Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File:                     nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier:          SSvqLMOt0UfxtMrWXroM+QCI4i9+gJyBfThJIik69wI=
Subject key identifier:   14:61:D3:DD:94:1C:13:56:B7:B8:19:9C:C1:9D:5D:3D:AA:43:61:8D
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer:       /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial:       01901D0F1B47D2B1CAA4DDEB81889E8B6B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number:          0B39
Signing time:             Sat 15 Jun 2024 18:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:47 +0000
Files and hashes:         1: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: acl+2rCWYNWmIZIQE4vVRHZzPQdnbHT8yVWiQNiykQg=)
                          2: y6YfvyghKYS9wkzpFCRb0jD0T0c.roa (hash: dVLNE38ZUig5AnOto1YGHm1iyc5G+NBi2yiyltM3blk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:1b:47:d2:b1:ca:a4:dd:eb:81:88:9e:8b:6b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
        Validity
            Not Before: Jun 15 18:00:47 2024 GMT
            Not After : Jun 16 18:00:47 2024 GMT
        Subject: CN=1461d3dd941c1356b7b8199cc19d5d3daa43618d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1e:9f:36:d5:df:32:3f:9b:3b:97:44:ca:7a:
                    11:02:95:45:37:7d:58:dc:af:47:5f:eb:0f:81:5f:
                    da:e7:38:7e:a1:15:30:71:c8:95:55:43:c2:88:96:
                    81:7e:19:d4:81:0d:9e:f5:eb:29:bd:e2:2e:0f:cc:
                    d4:8e:f5:12:75:e5:89:37:83:29:de:ed:4a:cc:3e:
                    6a:08:e6:3b:ee:ca:b6:89:0d:4e:a1:4f:4f:8c:61:
                    1a:ac:f7:13:f7:f1:42:b7:cf:43:b6:f1:b9:4b:17:
                    13:2d:d0:28:89:b8:83:4f:62:f5:7c:35:e9:e3:80:
                    03:5e:42:a7:57:45:31:00:e7:22:17:4b:95:ef:20:
                    d9:dc:46:17:a4:9d:6e:eb:39:f3:d4:a9:e0:ba:f0:
                    7d:77:ca:ae:46:31:2f:a6:38:08:b1:4a:7f:4c:a7:
                    8b:c6:09:3e:b7:f1:39:1b:12:2a:14:39:8c:39:26:
                    7d:a2:4c:b7:a0:31:5d:9b:4d:30:b4:3e:68:75:4d:
                    44:45:c5:bc:e3:e2:7d:6a:68:09:7f:2c:36:c5:97:
                    1b:41:8c:33:12:9c:99:4a:59:6d:63:9b:58:52:44:
                    0c:bb:56:bd:99:ea:6a:b7:f5:7c:0c:21:9e:dd:83:
                    32:09:db:65:9e:ed:4d:0c:14:53:8f:de:1f:48:ba:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:D3:DD:94:1C:13:56:B7:B8:19:9C:C1:9D:5D:3D:AA:43:61:8D
            X509v3 Authority Key Identifier:
                keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:89:c6:46:a6:d1:78:81:76:b7:c1:3b:d4:69:5b:3e:87:
         35:46:55:47:8c:e8:40:24:17:49:95:d9:60:2c:58:dc:50:d5:
         96:a2:d2:f5:00:e5:70:2c:6f:f1:47:b6:37:8b:02:4c:0e:88:
         ac:ee:5b:a4:30:08:f8:c5:54:35:fa:d6:e6:a8:74:cf:fe:f0:
         a1:29:e8:8a:21:61:bd:48:30:51:f3:b6:dd:a7:e7:9a:4b:7a:
         ed:52:55:e1:db:46:02:5b:fa:d5:0f:c1:43:7b:d0:43:61:d5:
         c9:b8:8f:fc:7e:fc:a2:53:d0:35:04:a7:7e:c9:a2:72:27:59:
         bc:fa:fc:04:f2:dc:2f:09:03:b8:22:fb:6c:61:b7:81:11:d5:
         04:a9:79:4b:59:13:98:61:9e:ea:51:e8:37:0e:b1:4b:c9:d8:
         bf:db:0f:7f:cf:06:e1:09:d0:e9:fb:1b:13:b1:d7:24:7f:90:
         6f:3f:ba:ee:be:6b:a9:45:38:0c:d2:81:4c:a2:2b:fe:14:bb:
         a0:9d:16:74:e9:85:84:a3:92:99:81:e8:e0:67:80:f1:e8:e0:
         36:e6:c3:fa:03:fc:fb:f7:2b:70:13:05:2b:ef:fd:25:65:3b:
         80:ad:a3:b5:0e:85:1e:18:0f:03:ba:03:df:67:d1:a2:75:14:
         47:5a:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:58:15 2024 by rpki-client on console-ams.rpki-client.org