Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File:                     N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier:          KM+I0X1/36MsxmIu3cd/NDPlcHa4MpL7jyD2df2uFW0=
Subject key identifier:   DF:2D:99:0E:AB:82:7E:5B:E5:29:C5:80:3B:C7:D3:59:D5:A8:54:D4
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer:       /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial:       019037E177EEA7AA07F25A7CF1D86832DD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number:          0BCC
Signing time:             Thu 20 Jun 2024 23:00:41 +0000
Manifest this update:     Thu 20 Jun 2024 23:00:41 +0000
Manifest next update:     Fri 21 Jun 2024 23:00:41 +0000
Files and hashes:         1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: g7N7LM1326FWgDZEJWbewyCh53kiAqq0Syy4pirJZBQ=)
                          2: srvGKqSonIvrDELx-Ebt4NSCIuI.roa (hash: FVEx6MCQh6JsLb0PNZKLpo3GiIMiOKq1dSsD14LIkGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e1:77:ee:a7:aa:07:f2:5a:7c:f1:d8:68:32:dd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
        Validity
            Not Before: Jun 20 23:00:41 2024 GMT
            Not After : Jun 21 23:00:41 2024 GMT
        Subject: CN=df2d990eab827e5be529c5803bc7d359d5a854d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:5b:e5:fb:9b:02:a0:7c:dc:b4:80:01:23:
                    e5:97:d6:2c:3a:66:24:fa:05:c7:8c:35:26:5c:5a:
                    ab:c2:08:1f:f9:c8:90:49:f0:58:e7:ec:b3:01:ca:
                    e8:21:c7:33:74:43:c8:d7:24:45:9a:fe:85:f4:a9:
                    92:da:6a:d9:d6:41:ef:f6:52:11:bb:36:2a:dd:52:
                    a8:f2:18:9d:45:c6:cb:87:ca:c2:5b:4d:d4:a9:c3:
                    3a:68:01:b1:47:05:5b:ab:64:26:93:c7:47:83:7f:
                    fd:b2:c9:ef:50:8a:50:56:6d:e3:32:df:85:8a:69:
                    6e:26:53:58:53:24:81:ab:62:43:8c:45:11:74:9b:
                    2a:ec:a9:bd:8a:3a:43:d2:a1:ed:e4:da:54:5b:cc:
                    6c:b4:a6:b1:0e:3e:a6:34:71:3c:05:bf:12:1d:0f:
                    de:eb:1b:b0:c9:31:14:9c:67:4a:b0:d2:5e:e2:0d:
                    14:c8:66:40:17:32:0b:1a:60:45:2d:c0:4e:75:c8:
                    82:a3:d4:0a:ed:76:ae:96:59:ae:dd:a9:38:4e:5a:
                    1f:30:b3:4d:f4:de:01:63:67:95:2f:45:f6:1f:e2:
                    da:28:8f:c6:65:bb:1a:6d:16:ec:da:4a:72:a3:f2:
                    a2:41:0d:0b:c3:66:72:ca:48:f0:1e:72:26:4d:e0:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:99:0E:AB:82:7E:5B:E5:29:C5:80:3B:C7:D3:59:D5:A8:54:D4
            X509v3 Authority Key Identifier:
                keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3e:66:89:22:56:b8:6b:cf:6f:14:ec:58:a7:90:b2:be:15:
         66:9d:24:81:1b:65:58:03:24:64:3c:dd:61:db:a8:b1:c3:f0:
         dd:0b:b4:05:ec:1c:26:47:ce:68:fc:ce:39:eb:7b:2a:84:ae:
         cd:a7:9a:b9:5b:7d:76:df:eb:95:e4:78:36:4b:9a:47:9a:3d:
         3b:42:41:5e:a9:5d:19:db:71:4f:04:a3:38:30:f4:a6:8f:f7:
         f3:f7:60:9a:c4:07:63:57:dc:bf:66:1f:1b:ef:a1:f5:ef:1f:
         d4:ea:22:05:f8:8e:9b:7d:49:0c:bf:82:a3:74:e0:14:33:3d:
         cc:56:bb:b3:0b:dc:37:54:ac:d0:4b:37:a2:07:42:b9:ef:f9:
         95:cd:26:56:87:8b:9f:f9:50:66:6a:e5:62:5e:eb:c0:05:d8:
         eb:de:28:f8:3b:97:eb:af:fe:9c:7f:f3:1c:cb:dd:d3:15:b6:
         ef:cd:46:06:cd:b1:89:b3:52:73:f9:7b:ae:c1:ef:f8:83:79:
         a1:ae:1f:0f:87:c3:de:f7:39:15:53:ef:69:a7:45:d7:dd:57:
         19:66:c1:a9:1b:b1:57:30:c3:26:fe:14:63:d5:6c:62:b9:78:
         95:38:63:d2:a2:ec:ef:8f:5e:90:ee:85:d5:49:36:c9:0d:1d:
         a0:99:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:24:24 2024 by rpki-client on console-ams.rpki-client.org