Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File:                     NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier:          JlGKCZGgwS6x4KIWvYUa3gsY34I1OjlMoZCqQ2ur2dE=
Subject key identifier:   AE:3D:10:FB:A7:28:15:5F:94:A2:64:F8:0D:5F:13:71:5C:31:B9:02
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       0193572DF1B169B910C169FE91F67FC3FA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 04:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:48 +0000
Files and hashes:         1: 4CCwoDvVz37WCgTEcjfOO81myx8.roa (hash: b3SCaXfYBhUdCVngxiWYqn8wang0GLBuLnINM3qV2QU=)
                          2: 73Wbn-XZdpVD8_PaiycS2ddFdFg.roa (hash: iVl1apo5jLRVbCk77jbYDrYWyKE4Jp73jp/j5lpDGb0=)
                          3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: IMYOp2j38AI9MAofCYCNWirXCImkQZfFyLolrT5JMQs=)
                          4: _dkTYNCxQrCeBAajiXfReCvQ5hE.roa (hash: qlErhsKhFRCo3EmXjZRyGZaHiK2i+tOD3varKilZPu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f1:b1:69:b9:10:c1:69:fe:91:f6:7f:c3:fa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Nov 23 04:00:48 2024 GMT
            Not After : Nov 24 04:00:48 2024 GMT
        Subject: CN=ae3d10fba728155f94a264f80d5f13715c31b902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:07:0b:cf:44:88:b2:bb:ac:b7:0e:03:fa:
                    41:e9:09:32:f0:f4:1f:28:36:73:16:49:2e:96:4a:
                    9e:e1:02:54:20:18:f6:ef:ba:9f:ca:4b:3d:13:c1:
                    f3:9c:71:bf:9f:4b:57:ac:f0:7d:75:88:79:c3:b6:
                    41:fa:3f:51:1c:d3:20:f3:78:55:3b:d7:97:60:71:
                    71:2b:fa:bf:81:2c:cd:f1:33:a6:eb:01:f6:18:d3:
                    2a:4c:9e:81:f7:c0:3a:ff:d0:57:bd:47:ff:a2:4d:
                    8b:f1:ca:f9:10:23:13:90:4a:32:94:32:f0:14:fc:
                    51:83:b3:ed:e2:fe:d0:e4:c5:62:5a:3c:d3:d6:e7:
                    ba:11:c9:b2:04:11:46:bb:68:d3:b3:0f:fd:fc:f7:
                    ad:50:97:75:1e:ac:d8:a7:2a:ae:2e:fb:3b:f0:3b:
                    f7:7a:e3:5e:a0:2f:46:15:47:b1:db:48:6d:1b:65:
                    93:52:fc:1a:a7:4b:2d:27:67:a0:78:f1:00:72:81:
                    be:44:b1:e2:4c:10:23:32:65:e5:69:bd:17:0d:3a:
                    8f:a2:b7:14:ef:eb:3b:3c:21:36:6a:a8:5a:94:c4:
                    6a:63:04:be:b0:ee:d8:69:71:3c:16:c1:11:62:37:
                    53:7e:51:aa:30:81:dc:f6:8b:b3:88:38:77:ab:f6:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:10:FB:A7:28:15:5F:94:A2:64:F8:0D:5F:13:71:5C:31:B9:02
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:30:78:55:2e:a1:bb:ae:dd:ce:7d:34:a4:17:45:9f:c3:92:
         e7:d8:04:52:32:50:e4:c5:65:87:b3:a2:d7:36:42:43:22:b4:
         b4:6a:28:0e:53:fe:12:63:2f:4a:52:af:ee:fc:b1:82:7c:b3:
         6e:ea:e7:1c:2c:2d:e3:00:41:f0:7b:c7:fb:be:8d:1c:5f:c5:
         47:d4:be:21:56:bf:6a:5b:f4:6f:18:7b:4f:40:02:87:6f:2c:
         10:62:c7:a9:60:a3:f4:4a:4a:14:84:4c:6e:52:8a:e5:ec:5e:
         c4:2a:50:46:8f:d0:cf:a5:17:5c:cf:ff:2f:f4:67:ab:ce:f5:
         6a:ed:6e:4a:33:c0:b4:8e:cb:d9:f2:73:35:44:46:85:18:18:
         f1:1e:fc:68:be:3f:a3:43:04:86:47:42:09:0b:dd:03:12:a4:
         21:59:22:fd:66:03:c5:aa:60:84:a5:9a:53:dd:63:ef:c8:66:
         14:61:c0:cd:3a:15:8a:81:45:ad:7b:a9:78:fa:c2:06:43:68:
         07:86:5a:a1:2e:ff:b7:0f:bf:64:93:da:79:bb:f0:7b:cc:ef:
         ba:f0:5d:83:99:3a:21:d2:44:3c:0c:1f:be:1f:6c:f0:66:b8:
         83:35:0e:7a:45:ff:94:f3:3c:8a:84:86:30:bd:fd:14:01:af:
         e2:8c:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:35 2024 by rpki-client on console-ams.rpki-client.org