Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File:                     nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier:          pXIapFQXJ5JxPkFRWT9UGnTes79UcvKn5tIH6o2miX0=
Subject key identifier:   34:B5:ED:3F:5A:7C:31:DE:DD:F3:4B:37:1E:F3:D7:FF:3B:B3:2E:16
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer:       /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial:       0190486984C0A29624513A22DD17444F62E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number:          C1
Signing time:             Mon 24 Jun 2024 04:03:13 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:13 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:13 +0000
Files and hashes:         1: 7PVkNyEhDi9JXaYGGtkNrTyXbhA.roa (hash: PATtm9QcIWsjl8AryZPLI/NZQ+oup8QuUw+sYDgZiqo=)
                          2: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: +XMxgO/1oIxzDd9ncAiiODlDIIObEocIQKp6MsiWHZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:84:c0:a2:96:24:51:3a:22:dd:17:44:4f:62:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
        Validity
            Not Before: Jun 24 04:03:13 2024 GMT
            Not After : Jun 25 04:03:13 2024 GMT
        Subject: CN=34b5ed3f5a7c31deddf34b371ef3d7ff3bb32e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:9d:05:ae:e8:f3:3e:ec:3a:70:d3:fb:6f:
                    d0:5c:ff:ad:99:ab:1b:2f:90:e9:9c:b6:b6:bb:fd:
                    ba:c9:a3:79:d8:4e:e6:ca:62:33:79:a9:5d:ce:59:
                    3b:1f:d5:10:e1:f8:1d:fb:a3:11:be:37:a1:69:94:
                    c9:ff:1c:87:a7:84:69:1f:e5:b9:00:fb:31:ba:98:
                    61:bb:1c:c6:6a:ba:4c:9e:5d:75:20:d2:68:de:cd:
                    2c:da:d4:08:b5:61:27:38:a5:39:40:0e:82:fa:04:
                    b2:23:8b:8b:83:50:3a:0b:66:65:f7:7a:2f:c2:59:
                    b3:16:57:8a:1a:66:85:fb:db:35:a9:9f:e5:35:90:
                    84:d1:31:d4:4c:e2:24:ef:a8:b6:a9:69:32:1f:2a:
                    af:24:97:c2:aa:5e:d0:c6:38:19:b8:b0:38:82:45:
                    09:5c:55:ba:5f:ab:27:3d:f6:04:9c:5a:3c:e6:67:
                    d8:a1:7a:9b:97:ae:ef:00:c8:fc:c1:ee:26:00:7d:
                    d8:f6:c9:8a:e0:35:33:ea:bb:e6:6c:40:f9:5f:82:
                    e1:f0:9e:f7:b6:7f:a0:cf:4a:00:bc:82:f8:47:4f:
                    83:cf:ec:1b:3c:09:3f:de:43:0d:56:61:a3:64:be:
                    75:2d:93:16:aa:29:74:82:a5:f7:13:71:25:db:1a:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:ED:3F:5A:7C:31:DE:DD:F3:4B:37:1E:F3:D7:FF:3B:B3:2E:16
            X509v3 Authority Key Identifier:
                keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:a8:10:f0:d4:68:4c:be:1a:39:ee:cb:23:d7:6c:35:76:
         0a:03:b0:d0:af:a4:60:f9:bd:23:35:c5:33:bf:e8:5f:29:42:
         f8:f3:8e:85:28:7e:c3:a1:89:16:d6:c0:93:78:6b:a5:93:d2:
         85:97:86:08:65:78:15:97:30:f5:fa:bf:b8:cc:e6:e0:26:fc:
         d3:20:3d:92:82:1d:f2:27:f6:06:6f:47:ba:eb:7d:ab:f6:dc:
         e7:eb:f7:ef:44:0e:1d:2b:ea:5d:15:43:ac:49:dc:6f:86:09:
         ac:c3:53:46:62:20:05:7a:bb:c6:db:46:0a:be:1f:91:62:4d:
         43:11:a5:af:0e:7a:0b:42:0b:9e:ae:2e:ec:c9:e5:d6:54:8f:
         59:00:8a:e2:4a:0c:06:8c:b2:14:bb:05:5e:27:9b:d4:b1:65:
         a4:d0:b4:4a:16:5c:3f:a2:e2:a2:ba:cd:d3:24:f0:b1:25:fa:
         d9:2e:f0:6b:b3:38:35:47:47:32:c9:7e:eb:20:65:0b:17:56:
         a9:9a:14:09:ab:6e:27:fa:19:e9:e2:fa:59:30:f0:13:f6:e8:
         3d:e0:dc:b2:6d:e2:16:29:57:d5:ba:28:54:d0:ea:53:36:7e:
         18:9a:14:fe:c9:50:8c:40:ea:c6:ed:bc:47:2a:cc:81:72:95:
         aa:dc:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:57:22 2024 by rpki-client on console-fra.rpki-client.org