Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File:                     ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier:          03agm4Yh52B1OWdOcBJ0dqHzcV+qeiw0/kWhIkAtdHY=
Subject key identifier:   0C:91:CA:F2:0F:3D:0E:07:98:3C:D2:DC:44:F6:3B:50:9E:D1:25:DB
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer:       /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial:       019041529A82B3A33E2D4413A722165E25B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number:          0C47
Signing time:             Sat 22 Jun 2024 19:00:50 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:50 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:50 +0000
Files and hashes:         1: 5CwLabnIv2lbGt4vidqeRX88C9c.roa (hash: qY738z2jA1epGOO/NAlYiTl0jbVXfb9rF5vU8hAGHPE=)
                          2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: pNW7gJkFFD6AXKpYK2303a78INejjwqldlD4AcQMrL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:9a:82:b3:a3:3e:2d:44:13:a7:22:16:5e:25:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
        Validity
            Not Before: Jun 22 19:00:50 2024 GMT
            Not After : Jun 23 19:00:50 2024 GMT
        Subject: CN=0c91caf20f3d0e07983cd2dc44f63b509ed125db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:b8:db:58:83:7a:f6:3e:32:66:d7:f2:6a:
                    a8:71:01:c7:e7:2d:25:89:dd:30:30:d0:bf:94:c8:
                    0b:f3:db:86:2b:25:ef:b2:b3:81:13:3c:c6:90:c6:
                    21:25:91:06:a1:b4:36:00:24:f8:82:89:0f:34:98:
                    fe:dc:36:78:f9:58:97:10:6f:7c:02:73:bf:e1:5c:
                    3a:47:f7:da:df:3f:fc:9c:c1:d7:f7:c6:9c:e1:0c:
                    f6:19:03:4b:d7:28:b7:2a:d7:c9:ce:da:6d:78:2b:
                    b2:c4:09:22:dd:b2:8d:a3:16:88:d5:df:1f:fe:b6:
                    df:17:a1:cd:06:d7:80:c5:bc:90:01:76:b4:54:17:
                    d6:cf:2d:d0:36:08:66:3e:87:be:ed:0f:ae:1e:fd:
                    2f:ca:99:71:0a:67:cc:80:31:18:4a:be:ad:52:b9:
                    03:da:1e:5a:8e:49:dd:30:ad:d6:f3:bf:af:03:6a:
                    a5:85:d0:ad:aa:ad:1f:f1:6d:5a:9b:2d:2d:3b:cb:
                    9f:33:83:a4:3f:8e:6e:ba:0f:bd:7f:e7:48:c6:34:
                    5b:87:29:8b:a0:50:5c:8f:1b:b2:fb:30:11:2f:f6:
                    68:bc:9f:63:b8:84:a7:c5:93:13:22:50:a8:a7:62:
                    52:ef:7d:90:1c:f2:9a:8b:9c:e3:67:f3:07:31:63:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:CA:F2:0F:3D:0E:07:98:3C:D2:DC:44:F6:3B:50:9E:D1:25:DB
            X509v3 Authority Key Identifier:
                keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:2c:12:08:cb:35:1c:b9:b1:49:f4:55:77:b6:ed:25:2a:
         5b:ef:5f:d4:a7:53:39:6e:71:43:c2:5c:d8:0c:42:35:24:27:
         68:82:73:2f:99:d9:11:4d:e2:08:42:35:bd:00:6b:37:10:99:
         c5:00:76:34:e5:a7:03:ec:9b:5c:64:1d:66:94:95:a5:7d:94:
         a6:36:dc:47:c5:0f:4f:7c:d3:99:20:3c:d6:d9:a5:3a:f6:e1:
         4d:81:ae:a0:2b:0f:a5:da:bc:0f:f3:4c:1b:0a:10:bf:c7:84:
         a5:01:be:f6:b6:02:5f:49:80:32:0f:4b:ba:b4:e8:c8:81:88:
         06:c6:01:90:ef:5f:8d:a0:1a:e6:44:2d:b5:71:86:42:22:3b:
         e7:f0:92:27:ac:1a:89:1f:bc:54:20:44:ac:d0:7e:be:59:ac:
         87:d6:a5:52:5b:87:68:e8:89:d3:3c:07:53:dc:00:25:a8:11:
         ab:f5:6b:07:6d:70:be:87:ba:33:bd:0c:fc:49:19:03:b4:e2:
         bb:05:dd:75:b5:a7:e0:54:a5:ef:73:2b:2c:10:37:2d:26:46:
         07:e9:94:89:5f:08:36:86:59:4f:4d:65:d0:70:d4:ff:57:e0:
         02:eb:34:2a:c9:4f:09:31:3c:fd:d5:3d:d6:47:be:ee:21:b1:
         62:9d:c1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBUpqCs6M+LUQTpyIWXiW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjQwNjIyMTkwMDUwWhcNMjQwNjIzMTkwMDUwWjAzMTEwLwYDVQQD
EygwYzkxY2FmMjBmM2QwZTA3OTgzY2QyZGM0NGY2M2I1MDllZDEyNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hi421iDevY+MmbX8mqocQHH5y0l
id0wMNC/lMgL89uGKyXvsrOBEzzGkMYhJZEGobQ2ACT4gokPNJj+3DZ4+ViXEG98
AnO/4Vw6R/fa3z/8nMHX98ac4Qz2GQNL1yi3KtfJztpteCuyxAki3bKNoxaI1d8f
/rbfF6HNBteAxbyQAXa0VBfWzy3QNghmPoe+7Q+uHv0vyplxCmfMgDEYSr6tUrkD
2h5ajkndMK3W87+vA2qlhdCtqq0f8W1amy0tO8ufM4OkP45uug+9f+dIxjRbhymL
oFBcjxuy+zARL/ZovJ9juISnxZMTIlCop2JS732QHPKai5zjZ/MHMWMVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyRyvIPPQ4HmDzS3ET2O1Ce0SXbMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbMsEgjL
NRy5sUn0VXe27SUqW+9f1KdTOW5xQ8Jc2AxCNSQnaIJzL5nZEU3iCEI1vQBrNxCZ
xQB2NOWnA+ybXGQdZpSVpX2UpjbcR8UPT3zTmSA81tmlOvbhTYGuoCsPpdq8D/NM
GwoQv8eEpQG+9rYCX0mAMg9LurToyIGIBsYBkO9fjaAa5kQttXGGQiI75/CSJ6wa
iR+8VCBErNB+vlmsh9alUluHaOiJ0zwHU9wAJagRq/VrB21wvoe6M70M/EkZA7Ti
uwXddbWn4FSl73MrLBA3LSZGB+mUiV8INoZZT01l0HDU/1fgAus0KslPCTE8/dU9
1ke+7iGxYp3BZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:45:49 2024 by rpki-client on console-fra.rpki-client.org