Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
File:                     NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft (raw, json)
Hash identifier:          1yB+PXWOJE2H/FEtLE01uQBknnxSfbs0iq7jOBbvgDI=
Subject key identifier:   60:99:28:0C:B1:3F:EF:77:43:ED:13:FD:25:B2:4C:81:7B:97:C7:86
Authority key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Certificate issuer:       /CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Certificate serial:       018F8A495851365994ECA2049DF9D37F854B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
Manifest number:          065D
Signing time:             Sat 18 May 2024 06:00:13 +0000
Manifest this update:     Sat 18 May 2024 06:00:13 +0000
Manifest next update:     Sun 19 May 2024 06:00:13 +0000
Files and hashes:         1: AEC7cGOJMy9lVfnous4f1hekmCE.roa (hash: OmkWM/Ru9p6cXGmUz6KNbbeRmfwyx8i9BUzKyTxp2Hw=)
                          2: DKJzxVdxG4XR5l7FxXAAyx5I1Rk.roa (hash: 4ghl70yHJAoVjEKNWqwj051SvU2leduNg3iYVO+DazY=)
                          3: KWKUox9sOQ5-9_8WM4SyrLb8sqc.roa (hash: KX63hO3B5GE4PurZk/chalvF9oo17eptTPmHSE8hLLE=)
                          4: NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl (hash: GimHLpXC28NagaVz37+5phP5x+5E9+Nr5ZhJbpc2pVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:49:58:51:36:59:94:ec:a2:04:9d:f9:d3:7f:85:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
        Validity
            Not Before: May 18 06:00:13 2024 GMT
            Not After : May 19 06:00:13 2024 GMT
        Subject: CN=6099280cb13fef7743ed13fd25b24c817b97c786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:ac:96:e9:c5:41:ed:57:1b:b3:6c:d4:c2:
                    91:0b:a2:16:c1:0c:62:07:b4:2a:e2:da:a2:66:45:
                    fa:20:80:f8:b6:49:48:28:75:81:38:48:91:31:16:
                    ab:10:3b:39:b3:80:be:65:81:24:6d:55:69:b4:7b:
                    e3:ab:63:30:10:a1:08:db:79:af:09:89:9c:fd:88:
                    81:65:cc:db:cd:5d:cf:5f:b8:99:c2:2a:bc:eb:29:
                    89:3e:22:51:0a:ab:19:70:09:57:87:60:4e:e0:32:
                    a1:d0:a8:2a:3d:1a:7d:dd:f0:0f:3b:6f:4c:ae:d6:
                    ea:b8:d9:a9:55:ea:41:49:a4:f6:4d:77:e9:78:95:
                    e3:a5:4e:5f:96:0f:eb:3c:b7:b3:e3:75:90:f5:6c:
                    b6:6a:f4:6f:40:63:dd:62:13:8f:6f:0a:fe:ef:ce:
                    93:5a:37:2a:99:42:79:5e:19:ea:0b:2d:3c:57:c7:
                    19:3f:83:27:d5:37:34:08:16:22:b4:08:e0:ef:22:
                    c6:24:95:d5:9f:ce:ae:29:ae:d1:17:d4:a9:8b:31:
                    e0:25:ba:d0:bb:b8:8f:c3:a9:d7:85:07:1f:a3:45:
                    4f:11:0d:f5:67:41:6c:eb:ef:2e:ce:5f:62:93:51:
                    52:6c:a3:3d:88:bd:06:9d:e1:6b:a8:ae:c3:28:6d:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:28:0C:B1:3F:EF:77:43:ED:13:FD:25:B2:4C:81:7B:97:C7:86
            X509v3 Authority Key Identifier:
                keyid:34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:71:6a:ef:b9:00:f1:50:c6:97:5a:98:e6:bd:ba:eb:12:
         35:96:3d:ee:39:3f:98:cf:68:8f:ca:49:40:b6:d3:51:7b:0c:
         4e:8f:b2:51:0b:c5:51:0b:9b:de:33:e4:05:7f:e1:94:b2:34:
         99:35:0d:a0:b0:02:9f:6c:40:72:a7:7c:8a:f8:88:13:f0:3e:
         79:c3:76:28:c2:23:ea:0f:a5:ee:66:00:84:6a:58:4b:0d:99:
         0d:3f:bc:84:9d:b5:9a:78:19:ab:c9:6a:5e:9d:e8:0f:ba:bd:
         19:44:02:66:69:f1:de:1a:92:91:5d:b8:d1:19:7d:51:b5:62:
         6e:79:a2:70:9d:ec:93:e6:9f:f4:2d:34:c6:01:ef:74:f6:a1:
         2c:ab:54:1a:db:3b:99:1d:37:69:c9:f2:7b:68:b0:3a:44:66:
         c5:41:65:a8:bc:18:38:40:93:1e:bb:cc:bc:c5:e3:fc:de:ac:
         2b:94:60:13:d3:ae:99:6a:f4:0e:2c:ff:e8:07:3c:68:40:40:
         bd:f4:95:05:88:c0:cf:d8:be:9e:fa:51:42:fa:8a:33:af:b1:
         4d:cd:6c:79:b7:58:c2:8e:54:93:42:53:8b:96:32:05:38:e1:
         1c:bc:48:52:dd:17:e8:47:0a:1d:05:56:5e:20:4c:99:cd:6b:
         03:e7:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:27:01 2024 by rpki-client on console-fra.rpki-client.org