Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File:                     N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier:          4fJ6UaKjRraWDQvv7FdcHOY5tbNwmTA3eht+bD1OIV8=
Subject key identifier:   36:BE:45:04:43:5D:D2:4D:55:7A:08:9F:92:86:23:3F:F5:A3:84:48
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer:       /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial:       0190448CB6B10D12194EAFD86AF20A81E6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number:          0F17
Signing time:             Sun 23 Jun 2024 10:03:10 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:10 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:10 +0000
Files and hashes:         1: 6L_KAQ7nbR112vnCPGHtAmU7SO4.roa (hash: FsIaCtNRekukst5oZVMVyucTR3c09DInm6F5xHXebxw=)
                          2: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: 3A5EjByM/kR18K1FJdlJFErghsNg3Zpl64CP0lpDSHU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:b6:b1:0d:12:19:4e:af:d8:6a:f2:0a:81:e6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
        Validity
            Not Before: Jun 23 10:03:10 2024 GMT
            Not After : Jun 24 10:03:10 2024 GMT
        Subject: CN=36be4504435dd24d557a089f9286233ff5a38448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:76:2a:fd:da:e5:cf:7f:11:6c:b4:2a:9f:
                    4c:3f:e2:ec:7b:f0:a4:c6:a5:94:4a:79:d6:7c:60:
                    b5:65:1a:e8:b6:88:b8:8d:8f:73:44:ba:32:70:49:
                    e8:52:22:1b:bd:75:4e:ce:ae:df:9a:81:e5:8a:d3:
                    96:bc:29:00:97:65:74:ca:bd:99:14:df:37:53:c8:
                    34:5f:d1:c4:64:f4:d4:0a:f4:7b:ba:4e:99:53:38:
                    47:2d:d8:7a:cc:86:6a:51:f0:32:8c:d2:b7:3b:1a:
                    95:83:99:54:0e:cc:de:19:69:72:94:f0:cf:c8:d5:
                    29:8c:7b:5d:18:8e:31:7a:e4:da:7c:89:fb:19:c3:
                    ee:3a:80:fd:5b:6e:5f:60:e6:4c:be:ff:3c:6f:09:
                    2e:71:2c:07:7e:09:96:26:d4:c6:f1:5d:cc:6c:f7:
                    39:c8:ba:fa:3a:41:44:d2:2e:db:00:06:42:40:e9:
                    87:fe:d9:00:05:53:06:1c:53:d5:45:c7:97:3c:65:
                    63:b8:ea:48:2b:13:3f:58:ba:5f:94:cb:6f:67:ea:
                    c3:8c:71:cb:dc:70:a7:23:c6:32:b5:ea:8d:48:38:
                    0f:9c:45:8d:34:1e:e7:01:51:e2:6f:7d:94:e6:55:
                    0c:31:a8:f3:14:2b:e9:3f:05:d4:03:4d:e5:05:4d:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:45:04:43:5D:D2:4D:55:7A:08:9F:92:86:23:3F:F5:A3:84:48
            X509v3 Authority Key Identifier:
                keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:f3:1f:6b:ac:f7:7c:2d:c3:21:ac:c2:bf:27:84:5f:b7:
         b6:d2:b9:e7:97:eb:83:b5:a5:18:e6:2c:9d:e0:d4:60:30:6e:
         57:19:c1:28:95:5e:3a:da:af:f9:ef:05:e1:78:4d:db:a3:62:
         a8:15:cf:97:d3:13:35:79:0a:aa:00:38:9d:0e:0d:60:9e:74:
         3d:53:85:fd:e6:0c:8d:69:3f:68:38:86:70:09:d4:55:7e:3c:
         9e:f6:bf:a9:22:01:b3:8c:ac:2d:dd:ab:9f:da:99:94:a1:93:
         90:4f:5e:f4:29:fd:1a:2a:b7:f8:40:0e:15:36:e1:96:5f:56:
         f3:1d:35:4a:50:90:09:c3:22:4e:fe:a0:56:49:1f:aa:e8:2a:
         fc:57:71:88:f5:a3:3f:be:59:98:c5:5b:cd:95:c0:2e:71:b0:
         09:06:d8:b7:e7:ec:49:39:00:9f:3a:f3:a7:7a:99:18:80:e8:
         1d:b8:33:07:2a:cd:ea:f4:11:48:9b:d6:8e:3b:0c:df:da:2e:
         40:e3:23:e4:20:1a:df:d7:19:b3:c4:e5:81:cb:4d:78:e8:27:
         a4:3e:1c:a4:2a:3a:3c:ed:8d:a4:78:cf:b2:3b:81:8d:1f:13:
         43:27:7b:47:08:6b:a7:59:b8:7a:70:5e:63:d4:ac:04:e3:76:
         a0:b4:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:00:17 2024 by rpki-client on console-ams.rpki-client.org