Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File:                     NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier:          Ajkqc8leBFsEpsuYtQ4pzoi1dHggYevQtFFlGRad818=
Subject key identifier:   97:E5:8B:22:0F:11:23:AC:DE:F6:EE:E7:0C:38:6C:C6:13:95:28:59
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer:       /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial:       01901DECBC05D81DC2AF41DC2D87A5838023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:02:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:52 +0000
Files and hashes:         1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: wc00S8qIPGRhKF179wQKVkQ7H2s6hSHtZosBc0p2pAI=)
                          2: YqkpZDVrandNeXMUSjAZ91gKobo.roa (hash: 6KHX4dbge+PGC39OFbr1qxDLnX420dNH4CLgmnrPdvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:bc:05:d8:1d:c2:af:41:dc:2d:87:a5:83:80:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
        Validity
            Not Before: Jun 15 22:02:52 2024 GMT
            Not After : Jun 16 22:02:52 2024 GMT
        Subject: CN=97e58b220f1123acdef6eee70c386cc613952859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:24:54:78:3a:09:4d:fe:4c:3e:7e:5b:10:
                    46:ce:81:e0:0a:ba:ef:bd:06:c4:72:d6:0e:16:7e:
                    47:5e:fd:7d:d1:a1:d0:84:d9:28:87:55:e6:34:64:
                    cf:d2:9b:06:8b:fb:ed:63:12:3e:8e:e5:c4:ee:bc:
                    1e:fc:ca:e2:c0:4e:69:ab:4f:b9:51:28:81:02:0f:
                    d5:67:15:da:f5:0a:10:a9:c3:2d:05:fd:e0:11:e5:
                    eb:70:2e:a0:2a:fe:2c:4c:d8:49:51:13:f7:50:ad:
                    08:ed:ed:2d:67:ba:04:2a:98:bf:af:47:65:a6:9a:
                    c9:69:af:f1:df:98:a0:d7:fb:f1:96:5d:03:a1:9f:
                    e9:ca:3b:3a:26:ad:26:f2:8c:67:c9:c2:d3:36:b0:
                    a7:68:c8:37:d5:a4:eb:6b:35:4d:b3:8d:6a:5d:c4:
                    7a:37:cf:5b:7b:30:df:2b:88:8c:d8:3a:49:95:67:
                    2e:f6:83:6f:a5:3d:67:73:e3:32:e7:3d:94:86:58:
                    f4:a0:46:29:7e:4a:10:73:b6:07:96:02:73:20:8b:
                    87:06:6a:fb:8b:6e:a9:6d:d1:9c:6f:78:4e:79:e1:
                    fe:25:aa:a6:2b:0f:a2:b6:91:76:14:56:e2:9c:f8:
                    3f:63:9a:82:6b:9d:5e:c9:2b:1c:b0:a4:25:1a:ea:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:8B:22:0F:11:23:AC:DE:F6:EE:E7:0C:38:6C:C6:13:95:28:59
            X509v3 Authority Key Identifier:
                keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:62:5b:88:c5:64:ec:8d:f6:18:48:ec:3d:ec:0b:e5:eb:
         db:66:76:58:2d:bc:1a:25:03:09:a7:e3:e4:e8:4a:22:16:56:
         2d:0e:f2:18:ad:e4:cc:ae:03:1f:be:82:61:1b:00:a5:0a:1d:
         3f:64:f8:97:c0:96:60:55:31:13:2e:55:1a:8b:b9:d0:b6:14:
         5f:f2:98:35:59:3b:7d:5a:46:ef:49:ac:be:2a:32:90:01:b1:
         89:41:57:ca:f2:05:d8:77:8c:27:91:39:cc:ea:e0:74:e0:f4:
         ad:d8:41:69:88:70:a2:03:d8:15:a7:d5:b9:6c:9e:a1:35:f3:
         6b:f3:df:c6:d2:7a:94:33:de:74:20:49:0b:fd:d0:3c:32:46:
         76:0e:92:be:c1:8d:7c:2b:72:56:85:66:85:11:f7:17:7a:e4:
         af:82:0e:7d:02:b5:2d:41:e5:1f:be:68:62:be:75:54:31:91:
         03:18:8b:ea:c8:64:c7:7b:03:2b:9c:52:56:ba:27:b7:8a:e5:
         78:bd:19:d2:bb:2e:08:f5:f0:8c:68:65:53:a7:b8:ad:99:2b:
         b2:b1:f0:e6:51:b8:26:51:45:ac:32:36:ba:13:f8:b7:f0:3d:
         89:e9:de:32:71:b6:2f:2d:eb:af:71:65:9a:eb:e5:fc:cf:41:
         16:cb:16:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7LwF2B3Cr0HcLYelg4AjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWEyYWJlZDg5MDhmMzI3Zjg2ZTJiMGFmMTVkNDgzMTA0
OWNlYWEwHhcNMjQwNjE1MjIwMjUyWhcNMjQwNjE2MjIwMjUyWjAzMTEwLwYDVQQD
Eyg5N2U1OGIyMjBmMTEyM2FjZGVmNmVlZTcwYzM4NmNjNjEzOTUyODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR4kVHg6CU3+TD5+WxBGzoHgCrrv
vQbEctYOFn5HXv190aHQhNkoh1XmNGTP0psGi/vtYxI+juXE7rwe/MriwE5pq0+5
USiBAg/VZxXa9QoQqcMtBf3gEeXrcC6gKv4sTNhJURP3UK0I7e0tZ7oEKpi/r0dl
pprJaa/x35ig1/vxll0DoZ/pyjs6Jq0m8oxnycLTNrCnaMg31aTrazVNs41qXcR6
N89bezDfK4iM2DpJlWcu9oNvpT1nc+My5z2Uhlj0oEYpfkoQc7YHlgJzIIuHBmr7
i26pbdGcb3hOeeH+JaqmKw+itpF2FFbinPg/Y5qCa51eySscsKQlGurk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfliyIPESOs3vbu5ww4bMYTlShZMB8GA1UdIwQY
MBaAFDbqKr7YkI8yf4bisK8V1IMQSc6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYt
N2E2MzU5MGEwNmJkLzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYtN2E2MzU5MGEwNmJk
LzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5piW4jF
ZOyN9hhI7D3sC+Xr22Z2WC28GiUDCafj5OhKIhZWLQ7yGK3kzK4DH76CYRsApQod
P2T4l8CWYFUxEy5VGou50LYUX/KYNVk7fVpG70msvioykAGxiUFXyvIF2HeMJ5E5
zOrgdOD0rdhBaYhwogPYFafVuWyeoTXza/PfxtJ6lDPedCBJC/3QPDJGdg6SvsGN
fCtyVoVmhRH3F3rkr4IOfQK1LUHlH75oYr51VDGRAxiL6shkx3sDK5xSVront4rl
eL0Z0rsuCPXwjGhlU6e4rZkrsrHw5lG4JlFFrDI2uhP4t/A9ieneMnG2Ly3rr3Fl
muvl/M9BFssWug==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:15:54 2024 by rpki-client on console-ams.rpki-client.org