Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File:                     NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier:          TQu7cll1ga621fQ7Scnrrf4+U09z7qNFx/YhV2uuy6g=
Subject key identifier:   03:D4:37:0A:DB:BB:F2:C7:3B:10:30:72:70:90:93:A8:E3:0E:A3:99
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer:       /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial:       018F88923469DD6BEA47F7671CF6C7233658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 22:00:33 +0000
Manifest this update:     Fri 17 May 2024 22:00:33 +0000
Manifest next update:     Sat 18 May 2024 22:00:33 +0000
Files and hashes:         1: KX22dX--srUcFf-zvsvHNxT9QJo.roa (hash: H8KpR4Ub6UMgHJZLqg64M4XFdg+Hdd7PJkEDF6pU6Qg=)
                          2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: h/lIFpOh9M0VGRl4SB1MPhyzP97SeqQSVW09kqjwCXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:34:69:dd:6b:ea:47:f7:67:1c:f6:c7:23:36:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
        Validity
            Not Before: May 17 22:00:33 2024 GMT
            Not After : May 18 22:00:33 2024 GMT
        Subject: CN=03d4370adbbbf2c73b103072709093a8e30ea399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:55:27:fd:7f:9b:b3:69:50:8c:f4:49:f2:
                    3e:77:26:60:c4:14:1b:4f:2e:ae:e0:f3:24:f1:f2:
                    eb:2d:f0:26:94:8c:b6:5c:15:e8:78:98:28:61:c6:
                    fc:35:c6:aa:e5:9b:52:62:a0:8d:98:bc:72:bb:22:
                    7c:16:70:ac:d0:4d:fe:74:23:d1:e6:17:15:09:3a:
                    19:2f:0e:2d:20:01:2f:c9:11:3c:03:f7:7c:51:f2:
                    03:ce:3a:71:d2:c9:e3:1e:d9:b7:ac:57:99:fe:65:
                    c4:6b:d8:5b:41:26:a0:f1:68:5c:68:f3:8f:75:80:
                    53:cc:39:5f:96:bf:60:95:55:75:2e:b2:d8:a1:64:
                    51:f6:30:b9:56:9a:6c:25:aa:7a:31:be:b0:fb:4e:
                    1e:a1:e1:d0:21:d4:2b:91:89:6f:69:0f:69:e8:bf:
                    b5:1a:f6:07:88:fe:0c:8d:b5:82:f6:80:3a:3c:cb:
                    74:96:0d:aa:a0:60:5c:2b:62:1b:8f:94:40:81:94:
                    1b:ab:4f:bc:47:00:d6:a5:26:4a:29:1f:03:b1:fa:
                    f7:f9:e5:e5:88:70:74:c6:0c:a0:c6:ba:a9:7f:fa:
                    db:26:31:86:31:01:54:d5:d4:53:0b:e2:fd:2a:7b:
                    44:f9:ef:db:29:5d:25:30:7b:a5:fc:19:a0:47:7b:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:37:0A:DB:BB:F2:C7:3B:10:30:72:70:90:93:A8:E3:0E:A3:99
            X509v3 Authority Key Identifier:
                keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:04:10:d3:7d:b6:78:8f:a4:75:32:af:fa:0c:f1:3d:37:
         1f:9a:30:be:2a:a2:3c:a2:f7:b1:7d:91:3e:8c:d5:d2:b5:57:
         06:b6:85:8f:31:cc:e5:c4:96:fe:95:ed:87:75:3a:7b:ec:0d:
         c8:a9:fd:6b:62:a5:1c:c2:e2:b1:1b:2e:80:97:50:53:2b:f8:
         c4:8d:5f:fc:fe:ab:4f:d1:e0:c5:e2:2a:9e:43:de:cc:84:83:
         8f:17:fc:7a:f0:44:a3:0a:42:70:22:51:5c:42:e8:38:36:8a:
         e8:96:70:a6:d4:ea:d9:51:af:fc:81:55:f0:12:dd:5d:ad:1d:
         c7:56:bc:06:ac:28:24:73:a9:be:7f:49:c4:73:5a:82:65:58:
         11:80:4f:f2:07:64:37:78:a3:51:15:21:40:12:71:7a:23:f3:
         01:91:c4:2d:f1:fb:c7:e5:c9:d0:22:07:7d:46:04:6a:99:db:
         88:57:b7:e9:a7:33:bc:80:c3:4e:33:a0:c3:ad:52:b6:64:4a:
         0e:0f:2e:d5:87:5c:46:d0:17:0c:2a:eb:ab:db:94:7d:fc:b7:
         52:ab:83:dd:f0:0d:ee:b4:66:14:1f:02:be:fd:84:46:f9:1e:
         8f:5d:31:ae:83:63:6f:93:81:03:7f:84:3a:89:dd:98:db:03:
         45:1a:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:20 2024 by rpki-client on console-fra.rpki-client.org