Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File:                     nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier:          HNW289fvvMLD1YGNw/zjRS09LC3S/OXUCVfGJ8M02JU=
Subject key identifier:   89:1C:47:87:E6:E0:3D:25:DF:2E:AF:4D:49:B3:33:C6:EB:DD:5A:84
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer:       /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial:       018F8749ED239B7DBC27527E3AFACF80A8AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number:          030B
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: VEo4SXU7tjxv0jP1hR9njZ8GLvI.roa (hash: jBnMHljrajiAD5EUAba59gzGHJdBiltCelYFBlL4rEU=)
                          2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: 2lx5D0u7UC0Mdsjd6IqBstS2imFY4p3Y4FGy23/HXZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ed:23:9b:7d:bc:27:52:7e:3a:fa:cf:80:a8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=891c4787e6e03d25df2eaf4d49b333c6ebdd5a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:ee:2b:a1:05:78:1a:77:68:ad:ba:19:49:
                    77:7c:a5:9e:78:73:5d:4e:96:94:16:8e:15:da:21:
                    44:58:5c:4d:ef:a9:b2:43:81:71:59:72:12:52:73:
                    7c:f6:cf:59:96:2d:33:75:8d:5e:a0:80:01:84:5d:
                    3d:92:1c:92:d2:e7:de:ca:cd:cd:72:1b:6d:d1:7c:
                    cc:37:ae:6c:a7:2e:a2:cd:9d:4d:f4:53:3e:4c:f6:
                    83:70:cb:3c:d9:2c:c8:7f:93:df:3d:70:8d:45:3a:
                    0d:cf:6d:9e:f0:ad:ef:6e:d6:b6:ba:87:69:2b:10:
                    71:52:1a:86:6c:d3:e4:c5:69:5f:78:6b:53:c2:dc:
                    4f:3f:25:48:c7:c6:a1:83:67:d4:5c:4c:f1:f1:09:
                    7c:a4:e9:72:85:ea:70:ee:2b:85:bb:35:19:a1:5a:
                    1e:33:cd:66:0a:cf:1f:02:dc:c8:cb:65:3a:d9:81:
                    a8:75:c6:cc:98:a0:f1:d4:44:98:a3:41:f1:4f:ed:
                    d7:5f:ff:e2:7b:05:f2:de:bb:b2:81:8e:21:b2:92:
                    6f:d3:68:b2:2e:8f:b4:21:03:b1:66:b5:dc:d7:42:
                    a8:db:d9:cf:9d:e8:08:eb:b8:73:81:f2:bc:77:a7:
                    68:e6:f5:d0:ba:ed:d9:ca:cb:20:21:bc:dd:39:97:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:47:87:E6:E0:3D:25:DF:2E:AF:4D:49:B3:33:C6:EB:DD:5A:84
            X509v3 Authority Key Identifier:
                keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:0a:cc:3b:8b:d6:1f:83:c3:70:fd:ef:99:25:3a:e1:44:
         e4:bd:6e:35:81:a2:b8:ce:4e:bc:14:90:60:bb:2c:55:77:eb:
         57:51:11:f3:ce:c5:55:54:c7:44:39:9d:e6:c4:84:95:56:8b:
         2a:1b:43:7d:29:c0:9c:08:95:62:14:8c:f1:fc:ff:5e:04:49:
         3b:48:c1:36:9f:9c:b3:57:3b:2c:e0:64:fb:de:63:a7:cd:d2:
         5e:8a:17:be:1a:6f:bf:7c:3d:cb:ad:87:64:41:91:04:51:30:
         51:10:dc:cd:f7:bd:64:6f:27:0d:61:6b:5b:52:7b:fe:17:4b:
         ca:fa:3c:54:92:a5:32:11:25:89:86:71:95:35:f4:50:9e:49:
         38:d5:f8:d0:3d:06:8d:07:cb:d3:88:6d:79:78:79:7d:9b:b6:
         2b:92:99:a9:da:71:ef:88:1c:f8:96:f7:22:37:91:45:30:1a:
         68:3b:b7:07:8c:85:ba:ef:e9:73:a8:5c:fa:a2:8c:0c:db:eb:
         df:5c:62:ea:a6:48:08:8a:73:1f:bb:9c:49:0f:aa:97:13:f7:
         70:1b:42:45:60:27:41:00:a8:9c:b9:d0:5e:47:98:3b:ae:cc:
         31:6a:1a:9d:6f:2f:ff:06:07:88:e5:d3:22:20:7b:3a:cb:03:
         1f:45:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:12 2024 by rpki-client on console-fra.rpki-client.org