Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File:                     NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier:          7opbo+TjLkUT60PUxLXuKpUdISWU2Sob7gsZMy5FhP8=
Subject key identifier:   0C:A0:6F:C7:4B:A4:38:F5:66:93:92:5B:B0:57:DD:69:1E:4E:48:17
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer:       /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial:       019040AF28C520CDE040AC1B29811B6DF22B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 16:02:19 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:19 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:19 +0000
Files and hashes:         1: 7ZkTJEwmFChnw7-INtyCqIV6M0E.roa (hash: XdXTbKLehQ/KHz+GoxcTYB8mA5koi9ving37WweysQk=)
                          2: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: JugJwi3VBn2s7j/zod1fUJxNAoAjWfhS3wqOWXpRPoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:28:c5:20:cd:e0:40:ac:1b:29:81:1b:6d:f2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
        Validity
            Not Before: Jun 22 16:02:19 2024 GMT
            Not After : Jun 23 16:02:19 2024 GMT
        Subject: CN=0ca06fc74ba438f56693925bb057dd691e4e4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:91:7a:d0:78:41:ce:a1:7f:dd:57:a3:59:
                    58:38:ac:2c:54:83:5f:a3:2d:a3:07:1d:ac:52:ed:
                    f3:ff:a5:c4:0b:37:1b:4b:31:d3:fd:57:c3:28:b8:
                    5d:03:35:c0:8f:10:6c:44:53:c1:4f:b8:12:c7:3c:
                    c9:ce:1e:f9:10:ee:1f:84:17:09:c3:1f:3e:c5:21:
                    44:59:86:18:24:6f:b5:74:e7:53:ac:61:4b:67:41:
                    05:20:26:4d:57:c3:09:56:76:bf:18:85:fc:d1:21:
                    dc:f8:17:4d:42:e2:55:a7:07:16:ae:6c:ce:cb:d9:
                    27:6a:97:a4:89:ec:9a:05:b9:26:62:11:03:a7:7b:
                    23:18:cf:db:4d:4e:e0:eb:2e:26:ca:ae:e1:a1:50:
                    1b:71:8e:80:6f:16:9e:67:e2:a8:e8:ca:43:f4:04:
                    fa:7f:95:4b:9e:9e:24:8d:ff:25:b0:08:30:73:d6:
                    a1:03:e9:bb:dd:bb:5f:7d:54:36:5e:03:1f:84:f7:
                    64:c7:9a:be:10:7b:ce:12:7b:1c:4a:46:09:24:6a:
                    53:28:46:fd:6c:a0:40:cc:5f:b1:2b:ea:6f:9a:7a:
                    27:25:8b:36:e3:d4:36:90:18:d1:1f:63:21:43:33:
                    61:8f:a4:94:d6:cc:b9:47:06:1a:c5:ad:51:33:33:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:6F:C7:4B:A4:38:F5:66:93:92:5B:B0:57:DD:69:1E:4E:48:17
            X509v3 Authority Key Identifier:
                keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:69:80:1d:28:11:cc:ec:45:71:d9:6c:88:57:18:d7:aa:7e:
         91:f5:cb:ed:33:57:f4:f0:99:10:02:91:1f:f8:5b:b9:1d:18:
         0d:3a:be:a9:f3:a8:12:70:26:5f:20:ae:d0:3e:cc:c3:36:2d:
         82:23:0b:4b:33:65:b6:3c:4d:64:31:13:e2:64:0e:37:3a:d7:
         eb:51:18:2f:fc:a5:a6:18:93:9c:9c:b4:d4:ff:18:5b:17:8e:
         b0:0d:e4:f3:5b:2c:11:4a:d2:05:82:f6:67:6f:b2:cc:e8:4c:
         63:f6:b4:d3:d0:7c:89:74:d7:0a:f3:33:f5:f6:64:2e:10:af:
         ff:53:44:62:63:0b:a4:05:ed:4e:86:69:60:cd:1e:af:e2:b7:
         4c:1f:20:70:83:6a:b1:e3:0e:b5:a3:44:5d:2d:b3:a5:c0:b1:
         52:c7:25:db:70:a8:a8:93:e2:74:40:0a:d3:44:1e:f7:8d:d6:
         12:0e:a4:60:27:72:62:00:d5:f0:18:da:2f:1c:39:a5:da:08:
         26:e5:d6:7b:39:71:3b:01:fa:c5:97:eb:cb:74:75:36:d1:63:
         69:44:42:11:b5:4f:64:28:88:22:fd:75:c5:22:8e:9a:e0:d2:
         28:1e:94:b2:63:bb:c0:fc:2e:11:13:66:a1:55:72:ab:11:cc:
         af:39:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:34:29 2024 by rpki-client on console-ams.rpki-client.org