Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File:                     1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier:          TN58iT5+rW4D2DIBcNcimSCIKGybs/oHsS7/1jZDLIU=
Subject key identifier:   F1:C8:AE:06:B8:C0:03:28:DF:8B:B5:CF:31:84:33:45:7C:61:8A:FD
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer:       /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial:       019350BEA815EDC7594B19E88841FDBEB784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number:          100C
Signing time:             Thu 21 Nov 2024 22:01:32 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:32 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:32 +0000
Files and hashes:         1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: vtpO3GOovA6IY1l840eXpuMEiM328LxGhFGguhjQ2Do=)
                          2: QNstPQE9ZulDLKdz8jmTmvilx7o.roa (hash: Q8sF2hSBUCyfSRRRg9gV0DcvIyX77Fnorxv/6suBlBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:a8:15:ed:c7:59:4b:19:e8:88:41:fd:be:b7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
        Validity
            Not Before: Nov 21 22:01:32 2024 GMT
            Not After : Nov 22 22:01:32 2024 GMT
        Subject: CN=f1c8ae06b8c00328df8bb5cf318433457c618afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:23:a7:1a:10:52:17:eb:78:7c:75:c2:0e:
                    6b:5f:c5:1e:bc:b6:e2:f9:05:1a:46:1d:2c:61:b5:
                    34:75:bb:08:4f:61:7a:ec:5d:0e:1a:fa:ce:2a:b1:
                    8b:a2:ba:e4:6d:3c:87:15:a3:27:fb:af:78:b0:64:
                    2f:e9:0f:20:91:b4:fa:03:49:59:9d:bd:05:d2:02:
                    83:25:6e:8e:c0:a9:2c:7c:36:87:db:aa:7f:00:39:
                    e7:04:22:aa:0e:ab:4e:ce:ae:d2:d3:70:11:f3:32:
                    69:29:cb:47:c2:03:55:a5:8a:9d:71:2b:1a:a2:3b:
                    01:fb:33:50:60:35:88:6a:81:ee:5f:93:fd:49:c7:
                    cb:37:1a:2d:16:ec:b1:89:76:10:44:06:a3:e8:93:
                    38:98:91:56:3f:13:de:3f:91:10:f8:ad:e8:db:01:
                    10:f4:a5:53:44:67:00:a3:4a:09:66:ae:dc:9e:81:
                    ac:2a:98:ac:7d:fe:23:ea:b6:79:c6:53:10:49:39:
                    74:79:e3:e1:c0:4e:29:71:fd:c0:43:a4:c1:3f:3a:
                    9e:c9:51:78:d7:dd:d9:3f:63:78:01:a7:91:9f:68:
                    06:62:af:c5:15:a3:63:57:97:3e:39:91:1a:6b:31:
                    9e:51:67:a2:b4:f4:e2:e5:1f:a9:96:52:40:01:d5:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C8:AE:06:B8:C0:03:28:DF:8B:B5:CF:31:84:33:45:7C:61:8A:FD
            X509v3 Authority Key Identifier:
                keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:db:17:f2:bb:3a:e6:89:eb:3a:74:1f:99:e6:92:f6:3c:
         7a:1c:06:43:0a:48:ba:75:7c:35:df:b1:8c:86:d0:99:67:4a:
         9a:01:d4:99:a6:f8:82:e9:9b:ed:af:51:4f:70:49:e6:1d:15:
         1d:31:b5:b2:cf:c2:49:af:ac:b8:53:32:90:f0:46:81:38:86:
         13:14:93:12:75:f5:c1:89:e5:b1:af:ef:41:67:4e:e9:66:76:
         e6:2f:fb:1b:5e:72:c3:02:0b:19:9e:88:5d:8f:7d:58:45:13:
         f5:53:e9:c8:3c:dd:5c:a9:b7:dd:2f:17:d2:25:ad:a1:7b:eb:
         00:b2:e4:c3:b3:4c:97:5e:69:01:85:cf:a5:96:c5:8d:8c:23:
         d3:c6:43:83:6b:54:aa:89:9f:7c:32:6f:ae:80:8e:24:c7:66:
         d7:f3:8c:ea:24:96:65:4e:5a:ef:5d:63:cd:11:dc:1d:c8:83:
         42:30:3d:32:17:14:b9:fa:c5:53:e8:4b:7e:c3:14:eb:d4:aa:
         39:8d:07:28:ad:96:47:13:ed:f8:1d:7e:7b:1d:be:74:0a:10:
         96:45:dd:25:93:d4:24:fe:60:2c:66:60:74:dd:31:70:e0:4d:
         29:9a:9b:a0:1a:92:8a:a4:8a:96:04:83:c8:31:b1:a2:e4:77:
         12:b8:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:46 2024 by rpki-client on console-fra.rpki-client.org