Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
File:                     M_NfwrXUmCjCbgfKYpwBLMESCrY.mft (raw, json)
Hash identifier:          VX7rj8Cls6zkYvZHP5mtssD0VDQUo3qLDP8VubEaX5o=
Subject key identifier:   6F:8B:D8:29:49:D0:3D:E4:90:BA:F3:7F:BD:73:6F:A4:0E:6A:E5:55
Authority key identifier: 33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
Certificate issuer:       /CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Certificate serial:       0190723ED05B6DFD8C124437A6B44BCADD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
Manifest number:          47
Signing time:             Tue 02 Jul 2024 07:00:37 +0000
Manifest this update:     Tue 02 Jul 2024 07:00:37 +0000
Manifest next update:     Wed 03 Jul 2024 07:00:37 +0000
Files and hashes:         1: M_NfwrXUmCjCbgfKYpwBLMESCrY.crl (hash: 4+Aqe0MGTnfHvgJf15GF6bTioBzzxW3+3U1bb0cvYdA=)
                          2: _mLWscYmuc-MJUJJCSOGafkMJIM.roa (hash: +LfsYWpmCqahSkFoMT2QruOjUsA7i4js7QXm54pT4oQ=)
                          3: g08iHmm6sXlXjDUy0PY4H34qkAE.roa (hash: 9lYva97NwegnjQ/qFMMK53KMc2IK/aUtfkDXS/0P7Gk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:3e:d0:5b:6d:fd:8c:12:44:37:a6:b4:4b:ca:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
        Validity
            Not Before: Jul  2 07:00:37 2024 GMT
            Not After : Jul  3 07:00:37 2024 GMT
        Subject: CN=6f8bd82949d03de490baf37fbd736fa40e6ae555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:63:c3:14:34:64:ca:7b:1a:d0:30:cb:dc:
                    2e:40:54:67:9f:de:cc:0a:c5:86:58:a1:db:75:e2:
                    5c:d3:49:87:56:e5:d2:e9:08:72:45:11:24:51:d7:
                    76:72:89:71:5e:ff:4e:5c:c5:15:9c:28:a3:61:e8:
                    c4:03:d8:ae:09:c5:0d:0f:26:28:25:67:d3:2a:ef:
                    8c:f6:6d:e6:23:05:35:a5:7a:cb:f3:8e:99:a8:0e:
                    a2:7f:00:c8:59:0a:7b:fa:40:a5:5f:5f:a7:58:ca:
                    ae:e7:2d:da:10:40:6c:88:ae:84:23:e5:2c:4d:a4:
                    ce:b9:29:0e:95:4f:96:04:61:67:7d:fa:9e:0d:81:
                    7e:d5:98:ab:68:f6:d0:90:d6:d6:c7:a9:e9:0b:cc:
                    05:16:6a:bf:40:f0:1a:ca:2d:50:9f:4a:33:c3:d6:
                    3d:98:20:92:e0:57:34:eb:85:ae:67:89:f8:61:95:
                    d6:86:64:29:73:a7:56:9c:1d:96:b5:77:30:78:61:
                    3e:54:9d:e8:ad:5f:3c:ad:29:26:76:2d:b6:38:8e:
                    55:9b:48:bf:ba:09:f1:be:14:38:d7:10:11:91:58:
                    a8:0f:2b:12:fb:bf:2e:7a:70:33:7b:c6:fd:2d:30:
                    95:1b:40:dd:50:2d:7f:fe:80:ee:69:ad:dc:7e:f5:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8B:D8:29:49:D0:3D:E4:90:BA:F3:7F:BD:73:6F:A4:0E:6A:E5:55
            X509v3 Authority Key Identifier:
                keyid:33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:1c:19:10:b2:bd:d6:d7:7e:3d:cd:f2:48:20:90:94:1e:
         47:80:e5:8e:22:e3:34:6c:9a:d7:d5:1e:22:a3:38:57:b5:37:
         12:2e:72:7e:4b:fe:8d:4a:28:f3:cd:b2:50:76:5d:39:81:9c:
         29:c6:33:24:e1:00:55:3c:fd:20:11:86:a5:14:88:ed:2e:26:
         cf:c6:96:ee:ac:50:0d:d8:b6:54:2b:56:ed:c3:f4:d4:e3:ac:
         22:94:b4:ba:1e:b1:7f:18:fc:8c:58:04:d9:52:6e:b0:6a:ea:
         bd:3c:e9:07:83:09:04:9d:80:f8:4e:0a:85:be:dd:32:da:0d:
         cf:22:94:88:8d:8d:d3:62:7f:19:46:51:59:22:c9:7a:f2:dc:
         50:cc:2f:32:22:be:60:2f:b7:09:df:ad:1f:d0:7b:c8:ce:21:
         6c:1c:26:13:d8:19:51:8a:c5:35:da:65:4d:e5:f0:ac:34:d2:
         0e:a5:ef:80:9b:48:cf:f8:15:e9:a4:4c:43:7b:f4:ff:b1:20:
         46:66:8d:9f:2c:5e:d2:98:7d:0f:f9:7d:7a:de:9b:79:ce:05:
         27:27:9c:33:98:4a:dc:58:f5:33:12:b6:65:6d:77:8e:7b:29:
         bf:91:95:0c:3f:74:f8:5c:fe:98:ef:fe:7b:f3:6b:b3:9a:b0:
         fe:d3:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:22:12 2024 by rpki-client on console-ams.rpki-client.org