Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File:                     NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier:          sWUc5gvGCc5shUJzvdrnH25AwungKnxLUuTgMSJg6n4=
Subject key identifier:   37:1B:7E:7D:68:B1:6E:A1:F7:BA:B2:62:A1:CC:18:FF:87:59:7F:86
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer:       /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial:       0190441C79844167D14E18B186852420FF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number:          A7
Signing time:             Sun 23 Jun 2024 08:00:34 +0000
Manifest this update:     Sun 23 Jun 2024 08:00:34 +0000
Manifest next update:     Mon 24 Jun 2024 08:00:34 +0000
Files and hashes:         1: 6roECsc1zcAG1PJxPjMYfJdK-sY.roa (hash: CUx9YKrN0Xx3/Jbp0wBKt4isRQCcmQivjtIjdwlcl3s=)
                          2: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: H4BEdGC981SjPiR0Qn+FKbr9lSWR3lkXPAk6GgzM93U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:1c:79:84:41:67:d1:4e:18:b1:86:85:24:20:ff:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
        Validity
            Not Before: Jun 23 08:00:34 2024 GMT
            Not After : Jun 24 08:00:34 2024 GMT
        Subject: CN=371b7e7d68b16ea1f7bab262a1cc18ff87597f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:6d:d7:7d:34:9a:71:f3:c0:c1:01:a9:f4:
                    ac:55:d5:c3:ee:e0:5e:00:22:30:e7:f7:7b:0e:f9:
                    d2:5c:52:45:a2:98:53:5e:1f:a0:44:fb:36:0b:5d:
                    7a:f8:ad:63:3b:97:3d:38:66:04:2b:19:28:30:ac:
                    03:1e:6c:5e:e6:2b:41:0a:28:63:8b:72:6c:54:03:
                    df:d3:88:8a:ae:17:ec:e3:a8:3c:95:fb:03:44:d0:
                    e3:d2:5c:0d:12:8a:ff:77:7e:c9:90:72:9a:56:50:
                    38:dd:64:4e:c8:47:da:70:82:3e:92:74:d0:af:ff:
                    85:a6:89:b1:59:c6:4a:c8:d9:9e:35:5b:7e:4f:5f:
                    13:ce:4e:c6:2f:a0:da:7e:4b:c8:63:71:63:56:0c:
                    f7:57:91:ee:68:2a:c3:d3:68:08:d1:bd:14:c5:95:
                    dc:8e:cb:0b:5b:54:11:a3:e5:2f:a4:a3:bf:7e:5f:
                    8b:12:97:89:50:d3:4a:14:3a:43:3a:03:42:78:4e:
                    d8:d7:2d:0c:48:e3:a2:a7:de:4b:64:92:60:ce:34:
                    67:ad:68:46:ab:ee:61:47:c7:75:10:e1:12:5e:19:
                    bf:04:8c:4f:c6:c9:98:23:39:e1:0c:5a:c6:7d:f5:
                    de:ab:d8:76:88:c5:0b:8c:c0:fa:ea:89:2a:d6:30:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:7E:7D:68:B1:6E:A1:F7:BA:B2:62:A1:CC:18:FF:87:59:7F:86
            X509v3 Authority Key Identifier:
                keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:26:13:6b:41:1f:06:8d:41:bf:ef:d0:46:ed:79:c5:c1:
         76:ad:9e:30:63:b7:74:d9:cc:47:0c:43:7b:df:ee:b0:87:41:
         4a:fb:b2:e5:eb:65:fa:31:21:08:4f:c0:71:4e:72:26:d7:eb:
         fc:5b:ba:8c:2d:31:2b:fa:6d:5e:7f:70:fa:2a:f2:ee:ed:f6:
         95:b7:cc:34:da:8c:8e:de:85:11:2d:67:f5:00:fd:fa:ff:53:
         5e:ae:38:3b:3b:0b:4a:86:51:e3:82:10:7d:8c:30:6b:fc:c9:
         16:64:b4:9b:c4:e0:3d:bd:85:b6:8e:e2:3b:80:ae:0b:96:24:
         1b:68:c8:47:41:ab:eb:58:84:52:66:dc:36:16:4f:60:31:33:
         69:a7:f9:76:a2:1f:4b:97:3e:58:ff:17:a7:09:59:0a:c3:0d:
         72:68:d2:9f:34:5c:73:db:9d:5b:2a:33:73:bd:76:28:4a:ad:
         90:a1:ab:79:a0:7b:e4:f3:80:1b:61:5c:57:d5:1b:14:b0:e9:
         e1:91:a1:15:47:d8:ca:20:d4:11:a2:37:8f:9d:5a:e6:aa:01:
         58:ed:5d:5a:df:8b:08:88:c4:f6:31:d2:fe:5a:a2:2a:00:11:
         0e:8e:1a:eb:16:ec:a5:b4:bc:81:d9:46:15:92:e8:c6:f1:a2:
         1c:9a:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:25 2024 by rpki-client on console-ams.rpki-client.org