Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.mft
File:                     NE5qzHmsS2VUN_jG-XZGgtnsIkA.mft (raw, json)
Hash identifier:          MQ3f9Av2cYDiAWqdzhcCoXZYUYY4H54AQWwAn/u3fgY=
Subject key identifier:   F5:79:59:CA:F8:A8:13:2C:3C:D6:17:D0:B0:BD:22:DD:8C:2F:0C:5E
Authority key identifier: 34:4E:6A:CC:79:AC:4B:65:54:37:F8:C6:F9:76:46:82:D9:EC:22:40
Certificate issuer:       /CN=344e6acc79ac4b655437f8c6f9764682d9ec2240
Certificate serial:       01901DEB65CCCBBBDC95356914F4512E7C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.mft
Manifest number:          07FF
Signing time:             Sat 15 Jun 2024 22:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:24 +0000
Files and hashes:         1: NE5qzHmsS2VUN_jG-XZGgtnsIkA.crl (hash: OsOJInYhBeOO+H+F6isKKegKKSMy9Z9Q7inQu0aYDc4=)
                          2: _zNAl7bBRLcVuKWTL9EYtTOZ2rw.roa (hash: ZTrUSO7uDT3XoY4ZacBZq6yGOK8mNCtVSjRdXzc6/nk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:65:cc:cb:bb:dc:95:35:69:14:f4:51:2e:7c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344e6acc79ac4b655437f8c6f9764682d9ec2240
        Validity
            Not Before: Jun 15 22:01:24 2024 GMT
            Not After : Jun 16 22:01:24 2024 GMT
        Subject: CN=f57959caf8a8132c3cd617d0b0bd22dd8c2f0c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:cc:16:b6:0a:24:f8:b3:06:09:22:70:0e:
                    19:f9:f5:ff:04:c7:e9:24:e2:ae:b2:e4:35:df:65:
                    d9:a9:1e:b9:d7:9c:dd:46:01:f2:d4:02:10:21:cb:
                    8c:46:3f:2a:77:38:95:f3:ad:91:0d:8b:62:f9:c3:
                    46:f2:9d:c2:0f:c3:15:90:e3:ee:d7:76:0a:d5:7f:
                    d4:77:c3:55:5c:17:82:57:09:42:6e:52:59:7c:3f:
                    83:15:d6:6c:f7:67:a4:5d:ad:a5:b8:21:dd:a7:a7:
                    18:50:b1:68:9d:cc:fd:74:d5:32:c5:2e:aa:c3:eb:
                    25:02:21:ed:51:7e:26:ef:ac:88:a0:4e:a4:21:5c:
                    b8:93:7f:e3:9b:95:f1:38:00:85:6b:ff:dd:0e:8c:
                    f2:de:c5:ea:91:16:5e:d9:50:aa:32:5d:42:45:87:
                    57:38:85:77:5d:3c:49:a8:e2:d9:53:3f:e4:9e:3b:
                    19:91:24:97:29:f1:0f:8b:3d:83:c1:ba:f9:7c:71:
                    ff:ac:91:5e:a2:90:95:24:5b:37:2a:23:4e:88:09:
                    71:02:52:1c:b5:6a:b1:a3:70:dd:1a:fd:41:bd:25:
                    b9:e1:f1:c1:6b:7b:49:c5:f3:1f:ba:40:64:12:e0:
                    2c:b6:bc:f4:5b:36:4a:04:d5:39:75:f1:e1:fe:d3:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:79:59:CA:F8:A8:13:2C:3C:D6:17:D0:B0:BD:22:DD:8C:2F:0C:5E
            X509v3 Authority Key Identifier:
