Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File:                     NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier:          M9fk1DcGd22ukxO06g8aNdydRgQK1Lf88JukEw+gGkU=
Subject key identifier:   8F:23:45:C9:BD:BD:91:BE:20:D8:C7:A6:3D:8A:56:D4:9C:97:0A:93
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer:       /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial:       01901E58C38E9C5C0675CA5A799691988A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number:          115A
Signing time:             Sun 16 Jun 2024 00:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:51 +0000
Files and hashes:         1: IiLauL0ZABJIfJsW0ysDF1yPkSk.roa (hash: 2dSS9LHJRv79sSaSs3OG0Q18ftFux3F7aHcbWrtUM24=)
                          2: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: iwPAhIxxyQ9o1dZOotAqnzobkeNfrAP5ketCuQRCboU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:c3:8e:9c:5c:06:75:ca:5a:79:96:91:98:8a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
        Validity
            Not Before: Jun 16 00:00:51 2024 GMT
            Not After : Jun 17 00:00:51 2024 GMT
        Subject: CN=8f2345c9bdbd91be20d8c7a63d8a56d49c970a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:56:72:cf:3c:ea:c6:d1:29:a1:75:8e:0e:
                    76:bd:ad:1f:48:93:ee:20:d2:5c:7f:f3:4b:27:2c:
                    c2:62:05:d9:c6:24:b9:89:bf:e8:74:84:c9:5c:c3:
                    94:fe:20:75:c3:17:38:96:1e:8a:fb:7c:e2:3f:4b:
                    5a:0a:64:a0:1a:ae:e3:5f:ab:55:69:49:87:4d:91:
                    e6:89:63:fc:49:bf:45:27:ed:9c:a4:18:bd:9b:88:
                    23:42:16:b6:9b:e8:21:14:03:6c:24:0e:6d:52:52:
                    8c:a8:dc:b2:66:03:7d:c8:1a:7a:d7:4a:1b:43:0d:
                    c9:51:ae:df:fd:40:b1:3c:e8:b6:28:2d:5a:66:4c:
                    62:56:95:9e:ab:14:43:de:5d:5a:05:eb:f2:fa:6c:
                    96:3b:36:f4:96:61:d9:a6:e7:a7:b9:54:db:e8:25:
                    06:3c:16:bd:b5:50:6c:d2:ef:07:87:9c:43:83:d9:
                    83:85:0c:db:1c:85:bc:93:e0:d2:8e:eb:5a:2e:90:
                    ea:21:19:fb:d6:24:17:63:77:d9:87:ac:9a:cb:ba:
                    34:f9:18:cc:13:ac:8c:9f:12:77:e3:3c:8a:ab:90:
                    a2:6b:a7:72:22:55:f2:94:d9:10:05:aa:79:b5:7a:
                    74:1d:89:c5:47:ce:92:25:d4:70:82:39:fd:5f:d4:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:23:45:C9:BD:BD:91:BE:20:D8:C7:A6:3D:8A:56:D4:9C:97:0A:93
            X509v3 Authority Key Identifier:
                keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:7e:7d:53:08:b8:d1:fb:58:e6:0f:79:46:64:76:ca:45:
         5f:b4:f7:bd:72:84:99:39:ed:ec:c0:72:74:d9:71:dc:8a:1d:
         c7:bd:9e:d0:d9:5e:32:06:e6:b3:05:0d:53:e8:29:cf:a2:f1:
         43:cf:1e:f8:ba:1c:c2:32:3f:48:63:78:43:38:70:9e:85:7e:
         34:c8:13:36:0b:a3:7f:1e:92:a3:56:96:2a:01:dd:40:12:bc:
         b7:08:ca:02:23:69:3a:3e:7a:90:41:67:53:a6:b4:e6:38:5b:
         19:04:7d:d7:ad:95:36:cd:05:2d:3c:49:ae:0b:cb:9e:a4:14:
         e5:6a:6b:b0:e7:44:4a:1c:88:53:f7:de:4d:8b:8e:30:d0:2e:
         a2:1b:90:7c:3d:d8:c2:dc:f6:9d:36:43:68:28:33:54:6a:21:
         53:b5:76:7a:53:58:4c:cc:dc:11:35:27:57:ee:e3:cf:fb:6f:
         ad:2b:1b:5b:eb:3a:3f:7b:c2:b4:69:e3:b7:76:b7:7b:23:ad:
         e9:95:7f:35:f5:15:e5:45:09:af:c3:73:19:53:6c:df:4d:dd:
         0b:77:cd:ad:cd:33:f9:b0:74:12:dc:d3:1c:c1:a7:96:e6:2f:
         0a:b5:b2:6d:d7:2b:bd:a9:3c:cc:00:92:48:10:0e:74:59:45:
         ef:48:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:03:28 2024 by rpki-client on console-ams.rpki-client.org