Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File:                     NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier:          KgVGWVnH54k0ulfiM3bKnMckGlgcqqKjczdROIu3tSA=
Subject key identifier:   D8:08:BA:BE:7C:C6:5E:F7:DC:27:96:66:A6:61:9B:A5:58:E9:93:0C
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer:       /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial:       01901E58F555DF621DEDCA61D464A5FF9FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number:          0A09
Signing time:             Sun 16 Jun 2024 00:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:04 +0000
Files and hashes:         1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: whOEggST+EZPDh5mnnv5VW/A4tL8PX9EdL3Cxvo19MU=)
                          2: UMkAP5-trBaJkvWSFZVO4XVDr-I.roa (hash: +txFyPvvzyMmSR7CzQVJSrv9efemKtroFOHs0xfPELc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f5:55:df:62:1d:ed:ca:61:d4:64:a5:ff:9f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
        Validity
            Not Before: Jun 16 00:01:04 2024 GMT
            Not After : Jun 17 00:01:04 2024 GMT
        Subject: CN=d808babe7cc65ef7dc279666a6619ba558e9930c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:52:44:74:fe:5b:52:c8:80:97:e1:be:3a:
                    f9:8a:a7:e9:67:2a:4f:67:44:34:10:65:ec:09:fa:
                    2f:3a:44:a3:fd:71:ae:bf:dc:13:02:d0:62:5b:06:
                    59:b8:4a:bc:22:53:70:46:a1:16:74:65:a5:7d:c7:
                    6c:b3:68:1e:9f:74:0c:70:2d:af:13:dd:b2:26:e7:
                    ba:1d:ce:b0:26:83:25:7d:30:3c:91:16:6f:55:10:
                    9d:08:93:e0:69:c9:89:88:c7:d1:2c:05:ba:a5:35:
                    b8:ac:39:df:51:04:53:2e:38:28:b2:77:bd:9a:50:
                    f0:af:17:15:f7:14:a2:5c:4f:63:88:9d:26:a0:5c:
                    53:04:bb:89:db:bc:47:ce:a9:fe:9c:76:fb:05:c6:
                    ac:49:d7:9b:2d:df:03:42:65:59:ad:b3:bd:a8:f2:
                    8b:50:4e:21:12:12:7d:0b:ed:ec:3a:f0:08:a9:5e:
                    b9:0f:a0:9c:53:b2:c4:61:be:26:8d:b7:e5:9e:47:
                    be:c6:55:53:cc:a1:1f:91:f6:4e:d4:2a:6b:e1:49:
                    42:66:ed:ac:99:12:e1:a9:42:fb:da:57:56:fa:fd:
                    12:c6:7b:48:cc:23:c7:7d:4e:e4:07:af:03:f5:3d:
                    c4:26:c6:7d:1a:80:ff:0c:72:f2:fc:97:08:08:64:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:BA:BE:7C:C6:5E:F7:DC:27:96:66:A6:61:9B:A5:58:E9:93:0C
            X509v3 Authority Key Identifier:
                keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4f:b4:d4:49:a6:11:e8:b1:86:f1:70:56:c4:16:3f:4c:7c:
         96:52:c2:c0:57:1e:ec:34:66:02:96:d5:34:26:60:9e:19:d0:
         9e:9e:ff:0f:bf:73:09:44:82:28:4c:a4:0e:8a:ef:4b:4a:c7:
         93:27:62:10:5a:e7:b1:94:41:9b:56:17:dc:60:10:a7:9e:aa:
         bb:46:c2:c4:09:11:e0:43:3d:cd:9f:27:4a:fb:52:26:9c:1b:
         bb:08:e0:9a:ae:8d:c7:36:99:16:59:47:fa:7d:d9:a8:67:d6:
         80:b1:74:e0:1d:9b:fe:8f:8e:e4:df:80:d3:bf:1f:a2:b3:90:
         79:af:3e:3f:93:ac:c7:be:b4:76:ec:45:80:07:1e:be:91:3a:
         51:a5:8e:53:ba:ea:8e:28:ea:08:fb:21:7c:13:f1:55:58:5a:
         cb:98:50:77:c3:9a:5d:53:fc:d6:f7:33:38:57:b1:cf:cb:bf:
         13:e6:cb:29:f6:af:80:76:1c:eb:b5:49:a6:09:f9:a6:8a:99:
         4d:23:48:b0:6d:ab:42:85:48:bd:93:bb:e0:11:a7:b7:86:bd:
         b4:d1:f0:66:06:25:47:11:2c:4a:b0:aa:78:ed:0a:ae:0a:c8:
         e9:85:35:99:4d:42:80:7a:19:34:f4:5e:8d:6e:af:88:af:7f:
         4b:61:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:08:23 2024 by rpki-client on console-ams.rpki-client.org