Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File:                     NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier:          x32peGBuRKfrQ3d4OSQsOZFmFioA3hK80eVqhZsH+mM=
Subject key identifier:   F2:09:C6:6A:E4:23:CC:4C:54:F2:DF:B9:A5:CD:39:5E:5B:5F:EE:16
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer:       /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial:       018F885B0D49D5C1ED7DAD396E41B662C58F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:19 +0000
Manifest this update:     Fri 17 May 2024 21:00:19 +0000
Manifest next update:     Sat 18 May 2024 21:00:19 +0000
Files and hashes:         1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: WgVXRvDBcm+IbdgfPj7LLaZaoP1AZWGkXNaTb6k+w1o=)
                          2: qbsq5RIpBYSt6Acjnm9VMK4lh5Q.roa (hash: /BVUBkpCvOhscqGKvwkpJcmsKH6fBnI2N1sPDW/OVh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:0d:49:d5:c1:ed:7d:ad:39:6e:41:b6:62:c5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
        Validity
            Not Before: May 17 21:00:19 2024 GMT
            Not After : May 18 21:00:19 2024 GMT
        Subject: CN=f209c66ae423cc4c54f2dfb9a5cd395e5b5fee16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:87:37:e4:92:56:d8:fc:a3:a2:94:8e:82:
                    5b:58:0f:14:93:5a:1c:ac:b9:85:5a:6e:22:ad:b7:
                    18:fb:09:32:77:0f:51:1d:5f:48:5f:9f:d3:1c:4f:
                    40:f0:fd:d4:97:bc:b3:73:c1:e0:0b:db:66:c1:3a:
                    d4:85:ce:05:69:ee:80:6a:aa:20:53:f5:84:93:c5:
                    52:c2:2e:4b:5f:4d:a8:7f:34:86:a1:15:8e:d7:13:
                    f7:09:ff:1c:6a:3c:2c:b7:cb:2f:2a:78:b0:49:88:
                    fa:24:8a:b6:90:e9:24:fb:0f:1c:71:bf:f5:6e:95:
                    a8:96:f5:98:e8:07:fb:93:86:56:4e:35:b1:2c:2c:
                    2b:95:22:b1:72:54:64:d4:db:02:ae:7d:dd:ba:12:
                    46:5c:75:76:ba:bf:b5:6f:f8:dc:42:95:50:4f:e6:
                    7a:8f:e1:b1:3b:82:01:1f:30:75:6c:96:2e:22:ef:
                    82:21:8b:32:0e:30:08:92:4c:87:58:2e:6a:09:fc:
                    5c:86:21:90:7f:ee:1f:9a:8c:31:6b:ac:61:77:44:
                    0d:ce:71:93:d5:2f:3a:c3:a2:de:a8:8c:c9:d5:c5:
                    aa:fd:85:07:d5:27:00:f4:e6:a2:f4:3a:a9:49:af:
                    8f:74:1c:e7:23:18:47:58:ac:6b:b7:d4:c9:59:c8:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:09:C6:6A:E4:23:CC:4C:54:F2:DF:B9:A5:CD:39:5E:5B:5F:EE:16
            X509v3 Authority Key Identifier:
                keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:53:6a:80:15:d8:a1:c4:3b:4f:75:ca:12:f3:05:f9:05:
         77:7a:3d:81:fb:10:9d:98:eb:32:08:f3:7f:94:60:f5:1e:5a:
         e1:06:43:d4:31:fe:79:0a:7a:66:c8:e9:d6:44:e0:bc:f1:2f:
         6e:f8:80:74:d9:61:5c:6b:c3:e0:04:9f:1a:44:b6:79:db:2c:
         c8:0d:11:c9:f9:28:3a:16:d4:2e:f2:3b:a7:b1:e8:4c:b2:2c:
         aa:db:b3:1c:a9:b4:ba:ef:20:c3:13:68:d7:3a:4b:37:42:1c:
         b3:e7:89:3f:c3:fc:f2:90:0c:d8:32:0c:48:34:53:0c:de:4c:
         ab:0c:1d:d9:35:d9:c2:db:49:a5:08:db:b8:b4:e1:f9:2f:12:
         48:06:70:23:95:ff:7c:92:b3:07:6d:42:e7:38:53:1b:74:10:
         54:a9:ec:2b:b1:2e:4f:1d:58:d0:6f:db:f0:4c:53:09:fa:bb:
         2f:fd:6b:e1:5b:9f:f8:b1:58:5c:83:64:96:b5:e7:b9:43:d6:
         c9:8e:c9:38:e3:88:d6:5a:d0:c1:ab:55:5e:4b:4a:12:7b:c7:
         11:5d:07:ef:44:bc:fe:20:88:88:83:a8:29:87:9f:19:3c:35:
         b8:90:53:29:b1:87:63:26:08:61:f8:01:a2:5c:ba:f1:cb:38:
         1b:04:ea:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWw1J1cHtfa05bkG2YsWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWZkMzU3YzNmYjhlYTMwZTEyMDc4MjNiNjQ2ZTEyNTMx
ODM4MGUwHhcNMjQwNTE3MjEwMDE5WhcNMjQwNTE4MjEwMDE5WjAzMTEwLwYDVQQD
EyhmMjA5YzY2YWU0MjNjYzRjNTRmMmRmYjlhNWNkMzk1ZTViNWZlZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tmHN+SSVtj8o6KUjoJbWA8Uk1oc
rLmFWm4irbcY+wkydw9RHV9IX5/THE9A8P3Ul7yzc8HgC9tmwTrUhc4Fae6Aaqog
U/WEk8VSwi5LX02ofzSGoRWO1xP3Cf8cajwst8svKniwSYj6JIq2kOkk+w8ccb/1
bpWolvWY6Af7k4ZWTjWxLCwrlSKxclRk1NsCrn3duhJGXHV2ur+1b/jcQpVQT+Z6
j+GxO4IBHzB1bJYuIu+CIYsyDjAIkkyHWC5qCfxchiGQf+4fmowxa6xhd0QNznGT
1S86w6LeqIzJ1cWq/YUH1ScA9Oai9DqpSa+PdBznIxhHWKxrt9TJWcjZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIJxmrkI8xMVPLfuaXNOV5bX+4WMB8GA1UdIwQY
MBaAFDSf01fD+46jDhIHgjtkbhJTGDgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTIt
MWU4NGYwOGMxZGNiLzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTItMWU4NGYwOGMxZGNi
LzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/hTaoAV
2KHEO091yhLzBfkFd3o9gfsQnZjrMgjzf5Rg9R5a4QZD1DH+eQp6Zsjp1kTgvPEv
bviAdNlhXGvD4ASfGkS2edssyA0RyfkoOhbULvI7p7HoTLIsqtuzHKm0uu8gwxNo
1zpLN0Ics+eJP8P88pAM2DIMSDRTDN5Mqwwd2TXZwttJpQjbuLTh+S8SSAZwI5X/
fJKzB21C5zhTG3QQVKnsK7EuTx1Y0G/b8ExTCfq7L/1r4Vuf+LFYXINklrXnuUPW
yY7JOOOI1lrQwatVXktKEnvHEV0H70S8/iCIiIOoKYefGTw1uJBTKbGHYyYIYfgB
oly68cs4GwTqtA==
-----END CERTIFICATE-----
Generated at Fri May 17 22:04:45 2024 by rpki-client on console-ams.rpki-client.org