Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File:                     2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier:          c7FiaMqbM+oX9ofcAbVSMptu2xHEPcIKpnJWZt6bnm8=
Subject key identifier:   EF:FF:AB:A6:33:6A:0D:16:53:30:44:2A:84:07:24:91:4B:AA:83:31
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer:       /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial:       018F44567F6120022A5CA63B84C4EB20F9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 16:01:10 +0000
Manifest this update:     Sat 04 May 2024 16:01:10 +0000
Manifest next update:     Sun 05 May 2024 16:01:10 +0000
Files and hashes:         1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: OYC/ljR+ERitCgV2nnwNi8sNvah2jKZ8RdTdxeREpd0=)
                          2: 7evpWuUSbIj0vNrYNgdiB3mxQlQ.roa (hash: EHxpCLJqTImzXPPV3b2SHALR0s0KnC/upuHOvwl6VmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:56:7f:61:20:02:2a:5c:a6:3b:84:c4:eb:20:f9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
        Validity
            Not Before: May  4 16:01:10 2024 GMT
            Not After : May  5 16:01:10 2024 GMT
        Subject: CN=efffaba6336a0d165330442a840724914baa8331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:c7:70:ea:46:0e:7d:5b:7c:3e:de:3a:4a:
                    4d:d0:38:1d:5e:65:29:36:2a:db:b8:e0:2e:27:94:
                    c8:d4:7e:92:bc:f6:25:d7:18:0a:39:f5:2a:55:5b:
                    f3:94:4f:4d:0c:57:e1:ff:d8:62:0e:63:fb:1d:90:
                    66:87:4f:92:82:35:97:d4:3b:0a:2f:2d:35:45:24:
                    dd:6b:bb:bc:ed:14:bf:d5:73:9c:98:6a:90:9f:c2:
                    68:84:b0:14:45:cc:a9:76:f7:22:2a:97:a3:96:1c:
                    0a:a8:41:67:e3:b9:51:f0:b0:c0:fa:a0:b9:70:c4:
                    97:f1:d8:62:d4:ed:46:c2:99:e1:08:5e:45:66:77:
                    9a:a4:c2:a5:ff:eb:e9:d3:ca:40:c5:93:56:bd:8b:
                    09:3b:9c:76:25:7f:eb:a4:c5:03:59:4a:56:e5:11:
                    76:1a:cd:77:0c:88:24:8d:cd:0d:af:2e:d2:b6:78:
                    ed:b7:bb:10:a6:66:0e:62:41:3f:a3:79:6b:6a:f7:
                    59:50:2a:09:c6:76:8a:53:f0:04:32:cf:88:64:9b:
                    72:4f:c2:ab:7a:a8:aa:a0:64:2b:17:4c:58:64:f6:
                    48:13:fd:ab:8a:8a:6f:10:57:e1:94:05:87:16:24:
                    41:62:24:25:20:ac:cb:0a:4d:1d:2c:7f:23:cf:4f:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FF:AB:A6:33:6A:0D:16:53:30:44:2A:84:07:24:91:4B:AA:83:31
            X509v3 Authority Key Identifier:
                keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:be:4d:62:2c:0f:e2:71:89:d2:1f:95:4f:23:38:24:e0:
         9d:e2:cb:da:9a:f7:59:ce:da:e9:6e:09:b4:45:fc:4d:90:9a:
         d9:ff:b7:32:52:1a:c1:e2:c4:f4:8b:85:c7:03:bf:26:ec:d8:
         21:ee:c9:31:26:1e:69:00:d9:60:87:97:3e:51:e6:ba:59:be:
         ed:da:3b:29:da:57:85:fd:a3:5d:dd:72:55:41:f0:f2:c3:ab:
         6b:7e:c2:ec:25:15:59:96:64:4d:ec:01:bd:08:2b:b9:80:70:
         a0:5e:4e:4c:df:90:06:70:e1:f3:e3:a7:f0:5c:38:78:de:48:
         da:5b:7f:df:fc:de:72:4a:01:7c:6f:ec:d7:be:07:ae:24:00:
         fb:5a:10:32:33:71:63:ef:98:4c:6c:bd:50:3a:34:b4:3d:c9:
         94:f1:52:c4:05:e2:5b:d5:d2:2f:51:aa:2a:af:b1:7b:44:1e:
         b7:75:42:e9:1e:2b:c9:09:52:b6:fd:d0:8d:d5:9c:f1:0a:03:
         1a:78:ae:92:a2:7a:37:c7:fa:d0:1e:19:d0:f9:6d:22:e2:2a:
         85:69:ec:b9:bc:a0:42:bc:26:fc:16:66:13:2d:93:58:14:89:
         00:06:69:fc:73:6a:1d:26:0f:d1:88:a3:d9:be:8d:37:05:a1:
         b8:31:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:46:59 2024 by rpki-client on console-ams.rpki-client.org