Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier:          yNJdAgOh8MDyMFPOCkcaHzQl9duZdl+DlJPPU7SRIck=
Subject key identifier:   65:5C:15:6C:BE:39:CA:F5:06:98:76:DD:0A:27:8B:5B:D9:22:57:17
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer:       /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial:       01901F34A41EA33D40292E36E73BDCD1F76C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 04:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:01 +0000
Files and hashes:         1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: KJsBSILLw4I+14vKkE50nWAGD3onc0mT6zS8uBiD3jw=)
                          2: vMlav8-kMk_WskNEWudE9YmxV-0.roa (hash: 2ac9bzl44U8yDQK3JzdQEI0mwZd9xK+j0BgpcysGPMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:a4:1e:a3:3d:40:29:2e:36:e7:3b:dc:d1:f7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340551ace81314829351a27e399aeddb33246155
        Validity
            Not Before: Jun 16 04:01:01 2024 GMT
            Not After : Jun 17 04:01:01 2024 GMT
        Subject: CN=655c156cbe39caf5069876dd0a278b5bd9225717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b3:7b:ae:a3:ed:87:b0:06:6f:cf:28:50:98:
                    a0:ae:6a:12:87:42:a8:06:98:d7:90:2d:52:5b:58:
                    e4:ff:49:b1:f3:6a:d8:fc:66:f6:fa:7f:93:2b:d9:
                    a1:1b:4d:4a:50:79:b0:ed:30:fc:67:6b:88:08:34:
                    85:32:d1:9e:f2:fb:1e:21:53:90:7a:98:fc:a6:64:
                    65:5d:f8:67:73:a8:3d:ff:43:4e:9e:ee:c2:6f:7e:
                    ab:31:f3:72:66:75:71:f0:35:8a:4b:92:12:c2:93:
                    41:96:e3:6c:9d:47:10:c3:12:b7:78:3a:7c:dc:d3:
                    f7:38:27:4f:84:05:68:2c:83:a4:e5:bf:97:d6:43:
                    d6:7a:99:fe:68:31:60:e7:68:92:a8:12:52:f9:5e:
                    07:ae:40:af:94:74:92:e9:70:a6:3b:a8:c2:48:9d:
                    7a:8e:96:52:f2:2d:9d:6b:f2:9f:63:24:4d:f6:f9:
                    ca:df:a1:dc:0f:75:8f:fd:93:20:d1:83:be:d2:93:
                    77:0c:d6:43:fc:6d:81:ab:81:13:89:1d:0e:39:c7:
                    8a:09:48:fd:cb:bf:6d:01:77:1e:14:c0:0f:b7:86:
                    b6:62:43:7d:ef:d8:6d:cd:7c:2c:3f:61:f3:61:57:
                    4a:a0:a5:8d:39:da:1b:99:63:56:a3:fb:81:28:cf:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:15:6C:BE:39:CA:F5:06:98:76:DD:0A:27:8B:5B:D9:22:57:17
            X509v3 Authority Key Identifier:
                keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:ee:99:4a:4d:82:2b:ee:c3:75:05:36:83:6d:48:45:ae:
         57:9f:4b:fd:1a:3e:90:4b:9d:6e:d5:00:39:ab:bc:56:f8:59:
         73:37:7b:8c:d2:51:44:64:ad:5c:4e:1d:fd:b3:9c:b6:35:f2:
         06:81:56:82:f2:ba:9c:9f:2b:48:fb:13:7f:9b:dd:b7:c9:19:
         dd:aa:2f:1a:4a:1e:ee:7a:1d:dc:44:45:97:11:e4:92:9f:8e:
         97:0b:9a:e6:00:60:6c:c0:70:0e:cf:db:91:f5:d1:80:8d:59:
         a0:a4:68:4c:48:fa:55:e4:7d:78:e1:40:8a:11:ce:e9:bd:37:
         8a:cd:69:7e:6c:e2:7b:fa:e9:12:9f:e4:4c:56:be:a0:8c:15:
         a3:18:20:94:8d:5f:aa:81:a3:4c:62:4c:3d:81:4d:3f:3f:4e:
         f2:75:b2:0c:be:e0:a1:d6:4a:8d:83:1c:97:e7:75:cb:29:08:
         3e:23:93:ad:04:62:ee:34:b9:47:1f:6f:5d:c5:8c:06:f0:ae:
         14:c1:d4:fd:84:4f:d0:67:8a:f3:fb:c7:4d:77:65:c7:a9:d6:
         98:7e:e8:ce:9e:83:d5:92:c1:a9:cf:7e:d0:24:67:cf:e5:c7:
         b3:71:2b:a4:dc:ba:fe:e3:c7:f4:2e:de:a3:31:26:4c:9c:40:
         26:91:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:57 2024 by rpki-client on console-ams.rpki-client.org