Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File:                     Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier:          oAMGaD7w3S6X9lcLa/n84IDQ+7iinp5HPgKBV7QWCdE=
Subject key identifier:   4E:0D:99:6F:F8:F2:71:E3:A4:05:4D:B5:5D:3C:4E:81:00:05:A9:BC
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer:       /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial:       01901D4661EA830D594552EA5D8A3E3525CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number:          0886
Signing time:             Sat 15 Jun 2024 19:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:10 +0000
Files and hashes:         1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: ydGYjAhyiCaFR3ZeO30qtA3/HlepZvmZsXatE5aKnlg=)
                          2: hdunSZBExdvm6tZZr6LtXSPsIcE.roa (hash: 6i6P940T0N7MLzg2qqrIfpzqFKHklUhkph8kPrvkVg0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:61:ea:83:0d:59:45:52:ea:5d:8a:3e:35:25:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
        Validity
            Not Before: Jun 15 19:01:10 2024 GMT
            Not After : Jun 16 19:01:10 2024 GMT
        Subject: CN=4e0d996ff8f271e3a4054db55d3c4e810005a9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:70:ad:e4:f2:1c:31:7d:4a:42:af:b9:9a:
                    0e:f9:8b:7e:30:ee:fd:39:fa:d1:e3:2e:fb:d5:16:
                    3c:b0:9b:04:97:67:b1:5a:b9:4e:22:de:a9:bc:64:
                    a9:a8:6b:7b:fd:e6:e1:e2:9d:e8:39:4f:49:e7:86:
                    eb:c0:d8:97:48:fb:1d:85:43:97:3e:56:bb:7b:04:
                    eb:e0:8f:cf:34:e4:9b:9b:26:f2:88:35:33:08:3f:
                    b0:3c:f2:54:a8:62:69:44:d9:4c:19:24:cd:e8:a0:
                    ca:f4:a0:79:c7:b6:fe:f3:94:d1:fb:40:4d:d2:a0:
                    06:95:57:91:0d:47:80:45:cb:26:5a:48:a8:d4:5a:
                    1c:36:6d:ea:d6:2c:ff:0c:f7:ae:a3:9a:bb:ac:1d:
                    76:96:4f:71:1e:b7:23:9c:19:43:55:4f:c9:32:ce:
                    9d:78:44:e2:e9:0e:82:c9:5b:c0:ac:43:5f:02:85:
                    fb:a3:00:07:1b:e7:24:c3:95:79:d6:30:b2:fd:a8:
                    2e:c6:31:3b:47:69:12:d8:bc:d3:82:b3:56:cf:c6:
                    cf:f1:e9:d8:40:57:be:b7:12:67:2b:f5:ff:4e:8d:
                    a9:01:4e:4d:70:fd:82:76:43:06:a7:25:61:ff:e8:
                    66:23:7b:75:38:ba:37:61:72:4e:49:38:3b:f2:ad:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:99:6F:F8:F2:71:E3:A4:05:4D:B5:5D:3C:4E:81:00:05:A9:BC
            X509v3 Authority Key Identifier:
                keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:91:11:97:6e:b0:bb:77:74:31:5c:99:49:cd:aa:30:67:d6:
         40:df:d3:d8:7d:82:47:ab:a7:6d:c9:1f:04:db:07:78:d3:f2:
         d1:86:3e:d3:f0:8f:12:41:56:36:81:c0:d7:5a:42:e5:3e:be:
         05:5e:cc:9f:30:64:ca:50:57:dc:9d:7d:75:42:16:2f:90:47:
         49:06:64:6f:af:23:c7:06:50:37:b2:73:9e:1c:0e:85:4c:e3:
         69:09:5f:b3:9c:86:60:e4:31:bb:34:f7:fc:5a:34:3d:a5:87:
         b0:7f:a9:e5:1d:95:df:82:6e:81:45:80:85:70:e2:9f:0c:a0:
         2a:74:5f:b7:12:93:94:43:a6:fe:96:cb:8e:52:7d:0d:d0:b3:
         d5:e1:4f:e1:a8:a7:b3:7b:09:d0:6e:f2:1d:5b:80:ec:e2:3c:
         4e:18:e2:60:53:b3:a3:8a:1b:51:21:bd:9d:a9:7f:8a:5a:cd:
         a5:9c:33:6f:78:96:0a:3d:55:b1:10:48:79:79:aa:da:ae:dc:
         dc:67:dd:80:28:92:dc:a2:8d:dc:66:25:dd:c4:08:25:cc:ea:
         df:a0:22:11:ba:3f:b7:11:de:e5:3c:37:68:9a:e8:aa:30:aa:
         13:3b:22:38:f7:52:e7:21:e4:09:0e:12:04:fc:72:3d:d1:55:
         2c:58:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:41:01 2024 by rpki-client on console-fra.rpki-client.org