Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
File:                     nhiu6P5wNU916m2r-J7Y-UtqHlg.mft (raw, json)
Hash identifier:          MjP1zG2HJbpkXJki6Y/1XtfAteg7PDDbusbiMd9b1/0=
Subject key identifier:   4E:17:4D:FE:61:0F:4C:57:47:93:38:F0:26:EC:06:44:9C:B9:EA:3E
Authority key identifier: 9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
Certificate issuer:       /CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
Certificate serial:       0190964BD26CEE36489E1973012C5A1E50C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
Manifest number:          0F74
Signing time:             Tue 09 Jul 2024 07:01:09 +0000
Manifest this update:     Tue 09 Jul 2024 07:01:09 +0000
Manifest next update:     Wed 10 Jul 2024 07:01:09 +0000
Files and hashes:         1: cBz_sRQynCbyckXVJcll-kLy3ps.roa (hash: RNGhL8+9CctMB8QTeJRUOo4oXE7iUKLUP5FIGjzRKYU=)
                          2: nhiu6P5wNU916m2r-J7Y-UtqHlg.crl (hash: 5LKPrNAHoLy52eTOuQkTEtG+C5J2H9/riWrJPk9WUKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:96:4b:d2:6c:ee:36:48:9e:19:73:01:2c:5a:1e:50:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
        Validity
            Not Before: Jul  9 07:01:09 2024 GMT
            Not After : Jul 10 07:01:09 2024 GMT
        Subject: CN=4e174dfe610f4c57479338f026ec06449cb9ea3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:50:bd:57:90:3b:98:6e:f1:75:d1:82:48:
                    f6:7b:aa:6a:ff:d7:e1:56:a1:21:2b:1b:3e:c4:f6:
                    34:7d:dc:98:af:31:3b:08:0c:cb:fe:4e:ad:31:95:
                    12:81:b4:e2:6c:9f:d6:82:fe:1a:40:03:28:24:76:
                    85:57:9c:9f:a1:4e:a8:5b:44:81:53:89:74:8c:5e:
                    64:d7:5a:dc:68:74:dc:ec:d8:8d:6c:be:ab:b4:b2:
                    3c:6c:3b:13:d3:fd:29:55:0b:0b:9a:3c:d4:09:ed:
                    fd:7e:b8:8e:23:b3:6e:8f:c9:b3:1d:16:0a:aa:3a:
                    0c:7e:5d:f4:08:be:f8:b1:be:b1:33:d5:88:5b:03:
                    38:29:fb:58:d8:f7:a7:cc:75:eb:4d:0c:ae:b5:9b:
                    8d:cd:bb:48:8e:c9:0e:25:35:d2:f2:3d:83:55:e4:
                    01:75:be:74:ff:6e:47:c1:f8:fe:db:8f:de:fe:88:
                    77:bc:41:44:d8:92:c8:19:0a:70:d6:fa:58:f9:8b:
                    37:5d:d8:c0:7d:ea:99:a7:f4:26:22:7a:fc:8a:3f:
                    50:b2:28:f4:eb:0a:fc:fb:ac:6b:08:d1:cb:b9:db:
                    9f:62:15:58:4c:af:67:21:25:3b:6b:a1:8e:c0:c5:
                    0e:7e:88:e9:15:cb:78:a8:82:7e:47:ea:b7:34:21:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:17:4D:FE:61:0F:4C:57:47:93:38:F0:26:EC:06:44:9C:B9:EA:3E
            X509v3 Authority Key Identifier:
                keyid:9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:a4:fc:ac:46:31:1a:ff:ad:fa:73:51:c4:99:7d:bb:ff:
         35:42:c7:91:43:3c:ac:eb:1c:f9:0f:4c:28:12:d6:d6:b0:b4:
         2b:a4:dc:84:96:9b:eb:1f:3b:12:7f:ae:c6:34:52:2b:29:51:
         ad:d7:89:4f:4f:f6:46:14:27:c8:1e:f8:92:9d:d6:d3:ea:5d:
         b8:38:8e:b4:54:32:48:57:66:d2:70:d8:17:e4:4a:37:3b:27:
         a6:df:63:69:f0:52:84:f7:e4:25:28:d4:f7:4b:5a:11:a7:e9:
         72:65:a9:da:9f:95:df:77:97:f7:e5:1a:d5:01:9b:1b:fc:3a:
         81:3e:9f:3d:f1:c5:3b:2d:f6:bb:77:a7:5f:6d:ae:89:e5:a2:
         2e:61:4b:af:c6:15:b3:4d:8d:4d:7b:0a:12:9a:08:c6:01:a6:
         ff:6c:73:89:a7:68:d7:5e:06:85:3e:df:bc:65:ec:d5:bd:0c:
         0a:80:aa:28:96:70:72:72:eb:1a:37:74:0c:30:0d:63:37:89:
         57:85:8f:9b:0b:0d:df:95:fa:bf:dd:47:d2:60:24:e0:d5:e8:
         4d:a6:75:f5:82:68:09:c1:19:6e:d5:16:ed:fe:8f:65:0b:6a:
         fd:94:de:89:3e:88:57:4c:52:ae:df:c7:49:e8:27:78:6e:89:
         65:25:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:30:12 2024 by rpki-client on console.sobornost.net