Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File:                     nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier:          A1y8VcXPJtjCLJ0gN4IvLuWCPvl6pgJDXck2QjoAfqY=
Subject key identifier:   23:33:D3:A1:73:F5:45:9B:3D:65:E7:2F:F9:E1:00:29:87:21:63:B4
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer:       /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial:       01907163206618DD5A57C2DB199878282FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number:          11ED
Signing time:             Tue 02 Jul 2024 03:00:39 +0000
Manifest this update:     Tue 02 Jul 2024 03:00:39 +0000
Manifest next update:     Wed 03 Jul 2024 03:00:39 +0000
Files and hashes:         1: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: EkBcCAJ2Xs7leJFumVLLeN3mSwVDc0k+UtDx9DpEg30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:63:20:66:18:dd:5a:57:c2:db:19:98:78:28:2f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
        Validity
            Not Before: Jul  2 03:00:39 2024 GMT
            Not After : Jul  3 03:00:39 2024 GMT
        Subject: CN=2333d3a173f5459b3d65e72ff9e10029872163b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:25:7d:ac:ec:d9:d6:d9:2d:43:09:27:8a:
                    31:d2:37:b2:e2:da:a8:5e:0e:de:aa:ac:15:f0:95:
                    29:44:e2:5f:6f:a3:90:98:ed:ef:3d:b9:5e:3a:be:
                    db:51:2c:78:40:45:af:b9:f5:76:69:65:23:a2:2e:
                    9d:36:8c:a6:20:1d:8c:8d:15:d1:d0:cc:4d:96:3e:
                    d3:35:7f:ab:9e:cd:95:5b:8d:c4:e9:04:44:7d:43:
                    30:4f:74:ef:8b:59:2e:cc:d2:37:02:77:f2:f2:84:
                    48:57:43:f3:ae:f6:2f:ee:e7:12:f1:cd:24:c9:81:
                    d3:33:87:3b:4e:40:ae:a9:a8:ba:d3:c8:1e:b6:67:
                    a7:81:bc:33:b9:a7:03:0b:79:c5:ea:87:13:33:4e:
                    ec:eb:1e:03:ca:c1:8d:88:a7:4e:03:e5:11:e4:ab:
                    72:0c:f4:ca:6c:f6:d9:3a:c3:f5:55:b0:ca:a2:85:
                    95:a7:d9:8a:0f:dc:c3:6e:65:93:22:94:bc:f5:e1:
                    ed:3d:6c:5b:8b:dc:46:a9:bc:98:47:d0:3f:3f:c9:
                    51:89:e3:37:d6:61:55:71:d4:61:7c:f0:e3:d7:6f:
                    4e:1d:b9:55:dd:6c:52:3b:9a:e8:fa:57:be:3d:d5:
                    da:4f:81:f4:fb:26:18:a8:fd:cb:b9:29:68:22:ae:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:D3:A1:73:F5:45:9B:3D:65:E7:2F:F9:E1:00:29:87:21:63:B4
            X509v3 Authority Key Identifier:
                keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:bc:f3:4e:23:79:27:c0:f1:50:06:17:c1:ce:2c:e7:89:
         ec:01:53:25:72:f4:f0:b1:8e:e9:07:ab:d6:57:2c:39:8a:3d:
         b8:5f:b4:8b:8a:55:2a:b1:f0:59:19:a8:d4:5f:09:cb:cb:16:
         f3:44:98:4f:9f:de:76:7d:20:d1:d6:31:f9:f0:54:e2:b1:09:
         e2:83:aa:74:eb:62:50:f5:0e:d4:38:c8:05:30:86:5e:a4:73:
         7a:8a:46:18:09:6c:06:10:0b:b6:0d:1d:d8:64:d3:03:fd:bc:
         4f:dd:6f:b1:30:ef:7d:27:b6:2b:ba:01:c8:e2:8f:82:d4:d8:
         40:02:72:7c:48:f3:7f:b7:4a:2b:39:a1:5f:0a:04:c9:d5:e2:
         5a:99:0c:78:8a:f4:6d:58:f0:6d:35:00:59:3a:ed:c5:e2:93:
         0d:e2:1a:2b:56:4a:ca:ef:c4:22:66:11:49:e9:7d:60:f3:23:
         13:c8:7b:96:00:ba:1c:44:fe:86:c9:f0:f2:cc:ad:8a:ac:b2:
         b5:3f:fb:20:04:6a:c2:24:1d:9e:ee:e8:51:35:0c:98:35:a9:
         26:14:7a:69:39:b0:00:ab:ed:b4:2e:41:5f:ed:2d:cf:7f:51:
         3d:fd:95:11:18:d8:67:33:aa:a7:ac:68:9c:22:22:a9:f9:3d:
         1c:b3:8b:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBxYyBmGN1aV8LbGZh4KC/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOWZlZTAzMjcxYjE1YzIzM2EyNDU4OWYyMzY1YTcxMGQ0
MzUyZDcwHhcNMjQwNzAyMDMwMDM5WhcNMjQwNzAzMDMwMDM5WjAzMTEwLwYDVQQD
EygyMzMzZDNhMTczZjU0NTliM2Q2NWU3MmZmOWUxMDAyOTg3MjE2M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF8lfazs2dbZLUMJJ4ox0jey4tqo
Xg7eqqwV8JUpROJfb6OQmO3vPbleOr7bUSx4QEWvufV2aWUjoi6dNoymIB2MjRXR
0MxNlj7TNX+rns2VW43E6QREfUMwT3Tvi1kuzNI3Anfy8oRIV0PzrvYv7ucS8c0k
yYHTM4c7TkCuqai608getmengbwzuacDC3nF6ocTM07s6x4DysGNiKdOA+UR5Kty
DPTKbPbZOsP1VbDKooWVp9mKD9zDbmWTIpS89eHtPWxbi9xGqbyYR9A/P8lRieM3
1mFVcdRhfPDj129OHblV3WxSO5ro+le+PdXaT4H0+yYYqP3LuSloIq5GTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMz06Fz9UWbPWXnL/nhACmHIWO0MB8GA1UdIwQY
MBaAFJyf7gMnGxXCM6JFifI2WnENQ1LXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTct
OGY5OWY5YWZkN2ExLzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTctOGY5OWY5YWZkN2Ex
LzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBq8804j
eSfA8VAGF8HOLOeJ7AFTJXL08LGO6Qer1lcsOYo9uF+0i4pVKrHwWRmo1F8Jy8sW
80SYT5/edn0g0dYx+fBU4rEJ4oOqdOtiUPUO1DjIBTCGXqRzeopGGAlsBhALtg0d
2GTTA/28T91vsTDvfSe2K7oByOKPgtTYQAJyfEjzf7dKKzmhXwoEydXiWpkMeIr0
bVjwbTUAWTrtxeKTDeIaK1ZKyu/EImYRSel9YPMjE8h7lgC6HET+hsnw8sytiqyy
tT/7IARqwiQdnu7oUTUMmDWpJhR6aTmwAKvttC5BX+0tz39RPf2VERjYZzOqp6xo
nCIiqfk9HLOLHg==
-----END CERTIFICATE-----
Generated at Tue Jul 2 04:42:51 2024 by rpki-client on console-ams.rpki-client.org