Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File:                     N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier:          AsqTuOo1VsZkJJ3YcU7Y0SM7pwLWwzdNpjl1E9q//qw=
Subject key identifier:   53:45:13:9D:CF:9B:CB:11:93:48:D7:B1:49:D0:06:0A:3C:C4:DB:CD
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer:       /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial:       0191FA7E2619161F0352F313D2A083322214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number:          0141
Signing time:             Mon 16 Sep 2024 11:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:56 +0000
Files and hashes:         1: CXzURgPOXuFEVtnAuEjcglG0jOE.roa (hash: fqQe9KPbBueMVvgUiiDXIluJG5cdlZJcFG7wAhjH/jY=)
                          2: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: mUOnupeDtPjq0YfXMSdEQPEhsY5JSFJ4is6BO/cE8T0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:26:19:16:1f:03:52:f3:13:d2:a0:83:32:22:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
        Validity
            Not Before: Sep 16 11:00:56 2024 GMT
            Not After : Sep 17 11:00:56 2024 GMT
        Subject: CN=5345139dcf9bcb119348d7b149d0060a3cc4dbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:12:12:40:b7:9c:e9:29:0b:42:b8:3f:76:
                    a7:8a:54:93:e0:b3:17:63:71:72:91:bc:f3:8e:f0:
                    5e:1a:12:29:d3:9a:2e:38:ed:09:53:98:94:71:f2:
                    63:e0:04:2f:3e:18:ef:e2:5c:ff:dc:ef:8f:29:95:
                    38:e7:7f:f9:19:57:e0:94:b5:0b:07:b6:a1:27:72:
                    00:93:fa:04:b1:66:a5:87:ba:72:99:15:3d:a1:ce:
                    2a:c0:d4:d6:92:90:a1:9b:07:04:af:d6:99:09:d4:
                    79:26:52:10:fc:e0:7c:7b:12:19:66:3d:d0:d0:c3:
                    41:0b:44:aa:4e:b4:41:12:e1:70:c6:47:c8:76:45:
                    50:00:d2:15:37:d4:be:a9:eb:ba:f9:93:4b:a0:55:
                    d4:14:47:c2:c6:da:23:b8:6a:d8:1c:8c:82:bb:1f:
                    08:cc:37:d6:d7:9f:78:e0:da:59:d9:af:5e:1e:ec:
                    8a:08:e3:0e:35:99:4d:6c:8d:3e:c7:20:d9:63:45:
                    e4:d7:b7:d2:ed:06:39:1b:7b:bb:5c:4d:54:a0:99:
                    91:0f:08:3f:f2:1c:6f:c2:0b:6a:68:ec:93:56:5d:
                    dd:a1:72:5c:0f:61:36:2b:2e:76:44:f4:88:0b:db:
                    f2:d9:9b:f5:2c:0b:79:e2:76:75:d5:cc:8b:85:8e:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:13:9D:CF:9B:CB:11:93:48:D7:B1:49:D0:06:0A:3C:C4:DB:CD
            X509v3 Authority Key Identifier:
                keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0a:79:33:88:2a:99:d5:3a:36:74:a2:f8:82:66:e7:39:8f:
         9d:3e:92:b0:cf:79:53:b9:86:90:da:78:2f:a4:c8:48:80:d5:
         48:6f:6e:a6:8e:14:cb:c7:bd:2b:89:bd:36:b3:68:25:d0:e5:
         1f:a0:2c:9a:4e:bc:4f:4d:27:0e:de:3c:1d:c3:0d:b9:7d:1f:
         a7:31:7e:55:8b:ce:ea:6a:dd:4a:ee:e0:dd:0f:f8:22:fd:4b:
         ce:36:fb:a0:b0:01:49:fd:c9:50:a3:5e:8d:91:b1:21:f5:d8:
         8b:1b:95:82:08:3f:94:75:9b:08:82:01:a9:6e:ff:ee:24:32:
         a5:f2:27:32:ff:56:98:b0:45:8a:9a:f0:80:9f:51:c2:02:2b:
         03:84:5c:18:9a:73:28:f8:02:eb:ab:54:96:62:bd:d2:a4:c8:
         f7:50:a1:c6:43:4d:f7:0f:52:9b:cc:80:a0:46:2a:d0:da:89:
         c5:05:95:9f:cc:32:e4:d6:a2:d4:fb:ed:0b:71:13:1f:6f:ed:
         e2:1c:a2:40:30:37:d1:e0:e8:73:96:08:8d:e7:f1:cf:ef:d4:
         96:5a:0d:f6:bb:08:ee:c0:33:9f:2f:9f:cf:9e:2f:60:94:8b:
         26:53:11:dc:2a:b2:eb:06:8b:46:f0:27:96:29:4d:d3:16:1c:
         3d:35:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:13:14 2024 by rpki-client on console-ams.rpki-client.org