Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File:                     NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier:          Af4d2rOJWfh1v0jpQVHjJ/E9oPneqPf63WL2tF1bCAk=
Subject key identifier:   45:E7:F2:30:71:AA:46:70:B6:F5:07:80:30:4C:C3:1B:FF:75:3A:2F
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer:       /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial:       0192392647A2017AD178015BE717E7F54044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number:          0A53
Signing time:             Sat 28 Sep 2024 15:01:02 +0000
Manifest this update:     Sat 28 Sep 2024 15:01:02 +0000
Manifest next update:     Sun 29 Sep 2024 15:01:02 +0000
Files and hashes:         1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: 2VAwS3k+TIc15FiyN1O8Hno/ue5dRvQgD/+LBjPNB1o=)
                          2: rZmTIkmvWRNuE7O99H7M6XAR_jc.roa (hash: ZmyZxzvuQs5F9UBxB6xj90ZU3lH6MD9TfZmvnFwJa/k=)
                          3: vS0S7QJlxl5i3rrcX5CCSrAeQhw.roa (hash: u6Eu8D6lpCX7mIr9zNc/O9xnLdmOLOZzGQz8hMe3kIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:26:47:a2:01:7a:d1:78:01:5b:e7:17:e7:f5:40:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
        Validity
            Not Before: Sep 28 15:01:02 2024 GMT
            Not After : Sep 29 15:01:02 2024 GMT
        Subject: CN=45e7f23071aa4670b6f50780304cc31bff753a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:09:4a:0f:ee:de:5d:f4:93:78:14:ef:80:
                    14:53:fd:a9:ae:40:38:90:28:f4:64:be:86:9c:eb:
                    6d:41:b7:11:c1:2e:00:3f:53:1e:36:69:e9:c6:24:
                    04:d4:ef:56:6c:bf:48:d4:4a:c5:48:c4:00:c9:2d:
                    bf:1f:44:89:d6:20:d8:c1:8e:f6:18:f8:43:4f:21:
                    39:83:91:9a:e1:a2:d8:ba:4e:ce:28:15:e1:a1:7f:
                    ac:b1:52:d3:93:c2:74:7d:e0:a0:60:e1:07:90:ce:
                    81:e8:4b:63:12:78:53:45:7b:ed:b9:14:00:50:05:
                    b8:f7:2a:f2:0e:a4:70:7b:ee:4c:51:2b:f7:ce:45:
                    e6:82:38:61:2e:ac:53:ae:58:bc:a3:f2:9f:05:0e:
                    4b:7c:7a:f6:42:37:e6:ea:91:a0:96:75:87:40:4a:
                    62:3c:82:19:78:c1:0b:62:b1:21:c0:e0:47:5d:ba:
                    86:11:3d:67:fe:c4:1b:f9:4e:ef:59:e1:53:6d:85:
                    b8:10:72:14:c7:02:72:e9:fd:eb:9b:68:27:b9:20:
                    04:67:85:b6:01:99:0b:ba:17:72:80:0a:16:24:20:
                    70:db:9c:f2:b0:b4:7a:a7:7d:18:44:20:50:ac:b0:
                    6e:4f:9d:e3:43:c2:fc:78:52:cf:c9:c3:7e:c8:a2:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E7:F2:30:71:AA:46:70:B6:F5:07:80:30:4C:C3:1B:FF:75:3A:2F
            X509v3 Authority Key Identifier:
                keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:64:67:b2:aa:5a:a9:a2:1c:8b:f2:5c:ce:3f:b6:23:92:
         6d:c9:78:43:1d:42:ae:58:fa:ac:b4:1f:d5:7c:f9:2a:29:58:
         3b:a8:74:5e:88:a1:50:bc:95:2b:44:62:fa:ec:cc:10:75:f6:
         6e:81:12:41:7c:26:8b:1d:8e:ba:4b:37:53:05:17:d2:44:bc:
         d5:ad:fb:cc:07:1b:27:b7:b4:86:a8:94:f2:ec:13:c6:0c:ad:
         6d:96:48:0d:23:ae:57:53:d0:ee:d1:4f:64:44:d2:34:3b:3d:
         3c:52:ce:3f:1b:db:7d:42:50:44:7b:b3:ca:f5:cc:63:18:52:
         6f:ae:7c:29:17:ef:19:c0:4b:f7:11:51:7c:ba:c9:fc:bc:d5:
         6e:f3:f3:9a:98:78:51:57:81:ca:a6:ca:de:ae:2d:87:51:c4:
         e1:20:11:d2:80:33:13:40:dc:30:e9:d5:3e:fa:49:74:d4:db:
         ea:6f:dc:6c:69:bb:a4:2c:93:46:f4:64:6a:e3:4c:44:a3:06:
         39:6f:39:67:0c:51:aa:2e:41:55:5b:28:f8:0e:4d:e2:f8:f7:
         b8:65:94:f4:50:09:86:e9:1f:2f:59:51:61:1f:91:06:a9:05:
         cf:05:be:1b:88:5b:61:d3:f0:eb:02:eb:6c:eb:e4:f2:60:00:
         3f:36:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:10:25 2024 by rpki-client on console-ams.rpki-client.org