                keyid:34:4E:6A:CC:79:AC:4B:65:54:37:F8:C6:F9:76:46:82:D9:EC:22:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:93:34:75:5c:56:29:df:79:82:9d:af:f4:12:40:aa:cb:
         91:76:f1:43:82:d3:ee:95:e3:25:16:50:97:eb:0f:b5:73:3b:
         79:78:82:75:ab:33:04:bb:26:1b:3e:ee:58:72:f0:10:9d:49:
         88:be:62:2e:90:eb:3a:dd:32:1a:c7:58:21:1f:ca:9d:54:54:
         f1:c8:53:14:fd:21:2c:dc:1b:ed:00:17:1f:49:2b:5f:09:35:
         34:25:30:55:c7:1e:d7:0b:fc:4f:24:e2:a1:7d:82:74:4e:b0:
         81:1c:0b:31:b1:a3:97:40:9d:96:c4:9c:84:c3:92:50:ad:b1:
         a9:67:04:42:6a:38:1d:ea:42:73:e8:05:c8:90:c3:fd:3a:b3:
         32:53:a4:11:ed:07:80:67:08:f9:c2:ac:51:da:80:c5:33:ab:
         d4:cb:10:2a:73:5e:6c:ef:e7:56:79:3c:7e:df:1a:86:59:a7:
         e7:b3:44:3f:ab:15:5c:0a:c6:7f:88:e4:b6:32:01:34:9b:ae:
         54:f7:20:12:bf:7d:3b:29:03:1a:1d:ea:c9:33:f2:df:66:e4:
         a5:eb:75:d8:77:57:4c:50:e0:3c:77:1f:18:fb:e4:2a:47:51:
         0f:b7:08:70:e6:1e:46:17:6b:a1:0f:50:bd:e4:71:05:47:fc:
         6b:cc:e4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd62XMy7vclTVpFPRRLnw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGU2YWNjNzlhYzRiNjU1NDM3ZjhjNmY5NzY0NjgyZDll
YzIyNDAwHhcNMjQwNjE1MjIwMTI0WhcNMjQwNjE2MjIwMTI0WjAzMTEwLwYDVQQD
EyhmNTc5NTljYWY4YTgxMzJjM2NkNjE3ZDBiMGJkMjJkZDhjMmYwYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0XMFrYKJPizBgkicA4Z+fX/BMfp
JOKusuQ132XZqR6515zdRgHy1AIQIcuMRj8qdziV862RDYti+cNG8p3CD8MVkOPu
13YK1X/Ud8NVXBeCVwlCblJZfD+DFdZs92ekXa2luCHdp6cYULFoncz9dNUyxS6q
w+slAiHtUX4m76yIoE6kIVy4k3/jm5XxOACFa//dDozy3sXqkRZe2VCqMl1CRYdX
OIV3XTxJqOLZUz/knjsZkSSXKfEPiz2Dwbr5fHH/rJFeopCVJFs3KiNOiAlxAlIc
tWqxo3DdGv1BvSW54fHBa3tJxfMfukBkEuAstrz0WzZKBNU5dfHh/tP5HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV5Wcr4qBMsPNYX0LC9It2MLwxeMB8GA1UdIwQY
MBaAFDROasx5rEtlVDf4xvl2RoLZ7CJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkU1cXpIbXNTMlZVTl9qRy1YWkdndG5zSWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMTQ1YjgtZjljNi00NjVjLTg0ZmIt
NzJjZjRlNzZhNzdiLzEvTkU1cXpIbXNTMlZVTl9qRy1YWkdndG5zSWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMTQ1YjgtZjljNi00NjVjLTg0ZmItNzJjZjRlNzZhNzdi
LzEvTkU1cXpIbXNTMlZVTl9qRy1YWkdndG5zSWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuqTNHVc
VinfeYKdr/QSQKrLkXbxQ4LT7pXjJRZQl+sPtXM7eXiCdaszBLsmGz7uWHLwEJ1J
iL5iLpDrOt0yGsdYIR/KnVRU8chTFP0hLNwb7QAXH0krXwk1NCUwVcce1wv8TyTi
oX2CdE6wgRwLMbGjl0CdlsSchMOSUK2xqWcEQmo4HepCc+gFyJDD/TqzMlOkEe0H
gGcI+cKsUdqAxTOr1MsQKnNebO/nVnk8ft8ahlmn57NEP6sVXArGf4jktjIBNJuu
VPcgEr99OykDGh3qyTPy32bkpet12HdXTFDgPHcfGPvkKkdRD7cIcOYeRhdroQ9Q
veRxBUf8a8zkOA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:03:52 2024 by rpki-client on console-ams.rpki-client.org