Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File:                     nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier:          SDjf0ov/D5XwWJZownrDErFlz3olaJX4g3Bi/6m0Y2I=
Subject key identifier:   A6:D3:35:7E:54:E5:30:5B:2A:8C:F5:78:CB:31:45:82:A0:FE:24:A0
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer:       /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial:       018F8635CABB860AA212320B4F845FD1BF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number:          1067
Signing time:             Fri 17 May 2024 11:00:23 +0000
Manifest this update:     Fri 17 May 2024 11:00:23 +0000
Manifest next update:     Sat 18 May 2024 11:00:23 +0000
Files and hashes:         1: 2z5JKjVIs7MQqY4rzxpryvOJDXs.roa (hash: l3SzRx/NIwODNRgr6IkSurEnzm9qAab6mVKXqxDr/v8=)
                          2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: jRjgtlfQwrGc4RlJbFxWjAdEZYUDsEcJuIOO07SgvNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:ca:bb:86:0a:a2:12:32:0b:4f:84:5f:d1:bf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
        Validity
            Not Before: May 17 11:00:23 2024 GMT
            Not After : May 18 11:00:23 2024 GMT
        Subject: CN=a6d3357e54e5305b2a8cf578cb314582a0fe24a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:31:07:86:3b:5a:eb:d6:74:fe:13:43:41:
                    84:3c:a7:c2:d2:8a:02:62:08:75:a5:a6:82:9a:37:
                    d4:f3:1b:f7:ec:36:3f:e3:b3:f7:8a:3d:5f:43:68:
                    de:13:a7:69:ae:9d:e4:a6:e2:ea:f5:4f:e9:8e:d9:
                    0e:0e:5e:dd:55:2e:33:28:06:3b:f7:23:7a:c0:11:
                    00:33:09:af:61:62:7b:a0:52:ed:b0:75:60:df:1f:
                    a0:b4:e3:66:e1:fd:9c:d1:66:02:01:fc:fb:96:83:
                    d3:8d:df:34:e8:1c:65:c2:b7:ad:59:1a:a8:b2:24:
                    3e:b5:2d:a5:10:31:06:e6:96:21:42:ac:57:01:f8:
                    7b:ac:22:c9:31:45:de:e6:65:f4:34:e4:69:b4:af:
                    bd:2a:13:d6:42:fc:d1:96:e9:d0:81:9e:e7:86:52:
                    c5:3e:27:bb:10:29:e8:bd:fa:21:c6:9a:f6:63:d1:
                    d7:19:27:31:ac:b9:ad:3f:ff:ae:c5:23:4c:5b:66:
                    71:b3:df:5f:4c:9a:02:3e:30:0a:8c:ea:d4:c8:b4:
                    73:2d:c4:76:e9:0a:5c:a3:20:e5:86:e4:f6:79:0d:
                    89:62:13:a3:d7:56:9d:4c:3d:12:d9:d4:8e:df:62:
                    c3:98:7b:fe:a0:22:d7:ae:b4:f3:d1:78:2d:c1:2c:
                    fb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D3:35:7E:54:E5:30:5B:2A:8C:F5:78:CB:31:45:82:A0:FE:24:A0
            X509v3 Authority Key Identifier:
                keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:3a:78:23:5b:f0:10:83:28:b2:37:e7:a8:94:43:c8:39:
         e8:d7:d1:ca:5b:d3:46:9e:8b:ab:94:b9:67:b2:b5:8f:96:ae:
         00:71:81:62:e0:65:bc:fe:49:ae:09:3c:6b:66:31:42:af:35:
         ef:ef:ce:6e:25:76:c0:6a:e0:d1:e1:57:75:b6:92:58:f7:14:
         ea:95:28:2b:7c:ed:11:89:d7:ef:fd:9e:1f:fe:dc:c5:d5:cb:
         aa:f7:32:f9:37:87:96:e4:48:7e:f6:52:56:7f:d5:cb:6b:7c:
         da:3d:c9:6f:9c:cf:d0:04:09:55:04:b1:f1:eb:57:e7:ca:fd:
         13:8b:e7:ca:eb:8e:68:ff:01:2d:ca:63:53:ff:c4:81:cd:89:
         67:e0:f6:fa:47:f8:85:e2:02:28:9d:ac:87:d1:11:0f:c8:75:
         24:43:df:36:27:eb:7e:67:3c:ae:ba:27:71:e8:35:a3:6f:f7:
         fa:09:c2:ee:50:8c:24:e9:42:f9:4a:d2:7c:6e:43:2d:a3:a1:
         93:ee:30:38:df:67:6a:e6:ec:75:4a:29:02:76:b4:8a:90:c5:
         27:3a:2f:5f:15:47:f0:7c:c3:fa:e7:5b:b0:a2:40:6b:1a:17:
         ed:58:fd:37:25:9e:fa:34:f7:5a:85:8d:74:5e:da:d4:62:a4:
         16:01:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:07 2024 by rpki-client on console-ams.rpki-client.org