Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File:                     NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier:          uBz6i6oI3l+pidGlZyzLS/Cul83uhVX1gxMQ6uRP1uM=
Subject key identifier:   CD:68:CF:10:CE:E1:A8:57:FA:19:11:14:7B:95:47:76:EA:56:0E:8C
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer:       /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial:       01923813F2926AC13FAAABE857E166FB4A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number:          0F6D
Signing time:             Sat 28 Sep 2024 10:01:24 +0000
Manifest this update:     Sat 28 Sep 2024 10:01:24 +0000
Manifest next update:     Sun 29 Sep 2024 10:01:24 +0000
Files and hashes:         1: 9JkrLop9gQHB-bU5bxzV0hNuHVo.roa (hash: fnttLNhVnBWrFTFw+VFMaEC7xGE+un8vwc8djTvXlIM=)
                          2: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: J4fEvIsPOXDp0owwEn9Lugr5r86ypNra3Cv5n0acKdg=)
                          3: O041CiRRPw4mLSvs7VoO_ynR6Ww.roa (hash: rtX9q/gm/Z9sSYpbTZR3rbJEa1udVxm/io+mCNnEggU=)
                          4: w1MyN1pxADyQ1WDpGSWbiM2A-Tw.roa (hash: lDYqVv1H57ktRGxICKopP5iX9eLLdUG8g3NOQI6PStc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:13:f2:92:6a:c1:3f:aa:ab:e8:57:e1:66:fb:4a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
        Validity
            Not Before: Sep 28 10:01:24 2024 GMT
            Not After : Sep 29 10:01:24 2024 GMT
        Subject: CN=cd68cf10cee1a857fa1911147b954776ea560e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:be:fd:8d:b5:82:0e:f9:ef:5d:b4:63:91:
                    6b:2e:71:36:df:8a:45:2b:9f:ea:19:4a:81:01:37:
                    5c:6a:6f:fd:55:2e:47:1a:64:91:5f:3e:35:a0:36:
                    3c:02:76:fe:49:bc:79:0f:47:b2:96:42:d9:31:b8:
                    1a:1f:2d:f2:ab:c0:c6:d4:f0:e0:bd:e4:db:10:71:
                    6c:df:1d:a2:9f:17:65:9f:d2:07:c9:b2:a3:38:37:
                    93:e5:86:3e:f1:f8:dc:c0:62:96:f1:95:c8:af:a5:
                    0c:95:33:18:c8:12:67:89:8c:43:5d:d0:70:e8:fb:
                    70:9b:72:98:22:53:55:be:ed:35:fe:8d:11:b5:1a:
                    44:39:10:ef:56:cc:c7:1f:da:62:5b:a6:b5:b5:44:
                    a6:7f:99:f7:61:60:24:e9:bb:41:5b:03:f6:76:fc:
                    fc:dd:53:3d:46:60:30:5d:c0:67:02:89:a3:df:ae:
                    b1:16:5f:d0:3a:ce:2f:fe:eb:e0:50:c7:2d:07:d7:
                    c1:fb:87:49:92:a0:46:9d:84:22:6e:3c:51:81:82:
                    eb:14:71:f7:34:25:2e:eb:52:ee:60:af:e4:f5:9a:
                    0f:11:07:8a:35:b3:a6:d3:df:2b:e0:c1:95:35:fc:
                    08:df:7e:94:04:20:01:47:35:88:8f:b5:e2:6b:09:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:CF:10:CE:E1:A8:57:FA:19:11:14:7B:95:47:76:EA:56:0E:8C
            X509v3 Authority Key Identifier:
                keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:87:b9:09:e3:17:0e:5a:19:9a:69:3a:95:6c:5a:04:39:
         4f:ba:e9:f1:56:e9:95:aa:bb:1e:c8:1b:27:26:cd:03:c8:1f:
         8e:8a:08:65:d8:b8:e0:d5:61:a5:36:d1:6d:bc:8f:a5:48:c9:
         1d:82:87:20:2a:95:18:0c:9f:db:a5:95:be:2f:69:65:eb:29:
         2d:26:54:c1:98:b5:34:80:ad:26:13:17:3f:67:d6:a0:ba:f1:
         11:7f:87:14:f0:f2:3c:b8:b2:ea:f6:f9:76:5d:98:d2:4d:59:
         d6:61:b8:98:9d:1b:72:0b:66:87:f4:76:cd:af:87:c1:3e:9f:
         7d:66:8e:2d:c4:1d:b3:89:f7:c8:ba:9b:e7:52:e3:6c:86:fe:
         17:7c:96:d8:77:82:01:17:a4:c2:ff:98:45:de:97:6d:0a:1c:
         65:54:ff:a7:19:f2:74:80:34:c1:8b:26:d2:59:76:10:9f:ed:
         63:b0:86:87:d2:d8:fa:06:5b:c8:ef:22:b8:60:2f:38:47:16:
         74:a3:0d:f4:60:7b:26:af:c9:be:84:b6:71:69:98:ac:ba:3c:
         d0:cd:8b:9c:71:4c:aa:80:41:85:a7:57:d4:7b:bd:7a:63:cc:
         10:41:3c:64:e1:57:e6:0c:40:28:5e:88:78:05:c4:1a:b0:fa:
         84:ad:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:40:11 2024 by rpki-client on console-ams.rpki-client.org