Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File:                     nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier:          xuV5jdG4Pqy8YYYY5vfEDsnMrhMoiq6k2cmpKsCon6k=
Subject key identifier:   4A:05:18:09:39:7F:C9:22:1D:43:AB:6A:C9:FB:69:D1:14:F9:46:83
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer:       /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial:       01901DEC3195A2E4F7CB1D1A12011D8F3C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 22:02:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:16 +0000
Files and hashes:         1: IqddwKVGNM3dMwcNyNWktXSDNoU.roa (hash: wImUcCKqHbyU9lbyjHzF+Ohtk4YlgcaQP7nHOjYLSJQ=)
                          2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: pp6EoAaJWfnuFZRmdxp67CAHu37/Y8bYUOZMEf9fDao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:31:95:a2:e4:f7:cb:1d:1a:12:01:1d:8f:3c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
        Validity
            Not Before: Jun 15 22:02:16 2024 GMT
            Not After : Jun 16 22:02:16 2024 GMT
        Subject: CN=4a051809397fc9221d43ab6ac9fb69d114f94683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:68:07:72:1c:6a:62:65:49:77:0f:97:f0:
                    e1:4c:8e:47:0f:a3:0c:2c:0b:33:b6:00:f6:36:27:
                    ff:e3:37:69:c8:0d:df:fd:28:89:aa:b0:90:fd:6b:
                    dc:34:d7:4d:70:4b:88:fe:f4:a0:65:a8:b2:77:92:
                    e6:7d:b9:31:f1:f6:71:70:3d:a9:87:97:44:15:0c:
                    32:09:76:87:f9:2e:2a:20:51:d8:af:65:dd:28:31:
                    9c:ae:86:c9:b8:07:bd:11:04:1f:c7:8b:fe:28:58:
                    19:67:3b:f0:2a:a8:84:12:d0:4b:18:a6:20:4e:54:
                    07:fa:fc:ab:fa:39:ff:54:cd:46:b9:60:f1:04:94:
                    1b:89:ca:43:75:7f:57:e0:13:f1:bd:cf:ac:16:94:
                    8b:19:68:8a:e5:29:a2:9f:96:09:8d:ca:41:22:60:
                    5d:48:a5:94:0b:cb:7a:14:79:f6:f3:6e:bb:2b:b6:
                    21:ad:14:03:aa:ee:b5:16:d9:e4:84:16:1f:3a:8e:
                    4b:dc:dd:fa:a9:78:33:cf:e2:fc:7d:df:10:0b:59:
                    29:d0:0c:c2:50:85:4b:53:b7:f8:c5:b9:e8:cb:31:
                    d8:1f:a6:82:16:ea:48:5e:ea:28:20:cb:9f:7f:3c:
                    c0:80:57:56:06:ea:22:35:8d:dd:b1:b7:7c:2a:8b:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:05:18:09:39:7F:C9:22:1D:43:AB:6A:C9:FB:69:D1:14:F9:46:83
            X509v3 Authority Key Identifier:
                keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:22:17:19:2c:1d:d7:ea:9a:bd:f5:89:2e:4b:ff:9f:02:e0:
         75:50:01:6f:4b:a3:ab:c0:6c:3d:05:fe:90:9c:e7:8c:3c:44:
         fd:6d:92:19:2d:7b:a3:8d:b2:90:27:6e:86:01:a2:94:97:ee:
         96:42:96:ec:6e:04:cc:86:cb:37:a7:28:fa:0a:5b:c4:75:02:
         b5:1a:c4:45:f6:28:82:8d:bf:f3:ed:f8:b2:2d:e1:af:ff:1f:
         8c:1e:38:ba:d5:ee:47:7c:0b:5b:f7:15:92:2d:f5:ad:70:f6:
         99:8c:24:a0:ef:8d:9b:6c:9b:e6:82:81:b7:a4:d9:4d:53:df:
         ae:61:df:82:68:bc:b7:33:8a:6e:4f:22:87:8a:aa:23:9e:40:
         9d:83:16:07:da:a3:22:d5:a8:c0:78:fa:20:70:92:25:45:01:
         4c:fc:a4:d4:5d:2e:0d:4a:8e:94:85:32:f7:f3:fb:00:0a:66:
         23:9d:9a:e1:48:36:6a:f0:2e:f9:40:cc:01:72:9c:63:f8:15:
         25:d8:c5:fc:2c:5f:c8:4c:d2:ee:8e:b0:7c:98:c4:4c:c9:03:
         44:a4:f7:75:92:07:9f:64:ad:06:7e:25:dc:4f:84:28:18:cc:
         44:a2:f3:67:3c:3a:a1:79:fb:de:9f:c3:57:9a:6a:ab:98:21:
         9b:fe:60:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7DGVouT3yx0aEgEdjzyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0
MzlkYWIwHhcNMjQwNjE1MjIwMjE2WhcNMjQwNjE2MjIwMjE2WjAzMTEwLwYDVQQD
Eyg0YTA1MTgwOTM5N2ZjOTIyMWQ0M2FiNmFjOWZiNjlkMTE0Zjk0NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcxoB3IcamJlSXcPl/DhTI5HD6MM
LAsztgD2Nif/4zdpyA3f/SiJqrCQ/WvcNNdNcEuI/vSgZaiyd5Lmfbkx8fZxcD2p
h5dEFQwyCXaH+S4qIFHYr2XdKDGcrobJuAe9EQQfx4v+KFgZZzvwKqiEEtBLGKYg
TlQH+vyr+jn/VM1GuWDxBJQbicpDdX9X4BPxvc+sFpSLGWiK5Smin5YJjcpBImBd
SKWUC8t6FHn28267K7YhrRQDqu61FtnkhBYfOo5L3N36qXgzz+L8fd8QC1kp0AzC
UIVLU7f4xbnoyzHYH6aCFupIXuooIMuffzzAgFdWBuoiNY3dsbd8KotVXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoFGAk5f8kiHUOrasn7adEU+UaDMB8GA1UdIwQY
MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt
MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh
LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSIXGSwd
1+qavfWJLkv/nwLgdVABb0ujq8BsPQX+kJznjDxE/W2SGS17o42ykCduhgGilJfu
lkKW7G4EzIbLN6co+gpbxHUCtRrERfYogo2/8+34si3hr/8fjB44utXuR3wLW/cV
ki31rXD2mYwkoO+Nm2yb5oKBt6TZTVPfrmHfgmi8tzOKbk8ih4qqI55AnYMWB9qj
ItWowHj6IHCSJUUBTPyk1F0uDUqOlIUy9/P7AApmI52a4Ug2avAu+UDMAXKcY/gV
JdjF/CxfyEzS7o6wfJjETMkDRKT3dZIHn2StBn4l3E+EKBjMRKLzZzw6oXn73p/D
V5pqq5ghm/5gIA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:43 2024 by rpki-client on console-fra.rpki-client.org