Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File:                     NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier:          q0izdhFjxtd7ttzWDeTj0uO5bgZuO3K9TdeLgbztuU8=
Subject key identifier:   64:1B:52:21:61:6D:31:DE:D2:28:89:DD:6B:6B:57:82:1D:07:39:3C
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer:       /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial:       01901EFD4FCC2760BA13F209B8C3DB0FFB69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:35 +0000
Files and hashes:         1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: 0uZuS/TWsvmKZSGGYKJY6qYeip0PiG3iJid56lWUydg=)
                          2: qbsq5RIpBYSt6Acjnm9VMK4lh5Q.roa (hash: /BVUBkpCvOhscqGKvwkpJcmsKH6fBnI2N1sPDW/OVh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:4f:cc:27:60:ba:13:f2:09:b8:c3:db:0f:fb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
        Validity
            Not Before: Jun 16 03:00:35 2024 GMT
            Not After : Jun 17 03:00:35 2024 GMT
        Subject: CN=641b5221616d31ded22889dd6b6b57821d07393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:13:27:96:51:b4:f8:27:ce:89:89:04:75:
                    8f:70:03:62:03:54:d9:58:ad:94:60:9f:85:a0:49:
                    13:15:fe:98:34:a8:7c:0c:c6:b7:17:84:76:46:06:
                    4d:a0:9b:8e:fc:e0:9a:77:a2:d8:3f:a5:ec:1b:21:
                    8f:aa:ee:a3:17:4f:bf:ce:48:d7:a2:b3:b9:fd:84:
                    c0:c8:b0:03:56:41:17:c0:0e:cd:85:d9:a1:ca:14:
                    0a:82:b8:cf:ee:1e:29:ce:91:f7:c5:d6:6a:8f:0b:
                    cc:ae:dd:87:4e:7f:0d:01:02:58:5a:3c:96:23:28:
                    7b:ab:9e:3c:b6:7a:dc:74:16:9f:13:85:af:f5:f3:
                    0c:ac:44:6b:5d:e3:c0:1d:ca:4c:e6:c5:ee:b1:f7:
                    e5:aa:e9:d8:44:62:be:ac:99:1f:14:36:d7:5d:50:
                    f6:03:f6:d7:01:a8:7a:4e:77:b9:d6:b4:0b:3d:6d:
                    44:5d:1b:1d:f2:b9:07:85:62:b7:79:63:a7:a9:c6:
                    ea:e5:27:6b:5c:ca:3f:50:69:01:f7:4a:2d:6e:2d:
                    bd:79:5a:24:49:c3:89:55:a5:dc:bc:f2:12:80:c0:
                    13:c5:fd:42:6b:75:2e:2b:a5:9c:05:e8:de:c6:af:
                    a0:9c:d9:22:b8:d1:69:7d:7d:e9:5d:cb:0d:37:e7:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1B:52:21:61:6D:31:DE:D2:28:89:DD:6B:6B:57:82:1D:07:39:3C
            X509v3 Authority Key Identifier:
                keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:2b:3c:3a:1d:99:65:c9:97:16:1a:44:cd:3b:b1:47:c9:
         d8:b1:bc:5c:a5:7c:c2:14:4f:c5:cf:2b:9c:f7:69:2e:85:b2:
         a2:e0:03:37:34:99:f3:26:4c:db:66:96:a6:6c:9d:06:75:ad:
         32:8e:b3:4a:87:37:d3:21:94:b5:d1:ea:5a:12:e8:1d:a9:15:
         9a:95:15:0e:9f:d5:f9:ce:74:c6:2d:af:61:02:df:99:c9:64:
         32:44:87:09:d0:6e:3c:d1:21:da:37:3b:79:88:25:d8:95:44:
         7f:ff:30:98:97:dc:f7:74:8e:f0:1f:6a:67:20:37:cd:50:4c:
         08:6c:f0:10:7b:4c:c1:97:0c:c5:7f:a9:63:eb:a9:1c:95:3c:
         fb:06:3b:3b:4c:3a:56:b2:ce:1e:f8:56:ca:8f:91:70:de:b4:
         72:9b:65:54:a9:96:d8:bb:c2:d4:0c:1a:ba:7a:b2:67:98:19:
         b8:f2:d5:5c:87:d0:78:74:00:5a:7a:f0:3a:f5:f8:c3:81:6f:
         47:ce:73:de:b6:0e:10:0e:6d:c3:6b:43:e5:70:d6:63:50:50:
         80:84:a9:70:16:fb:f4:73:b0:6c:4b:d0:1b:ef:ac:6c:89:de:
         b8:4a:a8:cc:fa:28:69:44:94:b7:b8:25:6f:6c:b0:d1:14:22:
         41:62:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:30:41 2024 by rpki-client on console-ams.rpki-client.org