Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File:                     NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier:          MDBKdIQBKMYzRSkHtSjhPX9AeJhz/2aJfK6xJTWnHtk=
Subject key identifier:   CB:25:B0:A4:D4:D5:C9:4B:C6:ED:E7:28:5A:05:DE:22:58:45:46:90
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer:       /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial:       01901EFDB5590E5D780D953ED5C94096F60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number:          0787
Signing time:             Sun 16 Jun 2024 03:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:01 +0000
Files and hashes:         1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: KE12wbQKpdSXNGioQI1P1rhOkhNzgD8hiY1gcGqjJ5Y=)
                          2: PBEuArOPBxvdm11OLQ-9w2Qopu8.roa (hash: rVvThJcnOdB3qfLcxYsOgTu07oEuo0un/o0eVxLvLdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:b5:59:0e:5d:78:0d:95:3e:d5:c9:40:96:f6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
        Validity
            Not Before: Jun 16 03:01:01 2024 GMT
            Not After : Jun 17 03:01:01 2024 GMT
        Subject: CN=cb25b0a4d4d5c94bc6ede7285a05de2258454690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:1b:ca:78:f1:87:47:b8:c6:19:7a:c5:fe:
                    e3:8f:61:ca:e7:ef:61:29:5c:46:86:aa:b6:1c:df:
                    e9:d8:2a:c6:34:aa:e9:92:06:79:1d:35:5e:9b:12:
                    d4:b4:21:e8:ee:27:2b:72:6d:06:f7:ea:fa:95:46:
                    e7:06:f8:fb:2f:36:3d:f3:52:b0:c8:df:2d:37:30:
                    aa:f3:79:34:c7:62:94:06:1b:e9:bc:4c:b3:38:a4:
                    62:22:fc:aa:c5:5b:3d:9f:5c:47:36:d0:ca:23:93:
                    9b:c3:8e:a2:22:e8:f3:1c:7f:4d:5a:b7:dc:4b:b2:
                    30:1c:1d:f3:91:9e:0e:9d:c8:9c:55:02:dc:e1:a1:
                    b6:5a:3a:2b:14:62:b9:cd:bd:5f:52:37:82:31:07:
                    d1:82:de:ba:b8:be:c3:85:18:d3:63:49:8b:19:b5:
                    cd:7d:0a:d7:9d:3e:fb:94:a3:31:47:11:2e:bb:19:
                    3b:3c:f1:36:7a:07:da:41:4b:f6:01:b0:5e:6e:bb:
                    60:ab:1a:93:5d:f9:88:56:de:d5:72:be:93:d0:de:
                    99:ca:79:ad:3c:91:4e:7e:72:44:67:7e:09:3b:fa:
                    e4:f4:da:49:bb:96:64:be:8f:30:bc:41:4d:89:f8:
                    d1:36:af:b3:f4:47:e4:de:07:0c:0f:07:83:f1:e8:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:25:B0:A4:D4:D5:C9:4B:C6:ED:E7:28:5A:05:DE:22:58:45:46:90
            X509v3 Authority Key Identifier:
                keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:6a:9b:0c:40:68:aa:16:b0:d4:81:d5:f9:da:27:05:c5:
         18:b3:dc:a6:2d:af:ce:f5:54:c7:cd:31:3c:e6:db:a1:a9:a2:
         db:f3:2c:af:ff:37:35:90:3e:58:bc:b6:e8:c9:7f:96:21:46:
         64:59:84:85:a9:9e:63:c7:82:c2:e3:fe:43:15:45:30:de:62:
         b7:7d:d7:05:d0:bb:6e:d5:33:0d:6f:00:b4:2a:fb:5e:a9:74:
         a5:f1:39:03:fa:c2:74:4d:78:fa:41:b7:89:92:b6:da:6b:e9:
         f3:77:5c:cb:fc:fc:85:9d:ef:81:ad:47:a1:20:94:c2:6b:9a:
         cb:b3:24:ae:9c:de:f0:63:c4:dd:c3:30:08:69:24:96:81:43:
         63:c5:2f:53:0c:0b:42:39:85:1c:c0:11:04:c9:6e:4c:a8:db:
         48:52:0d:96:95:4b:bd:14:6a:e9:f7:37:92:f3:2d:9a:8f:ee:
         85:a9:dc:0b:d5:f9:84:4d:42:0e:f6:56:c4:ed:1c:67:55:ec:
         e4:66:49:cb:93:c2:68:4d:da:68:65:1a:4d:18:ab:b8:8b:54:
         1b:09:38:7d:e9:bf:2b:4c:b8:6f:0e:40:b3:30:7c:75:30:5c:
         7c:17:5c:f0:a1:e9:bd:21:de:eb:c6:7f:50:1f:ec:e7:ea:d4:
         53:99:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:33 2024 by rpki-client on console-fra.rpki-client.org