Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          7eaQP+AAtzVevhs/1eyV/a4cFbySkCI8P4M9LooxBYU=
Subject key identifier:   BF:AD:4A:A8:7B:D9:5F:8C:7D:35:9B:01:F1:8A:02:E4:BB:10:34:19
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       018F877F2A2536EE53DF0CD5B573D8B146B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 17:00:09 +0000
Manifest this update:     Fri 17 May 2024 17:00:09 +0000
Manifest next update:     Sat 18 May 2024 17:00:09 +0000
Files and hashes:         1: FeTp24wy4fnE-L9j1NV3Xf67GYU.roa (hash: ltn6Xic1raUjJKSr/NAl8SOLlc/8faxZUHvmGzdClQk=)
                          2: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: wizSXSzJdlqotEm5MkXq7K+yYSNYVmBhlYKopjSAkYU=)
                          3: bZjB-YUnh_aOTklfIJ_7uzsbjQo.roa (hash: ICLwRWnMNjTZ26ziF9ZZtK9h/aTNp+xEnb8XqsQpOJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2a:25:36:ee:53:df:0c:d5:b5:73:d8:b1:46:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: May 17 17:00:09 2024 GMT
            Not After : May 18 17:00:09 2024 GMT
        Subject: CN=bfad4aa87bd95f8c7d359b01f18a02e4bb103419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:b3:05:0d:42:df:60:c3:d4:6e:cc:4d:53:
                    55:be:41:f2:71:57:b9:ff:89:73:56:e9:e3:f7:49:
                    b8:49:25:98:24:ef:13:69:55:8c:9e:5c:b0:fd:07:
                    08:58:01:90:e6:53:97:37:30:ac:2d:bb:98:35:e0:
                    e8:12:be:8c:c5:be:31:3a:26:3e:69:4d:ee:cd:cb:
                    06:b8:a4:44:9c:ad:64:b5:e7:a4:0c:03:96:fd:4d:
                    37:0d:e2:0a:92:95:14:26:16:90:9d:3c:28:e3:83:
                    60:47:0f:eb:3c:48:9b:10:82:77:12:ba:a0:a8:2f:
                    58:ca:76:9e:bb:b2:05:8b:1a:2c:4c:6f:67:57:eb:
                    f1:54:30:4a:b1:e2:1c:63:45:d2:7d:c7:72:07:d2:
                    d3:e2:3f:34:07:d6:7a:2c:56:e2:73:86:10:56:68:
                    bf:57:98:85:cf:84:96:39:f7:bb:73:43:bf:62:f6:
                    fe:d7:76:5b:75:c6:d6:4c:7d:62:3b:da:ac:8c:ae:
                    9f:bb:f5:32:bc:fe:41:0f:31:f7:51:24:b9:15:eb:
                    97:15:f9:5f:76:0d:5d:ad:c0:a5:e5:6b:df:a7:50:
                    70:ce:c5:1b:0d:e5:0b:8a:ce:b4:4c:61:65:a3:78:
                    32:82:17:67:2e:d9:d3:1b:6c:a9:a1:5a:f6:95:46:
                    c1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:4A:A8:7B:D9:5F:8C:7D:35:9B:01:F1:8A:02:E4:BB:10:34:19
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:db:cb:11:67:c6:6c:2b:d8:ce:72:2d:29:78:10:34:4a:
         b2:ae:6d:9d:5e:0f:d7:47:26:3f:4a:d5:14:f4:5b:58:c1:ae:
         84:10:a2:40:f9:a8:e1:f4:2a:f1:11:e5:87:a8:77:14:b8:16:
         2d:e1:41:08:86:c9:0e:9b:2a:7d:9a:fe:31:87:45:2d:3a:73:
         eb:00:5b:93:bb:a7:c4:61:28:55:54:51:9d:01:af:80:5a:6b:
         f8:d6:45:35:63:13:d3:8c:63:f0:ee:63:90:8c:ed:57:2b:0a:
         a4:45:6d:3d:21:e8:a5:57:eb:2c:20:04:28:8c:70:2f:b5:32:
         d4:98:31:c5:10:c5:c8:30:d1:9f:08:87:9a:10:8b:0e:ed:84:
         3d:be:34:d3:4a:b4:78:a1:02:64:6c:e8:17:d3:f1:00:6f:d3:
         a2:78:a8:e5:81:29:13:ab:b9:8b:2a:34:46:a0:e6:6b:06:23:
         9f:c6:78:39:c7:b2:d6:f3:18:8a:86:07:da:d7:96:8d:a4:42:
         39:8e:65:56:90:78:30:0e:c7:7b:14:2a:08:cb:bd:76:49:97:
         35:56:c7:2b:dd:16:32:55:ff:04:e9:e6:60:02:30:45:9d:f6:
         d0:d9:83:6f:e3:1e:b9:d9:fe:25:98:e1:93:a2:ca:9a:f2:dd:
         4f:1d:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:51 2024 by rpki-client on console-ams.rpki-client.org