Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File:                     NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier:          FxwQeP9y9TqmZTiitt6aFr5nfrwzy+tBcqSijZM8LbE=
Subject key identifier:   2B:CD:AB:67:69:40:3A:F1:BD:16:CE:39:F9:B6:95:68:14:4C:5C:97
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer:       /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial:       018F86364A45213AED3D44CD8D8ADA146F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 11:00:55 +0000
Manifest this update:     Fri 17 May 2024 11:00:55 +0000
Manifest next update:     Sat 18 May 2024 11:00:55 +0000
Files and hashes:         1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: K5PKlCxwHV0mBbscWi9mrl008bK2omO9uCgMbqeWhMc=)
                          2: kR-1AWy3FNudaLmR5qOOJJOsZ7w.roa (hash: /3MyiXxQZoxL4tNcc2+5+5S8H91oH4++qy5LyCHEl/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:4a:45:21:3a:ed:3d:44:cd:8d:8a:da:14:6f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
        Validity
            Not Before: May 17 11:00:55 2024 GMT
            Not After : May 18 11:00:55 2024 GMT
        Subject: CN=2bcdab6769403af1bd16ce39f9b69568144c5c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:4b:43:9a:29:c5:89:23:19:06:ed:c3:27:
                    fd:28:c7:55:3d:c8:63:b8:f5:eb:64:dd:9e:b8:a5:
                    16:64:2e:47:9e:9e:6d:bf:9c:4e:91:21:ca:5c:d8:
                    dd:8d:7e:43:92:56:e4:ca:67:1c:2e:85:d8:d0:9c:
                    e0:ac:13:ff:1e:26:53:a3:11:07:e0:93:34:04:e8:
                    3e:58:f8:24:a6:3c:b3:c3:40:4f:ed:2c:cd:01:60:
                    04:fd:88:8f:5d:d9:37:a7:5c:b9:2e:3d:91:52:84:
                    f5:a8:a5:b2:c3:89:e2:dd:32:17:19:f6:34:ce:21:
                    11:ce:7e:25:52:dc:7b:38:d9:0d:b7:37:fd:b4:b4:
                    24:cf:f0:5d:2a:7c:99:cd:52:78:ce:3a:c2:d9:d0:
                    0d:83:c6:d9:b3:b0:a2:38:3b:e3:99:fa:b1:44:c0:
                    4f:35:ba:76:85:84:f2:70:aa:79:b1:ae:e9:97:6d:
                    7e:3b:1f:6e:1c:41:5d:92:01:0b:95:2e:98:fe:09:
                    49:7a:2e:e5:cb:05:5b:7e:d2:ab:21:ed:cd:00:86:
                    21:27:a1:0e:34:b9:81:06:2e:0e:9c:96:ee:df:9b:
                    53:19:51:ce:9b:4c:81:91:57:31:53:f4:94:67:fc:
                    f6:ea:03:fd:8c:07:d1:1c:1d:70:a9:cf:c9:82:c7:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CD:AB:67:69:40:3A:F1:BD:16:CE:39:F9:B6:95:68:14:4C:5C:97
            X509v3 Authority Key Identifier:
                keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:d6:7b:33:70:bc:02:cb:2e:0e:ef:7c:57:d3:2b:73:ca:
         ee:27:43:13:17:f6:97:98:88:e7:58:7a:3c:01:f1:58:b5:fb:
         ad:69:f0:b7:53:59:5d:4d:c9:05:fd:d9:d1:69:ca:4e:bc:1c:
         58:70:f8:46:23:2d:01:30:fc:65:ca:ba:5d:a0:7a:4a:7a:61:
         19:a4:be:3b:5f:4a:e9:64:c2:d6:d6:70:89:4d:45:71:85:12:
         e6:00:5c:4b:bd:3a:45:55:d4:81:d4:d5:1c:37:89:1b:30:27:
         b2:56:92:6c:42:96:4c:34:94:53:d9:2f:cc:32:6a:b0:a9:17:
         4c:5d:4e:7d:f2:69:e1:d1:fb:d3:e2:62:f1:69:80:8f:4f:c9:
         d0:e7:bc:7b:ec:7d:50:7e:7e:64:f1:3e:1f:ed:ee:ac:54:6e:
         05:c6:4b:f2:49:d4:cf:43:e7:ce:cc:cf:40:4b:a3:9b:4d:90:
         55:87:d6:c8:b6:53:22:57:48:b4:fd:40:f3:85:eb:24:b6:95:
         37:d6:c9:ea:99:1e:14:40:50:45:9a:7b:a3:a0:3c:35:26:d2:
         5e:c2:5a:64:43:a9:11:eb:03:7e:30:fc:eb:a8:9b:b5:90:f5:
         6b:65:2f:9e:da:0a:e1:fa:01:b4:9b:09:9d:6d:62:0d:0f:b2:
         6e:22:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:45 2024 by rpki-client on console-ams.rpki-client.org