Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File:                     1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier:          z8iFoCpNo4fsJEd2h1y5RrKLJcQJqUOK1nSpvf1N9Ks=
Subject key identifier:   ED:1D:F3:2A:81:C4:75:C7:8E:AA:CB:46:C9:A7:EF:6C:89:54:2B:7B
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer:       /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial:       01901BFEAD8B3E21863CB24E1563FF4A6EAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number:          097C
Signing time:             Sat 15 Jun 2024 13:03:13 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:13 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:13 +0000
Files and hashes:         1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: mdPqM3kS/gDRUD3BgEVg0I33gLLseNsqrv38HME6Igc=)
                          2: pwqEQrTNpjo0zM0uQK-mhMpQmZk.roa (hash: yVsDUfeys13Hbv8MsD/9sO7W/cjeTO0KboSAsO0zSME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:ad:8b:3e:21:86:3c:b2:4e:15:63:ff:4a:6e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
        Validity
            Not Before: Jun 15 13:03:13 2024 GMT
            Not After : Jun 16 13:03:13 2024 GMT
        Subject: CN=ed1df32a81c475c78eaacb46c9a7ef6c89542b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:32:df:8c:5a:e3:3e:ab:49:d2:66:93:2d:
                    1e:d2:7d:ca:63:e1:a7:9e:df:f6:5b:97:e3:29:3f:
                    d4:35:79:9b:ba:57:a2:b2:d7:32:24:db:50:ac:66:
                    a9:aa:c2:16:4d:8f:e1:12:b4:ef:51:54:67:03:d8:
                    a4:12:e2:86:5d:2b:74:41:66:8e:b4:07:f9:fe:be:
                    45:2d:af:68:bd:72:34:03:cc:11:1a:15:72:31:cf:
                    f4:43:8f:d4:e5:1c:33:1d:c6:2a:09:92:17:bd:05:
                    19:c4:59:a0:ec:7d:f3:66:d9:6c:77:fb:7d:6e:af:
                    4f:4c:eb:58:8c:0a:be:a1:b4:7e:58:13:d7:4d:0c:
                    d3:14:01:49:be:9b:d3:b9:bb:1b:37:e5:50:bf:84:
                    e7:d1:ae:cd:2b:be:20:c2:39:26:62:a9:a5:2d:5e:
                    ef:dc:b3:54:5e:40:6b:8c:16:66:81:23:0c:89:8d:
                    f9:b0:b2:c8:3d:1a:b9:ae:ab:0d:6f:07:26:f1:32:
                    7a:75:e9:7c:ac:a0:f4:9b:18:61:a2:e3:4c:58:78:
                    b6:6d:6d:ee:3c:9c:15:03:03:0d:1b:83:61:a9:e0:
                    67:a0:ff:06:d4:2d:32:99:7b:3c:81:4c:fd:b2:8b:
                    86:cf:45:85:ea:e8:c1:e1:e6:42:60:b8:5d:54:d2:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:F3:2A:81:C4:75:C7:8E:AA:CB:46:C9:A7:EF:6C:89:54:2B:7B
            X509v3 Authority Key Identifier:
                keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:dd:d5:5a:4b:34:83:bc:c1:cf:38:f3:25:65:eb:d5:33:
         95:d8:03:62:e9:f2:e5:9f:ab:ac:28:42:51:f9:40:8a:b2:a7:
         26:e2:20:d0:60:a7:51:97:e4:b2:36:ca:be:70:0c:c8:59:a8:
         20:7e:39:df:18:4d:01:94:34:74:33:f5:22:58:f7:a4:d8:cb:
         13:0c:8a:64:6b:fe:0a:30:a4:a1:78:ea:79:7d:75:a0:da:58:
         5f:dc:d7:3c:1f:59:e2:82:f6:8f:4a:1b:0c:0c:ec:5e:b3:be:
         e7:f8:80:77:0b:6e:be:fb:b9:7a:19:bd:b3:62:2e:83:2e:c4:
         15:e3:ad:56:81:0e:92:38:31:00:e3:9b:77:4a:7b:4c:ab:bf:
         04:47:60:bd:b2:b9:2f:ef:95:0b:92:6a:61:a7:59:0e:dc:db:
         3d:7c:3a:5c:8e:39:62:78:9b:52:fd:8c:dc:bf:36:50:57:17:
         07:5e:32:e4:67:39:66:35:31:a1:e1:24:82:26:ef:90:12:13:
         be:fc:63:5b:cb:6d:e6:63:ad:fc:2a:e1:88:ff:2c:99:2b:aa:
         ee:9f:0b:fd:9b:79:6a:25:5c:5f:d9:f2:89:66:16:3a:ce:17:
         62:81:dd:28:ca:6b:61:d1:16:5e:d5:93:74:80:9d:d9:a8:cf:
         dd:71:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:43:15 2024 by rpki-client on console-ams.rpki-client.org