Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
File:                     NpABg88IpuW8gHhGKUpGBi4ZDjs.mft (raw, json)
Hash identifier:          t6MalmPsRKa3nBLmvO0MLjLRlk3/lFdPCSgLJPc6clo=
Subject key identifier:   54:89:AE:57:78:89:19:39:93:4A:6D:77:4F:73:53:93:5D:31:A6:17
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Certificate issuer:       /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial:       0193640E0E3F1B5264E50DDD99B224E66D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
Manifest number:          0BFB
Signing time:             Mon 25 Nov 2024 16:01:02 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:02 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:02 +0000
Files and hashes:         1: 2u4njDydU7-Rcig5OJImMYx9OLw.roa (hash: 6ab6ORH1hwmmoOO4nH6O+Fp0gIJBVMChvlTPQ+VDX4I=)
                          2: NpABg88IpuW8gHhGKUpGBi4ZDjs.crl (hash: eOh4XCvav+FLP0bZLfthMz6dDPutIU/Awxqm46lvQjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:0e:3f:1b:52:64:e5:0d:dd:99:b2:24:e6:6d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
        Validity
            Not Before: Nov 25 16:01:02 2024 GMT
            Not After : Nov 26 16:01:02 2024 GMT
        Subject: CN=5489ae5778891939934a6d774f7353935d31a617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:46:9a:98:36:8e:f8:94:b3:0e:8a:47:07:
                    9d:75:c9:9a:e2:f6:41:1b:16:67:8c:c8:4d:55:8f:
                    36:88:54:9c:e6:ab:41:7c:5e:50:8a:da:bb:e7:57:
                    bc:f9:dd:15:58:42:fd:c0:b5:9b:c9:7f:d7:5a:2f:
                    cd:b8:ce:5b:ca:c7:5c:f7:0e:a3:98:8d:49:98:08:
                    5e:3b:0e:7b:c2:e6:40:17:de:29:d7:ad:f1:ad:16:
                    fa:14:bf:d1:89:b2:2e:12:f5:ea:07:e6:85:be:18:
                    85:45:ac:bb:da:27:68:76:71:4e:52:9b:3b:9b:78:
                    31:02:bc:10:15:fe:be:b3:1c:46:bd:08:f5:95:66:
                    24:3a:3b:5b:43:95:15:97:78:8d:27:21:9f:b2:b6:
                    8d:0c:2c:2e:18:1a:73:c6:fa:3b:2d:48:4b:85:ad:
                    31:d9:1a:36:b3:d3:a4:53:09:e6:d7:6e:ab:95:a0:
                    e9:cf:f4:51:55:ad:0a:6e:06:e3:14:a0:8a:07:57:
                    ba:36:fb:4e:95:d7:b4:fc:44:b0:df:68:51:b7:a8:
                    64:d5:0c:0b:ca:69:13:f1:fa:ce:55:6b:90:cb:8a:
                    cd:24:3e:16:2d:ef:4b:ae:f3:35:be:39:b0:3f:8d:
                    84:46:1b:3a:19:7d:fb:c5:39:70:2b:fc:b0:0e:17:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:AE:57:78:89:19:39:93:4A:6D:77:4F:73:53:93:5D:31:A6:17
            X509v3 Authority Key Identifier:
                keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:95:c1:27:aa:dd:e6:bf:65:6d:d4:fc:09:3d:28:03:79:44:
         8a:c9:5f:c9:e5:3c:2e:3c:3f:23:5f:02:93:08:ea:ad:66:cf:
         c7:9c:ba:d7:ca:0c:c5:cd:35:b9:45:7e:a1:8f:e9:90:bf:3c:
         18:e5:f8:36:04:f2:7d:41:64:ae:6e:b8:40:07:f8:d2:c4:26:
         f1:56:36:14:8b:8a:05:f7:76:bb:2e:31:c0:32:0c:17:45:9c:
         56:b6:c4:b6:fd:0c:ac:13:a7:8d:64:03:ad:2f:b9:b6:52:e7:
         bd:b8:8e:bf:7f:c7:ff:92:09:aa:51:8d:b4:4a:5e:0d:c2:08:
         24:63:de:8a:1a:84:69:bf:98:82:b6:22:78:95:a3:79:1a:b8:
         cf:97:32:eb:92:3b:85:73:78:29:24:a1:b5:dc:75:56:36:d0:
         d4:d1:93:97:09:62:17:e1:e1:ca:38:bb:0c:ae:ef:05:82:b0:
         6c:05:95:9a:32:c6:48:58:d3:36:8f:90:ec:94:fb:91:89:56:
         04:6b:bb:e1:13:a4:16:61:ac:38:aa:1f:e2:74:9f:0a:36:91:
         82:5a:4b:47:3c:f5:11:6e:6d:ae:86:98:aa:69:2a:fa:60:3f:
         fb:31:b5:c0:03:54:7e:fb:09:95:61:3e:9a:41:e5:a3:2c:fd:
         ee:88:a7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkDg4/G1Jk5Q3dmbIk5m2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTAwMTgzY2YwOGE2ZTViYzgwNzg0NjI5NGE0NjA2MmUx
OTBlM2IwHhcNMjQxMTI1MTYwMTAyWhcNMjQxMTI2MTYwMTAyWjAzMTEwLwYDVQQD
Eyg1NDg5YWU1Nzc4ODkxOTM5OTM0YTZkNzc0ZjczNTM5MzVkMzFhNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbNGmpg2jviUsw6KRweddcma4vZB
GxZnjMhNVY82iFSc5qtBfF5Qitq751e8+d0VWEL9wLWbyX/XWi/NuM5bysdc9w6j
mI1JmAheOw57wuZAF94p163xrRb6FL/RibIuEvXqB+aFvhiFRay72idodnFOUps7
m3gxArwQFf6+sxxGvQj1lWYkOjtbQ5UVl3iNJyGfsraNDCwuGBpzxvo7LUhLha0x
2Ro2s9OkUwnm126rlaDpz/RRVa0KbgbjFKCKB1e6NvtOlde0/ESw32hRt6hk1QwL
ymkT8frOVWuQy4rNJD4WLe9LrvM1vjmwP42ERhs6GX37xTlwK/ywDhehNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSJrld4iRk5k0ptd09zU5NdMaYXMB8GA1UdIwQY
MBaAFDaQAYPPCKblvIB4RilKRgYuGQ47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMt
MmY1YjZhODNmYWYzLzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYz
LzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZXBJ6rd
5r9lbdT8CT0oA3lEislfyeU8Ljw/I18CkwjqrWbPx5y618oMxc01uUV+oY/pkL88
GOX4NgTyfUFkrm64QAf40sQm8VY2FIuKBfd2uy4xwDIMF0WcVrbEtv0MrBOnjWQD
rS+5tlLnvbiOv3/H/5IJqlGNtEpeDcIIJGPeihqEab+YgrYieJWjeRq4z5cy65I7
hXN4KSShtdx1VjbQ1NGTlwliF+Hhyji7DK7vBYKwbAWVmjLGSFjTNo+Q7JT7kYlW
BGu74ROkFmGsOKof4nSfCjaRglpLRzz1EW5troaYqmkq+mA/+zG1wANUfvsJlWE+
mkHloyz97oin7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:03 2024 by rpki-client on console-fra.rpki-client.org