Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File:                     NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier:          SgQDxx/k80B60JOMTjrIaP/8V+mfQRQbPi6dgsn6Js4=
Subject key identifier:   D6:98:41:4A:EC:CE:DD:C2:A7:69:9D:83:D0:1C:46:21:31:CF:9E:19
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer:       /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial:       018F86A3EF6FC0F2CB9A885E6D10A851CD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 13:00:41 +0000
Manifest this update:     Fri 17 May 2024 13:00:41 +0000
Manifest next update:     Sat 18 May 2024 13:00:41 +0000
Files and hashes:         1: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: +EV01nv8ImI2LM8hZs2aandbUSEvqGvTPNQ4ypVLZ/s=)
                          2: Tfbz4XRqO9N8l5fqVzAm31f2004.roa (hash: i9m9fA86UpDXkafd35BO763NMxyHtr/odwJ1Rv9yrLY=)
                          3: xmjbxR5UBTaXlW0VK9l1Bef8G4I.roa (hash: gDq3uCz+6RZ0PvCqK0cWYQkCxdlHWR4LiNXz9ucNilU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ef:6f:c0:f2:cb:9a:88:5e:6d:10:a8:51:cd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
        Validity
            Not Before: May 17 13:00:41 2024 GMT
            Not After : May 18 13:00:41 2024 GMT
        Subject: CN=d698414aecceddc2a7699d83d01c462131cf9e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:bb:22:70:e6:a4:62:e3:35:ba:70:04:7f:
                    ed:b3:8a:72:4f:38:7f:d1:fb:af:b4:99:5e:38:a7:
                    0c:03:f4:64:f7:c3:cb:58:f6:65:ea:24:b5:38:4b:
                    30:bf:75:f3:82:2a:a2:07:3c:9c:e6:4b:a1:62:22:
                    88:ea:82:d1:67:a9:8f:95:bd:bb:96:74:d0:5b:a1:
                    ee:d6:53:26:7b:e1:94:08:d3:92:57:2e:57:45:3e:
                    b7:c5:51:a2:40:9e:a1:56:11:8d:78:16:99:07:0a:
                    e6:56:d8:17:ce:0d:80:8d:e4:16:e9:32:3d:68:20:
                    04:69:60:c2:57:fe:1b:93:b2:cd:e1:e1:04:4d:f6:
                    42:2a:6d:6d:b7:2c:e9:21:0b:3c:0b:50:27:5f:1f:
                    d4:29:db:b5:9b:fa:0b:2f:4c:5f:d6:24:14:b5:89:
                    5d:ab:31:5c:87:c8:2b:68:39:8c:13:12:f1:3d:e8:
                    35:6b:98:a1:ce:5f:5c:48:d5:18:5e:f3:14:43:09:
                    78:45:b6:4b:34:1c:c4:f4:37:6e:fc:25:55:3b:0e:
                    68:3b:36:23:41:b1:cd:d4:3b:78:b1:c9:98:0b:51:
                    90:b6:66:33:1b:54:d5:93:13:dc:3e:71:61:9f:ab:
                    e2:6c:32:8c:80:dc:81:fd:1f:ad:0b:62:33:4f:f9:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:41:4A:EC:CE:DD:C2:A7:69:9D:83:D0:1C:46:21:31:CF:9E:19
            X509v3 Authority Key Identifier:
                keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:c3:07:6b:63:d0:d9:98:9a:d5:66:33:47:44:be:45:cd:
         10:67:94:3e:1d:3e:2d:c3:0b:d3:92:f2:29:05:90:cf:80:31:
         48:ce:80:94:16:7e:1a:d3:86:15:22:43:9e:72:22:e5:55:c5:
         3d:59:4f:04:7a:22:e9:a4:c9:07:ac:4f:f3:5a:86:f9:d1:cc:
         1f:b5:fe:3b:df:d3:3b:6e:a6:a8:b5:5a:e9:20:6f:e5:05:5f:
         fe:7d:f3:ef:f4:ce:e2:82:a9:43:b5:f2:92:dd:69:3f:c3:c4:
         b8:eb:d6:79:6f:91:5d:f5:45:28:ad:ca:c0:f2:b6:f5:bd:65:
         04:0e:d5:a0:bc:37:7a:9a:e5:64:5b:7e:4b:b3:b8:8f:57:97:
         1d:52:57:39:f5:e1:28:11:14:4a:f0:8c:c8:0e:d0:c2:ac:d0:
         b0:71:b7:e1:82:24:86:fd:c4:9a:3f:29:d1:43:a5:aa:46:90:
         f7:b2:6a:55:12:07:a9:ce:92:70:0e:37:2c:e9:f1:b6:42:12:
         07:e8:3c:7a:af:a4:13:3e:f7:a8:58:ee:18:12:9e:12:f1:7b:
         bf:6c:46:97:09:f4:c9:6b:6a:b7:e1:7d:7a:38:82:24:a9:60:
         64:96:0e:ab:29:17:f3:31:f5:b1:d6:30:96:57:9e:ad:c6:46:
         27:e5:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:01:20 2024 by rpki-client on console-ams.rpki-client.org