Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File:                     nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier:          lAkBxG5cz2TU24ObI7Y8MM1ImyhUoywNuSoDXXlCpDA=
Subject key identifier:   78:20:69:B9:A4:DA:32:C3:D8:11:08:86:18:81:46:76:55:21:C0:C2
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer:       /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial:       01901DEAECF1EBF9586C7F086EE3994D04A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number:          0EA4
Signing time:             Sat 15 Jun 2024 22:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:53 +0000
Files and hashes:         1: 54KK4aZZz4FI6mWSAjSjd1MRiPA.roa (hash: N53RX9q3oKYPM6AEFYUQ7vsBY/k1sVwgiPFn1643sfg=)
                          2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: t/Ln4Y1lUQVFo0tp+fxibP8wi8eMGJ7e8/9wmkmm//4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ec:f1:eb:f9:58:6c:7f:08:6e:e3:99:4d:04:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
        Validity
            Not Before: Jun 15 22:00:53 2024 GMT
            Not After : Jun 16 22:00:53 2024 GMT
        Subject: CN=782069b9a4da32c3d8110886188146765521c0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:7c:a6:80:98:04:a4:0e:8a:d7:5c:ba:4a:
                    67:6c:30:62:f4:0e:0f:a2:7a:42:62:c4:29:71:a7:
                    4b:54:f6:85:8a:41:0d:55:1d:02:5e:ec:49:c2:28:
                    43:bd:a6:8f:e1:0f:88:cf:d1:be:65:21:5a:a3:74:
                    fd:e5:1a:f0:42:01:87:47:b4:6d:03:70:aa:36:86:
                    5a:01:8d:d9:f4:8b:99:c5:c8:8d:11:0d:e1:81:a6:
                    00:b3:c7:0a:5e:e0:ae:bd:28:98:40:3d:2d:f5:8d:
                    75:78:ec:d0:fe:cc:7c:05:25:bf:bd:eb:ac:67:fe:
                    2d:79:e6:2e:9f:41:39:b0:da:25:a8:6b:45:ab:6e:
                    a8:24:d1:ef:46:64:66:82:6c:98:24:cb:23:64:29:
                    13:0d:ed:f1:5a:42:84:10:de:9d:02:48:5a:9c:9b:
                    89:b0:35:d8:2b:3a:20:bf:11:e0:1c:fe:d7:ea:e9:
                    35:eb:b3:42:91:c4:3f:e3:4a:8a:ed:77:f3:7d:ee:
                    fd:e7:0a:7a:56:96:dd:30:00:3d:8a:2a:2f:45:22:
                    fb:8f:db:1a:2a:2b:8a:77:de:3d:13:37:2f:92:05:
                    72:02:cc:d3:5b:26:a4:85:e9:0c:08:ac:0e:65:65:
                    cd:6e:59:b1:51:ce:1d:ba:c4:67:de:a7:48:c7:08:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:20:69:B9:A4:DA:32:C3:D8:11:08:86:18:81:46:76:55:21:C0:C2
            X509v3 Authority Key Identifier:
                keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:fd:93:cb:a6:8f:fc:62:0b:19:73:46:7e:81:7a:d3:d7:
         5f:c9:e9:9f:28:ef:aa:6f:1e:86:b1:d4:0b:36:a9:38:fa:4d:
         d8:a5:d7:92:74:43:c5:41:16:65:cf:e5:10:e0:74:d5:7e:39:
         6f:dd:d7:e3:07:05:5e:ee:3f:50:28:0f:4c:fa:ae:97:bc:30:
         a2:25:a4:09:1b:70:6b:f6:f1:8d:80:d1:23:6e:63:44:a3:df:
         c2:9e:46:4a:cf:3f:ab:a3:ab:d3:91:2f:4e:69:b2:ee:d0:cc:
         88:2a:93:67:ef:f6:90:56:6b:5c:74:27:38:f2:1b:7c:9d:2e:
         56:c5:28:62:55:64:8c:60:53:62:e4:ca:0f:77:02:12:13:27:
         59:09:5d:44:16:f7:1c:7e:67:64:95:d9:60:f5:b0:5a:c6:ec:
         92:37:c8:ee:51:12:ab:2b:1f:42:7d:08:c1:7d:9d:13:37:a6:
         b1:c8:f1:60:2e:7b:58:36:d1:f4:31:b5:6d:ba:74:2c:d3:76:
         b8:31:5c:46:73:f9:d5:de:e4:3b:72:62:0a:0d:7c:9e:98:50:
         66:33:7d:c3:92:97:99:d4:08:00:42:b4:25:ff:3d:49:5c:0e:
         01:ec:de:ac:f4:6c:0c:16:db:8a:5e:ad:f5:66:f8:92:4f:bc:
         bc:23:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:05 2024 by rpki-client on console-ams.rpki-client.org