47B7834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number:          0E7A
Signing time:             Fri 17 May 2024 00:00:05 +0000
Manifest this update:     Fri 17 May 2024 00:00:05 +0000
Manifest next update:     Sat 18 May 2024 00:00:05 +0000
Files and hashes:         1: 7dDQGw-dcFcI5ogEriPs0r5IlZM.roa (hash: Vgf4tol51H8cbiE0rjMM+KL+AGkzMGQ4P2Qf1vYc0xY=)
                          2: CX0GYCSug4Pralm5hmRpGYanFQE.roa (hash: HVLIbPuFzQV19BRWDMPXqnic/lL8pdcGi1gSK355Syk=)
                          3: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: S0TF2PFTPJVGnt5SMPRR7Pt6w2tcSFxCi9wIrr9CRf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:48:6a:65:14:22:bc:f8:e5:eb:5d:f4:7b:78:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
        Validity
            Not Before: May 17 00:00:05 2024 GMT
            Not After : May 18 00:00:05 2024 GMT
        Subject: CN=0fb49ad38cbeb85362a01b588c270552a014dcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:26:c3:15:5b:74:1e:29:a0:5d:4d:22:14:
                    86:ea:12:be:69:b8:30:7f:97:a1:1a:fc:cf:b0:ef:
                    64:be:1c:ae:42:0a:aa:c3:de:0d:5d:ea:83:26:59:
                    8e:d4:47:f5:b3:b5:15:69:5f:5a:d6:82:3f:39:a0:
                    4d:31:66:d3:4f:b7:3c:db:a5:64:07:9a:38:67:1b:
                    3b:c5:32:00:5e:d9:ee:9c:23:c1:3b:d1:89:5c:3e:
                    4c:a4:79:8f:08:20:8f:32:ed:ca:cd:05:a3:ea:30:
                    fb:cd:0f:67:ad:ab:f6:7e:e4:6c:b6:74:1b:84:73:
                    57:9a:cc:f0:68:45:f1:1c:44:c7:b4:ea:70:c3:31:
                    5c:52:c3:3b:01:b4:f8:9d:f7:c4:df:97:9f:11:3f:
                    32:10:6e:7a:4e:69:b1:fc:58:e6:49:fa:27:3a:b8:
                    67:cd:c9:47:ef:4e:7b:fc:f9:31:bd:45:5b:d4:ab:
                    2d:bd:8f:95:fc:ce:29:2f:bc:88:1c:0b:f9:68:bd:
                    9a:d9:62:89:77:ed:e9:14:ca:01:9e:ca:74:2c:14:
                    5a:de:ea:f7:d4:0f:33:e4:93:f8:f8:70:75:a3:4a:
                    3e:a9:56:54:e9:fc:9e:c7:6a:c7:d0:8f:03:b0:ed:
                    79:79:56:80:20:13:9b:35:6f:1b:2f:1b:88:8a:10:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:9A:D3:8C:BE:B8:53:62:A0:1B:58:8C:27:05:52:A0:14:DC:D1
            X509v3 Authority Key Identifier:
                keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:56:2c:a4:b7:dc:54:62:f9:3c:45:5f:d6:8e:9a:be:b6:66:
         d3:b6:10:71:88:89:e6:5b:f0:66:2d:50:32:2c:86:c3:3f:2e:
         47:7d:f9:9c:f6:4f:c1:42:0d:e6:3e:4d:a8:21:c9:f8:f8:62:
         74:e1:83:f8:dc:91:6b:82:b6:5b:c5:53:bd:0a:86:b5:9d:c7:
         a0:a4:67:fb:ff:7d:a5:03:6c:ef:07:1d:c0:61:c0:ad:e0:78:
         28:d6:be:e6:05:0e:ad:a4:51:8a:e1:1f:dc:b1:da:c7:ae:1b:
         ec:68:4a:c7:05:f6:6a:c2:84:b4:92:b1:b8:13:97:4b:b8:84:
         a2:b7:a6:c6:47:63:7e:de:a4:16:f2:f5:16:26:b4:81:a9:b9:
         b0:94:19:01:64:6c:d7:d8:ba:24:83:2e:c4:85:63:4c:94:7f:
         bb:52:21:94:f9:0a:33:92:36:b1:2e:d1:fe:fd:27:63:7e:0c:
         19:e0:d2:e8:3c:e6:04:2d:12:09:fe:a7:9c:ae:a2:ad:e3:59:
         ac:c8:3e:a7:70:df:2f:7d:cc:93:58:90:71:14:90:f3:ef:99:
         7c:92:21:b8:bf:3e:3f:db:68:eb:27:af:33:b0:31:4e:80:5d:
         35:2f:32:f9:9c:af:c7:48:25:4f:a0:e9:36:7b:e9:3a:fc:99:
         9e:ff:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:11:52 2024 by rpki-client on console-fra.rpki-client.org