Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File:                     1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier:          0NFOp5goRd7jJgJZg72Yh8Q8MRfdW9Ciuc/ByH0ptwY=
Subject key identifier:   08:7E:EC:EF:62:D4:E9:BB:26:8A:D1:0C:F2:FE:DE:E8:D2:44:6A:0E
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer:       /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial:       0193512BDC5A1D3E48EF66CA5BD3B52A0729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 00:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:49 +0000
Files and hashes:         1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: VL+FxbqOcDOlaZ0ScIxAkNJHwDdgalj75HDR7BEMgW8=)
                          2: 1KYG3F8pHKNPo0Xcmmw4LB-YfeU.roa (hash: V/C4+cebLGRIpHH0s7FnVcrAHDMjo2KgHcCuNuiGAJY=)
                          3: 3J4jcvSpdD0oPsF4qn0Wgua3FDg.roa (hash: 8s58AlZmGxy6KVIvXLDnR/+39u7uYLxZc+JOFQuvbvY=)
                          4: 7VspCms8L1ACllsPYgL6wt0gx6s.roa (hash: 9E4UAeMSARnSkF25x8m2n0O3MLp7h0l5BsC171utTK8=)
                          5: ahJ7lD1mOSxzgP-IOOvpwlgnpVw.roa (hash: NYX1OxcWL4t7l9/TWvlt0g1EMgq3YT1bx5z+SBIgdqE=)
                          6: t3adbEqeVIP4Vq4fpq6kprZbrSo.roa (hash: E47BfDxVLPamkuKvU+hbcYyeV3Hg9I2nR6CrG43PR9E=)
                          7: u-s0oy9wDiSII-o__xGMAV4AJaw.roa (hash: vvCvmU/OXTFOBco+McSZu7g1PDFwFlbIs4LveQBPrWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:dc:5a:1d:3e:48:ef:66:ca:5b:d3:b5:2a:07:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
        Validity
            Not Before: Nov 22 00:00:49 2024 GMT
            Not After : Nov 23 00:00:49 2024 GMT
        Subject: CN=087eecef62d4e9bb268ad10cf2fedee8d2446a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:18:f2:f1:62:3a:cb:7b:12:2b:e6:9e:9f:
                    b1:3b:48:b2:56:64:73:27:98:80:41:45:dd:09:36:
                    aa:1c:bb:63:57:4b:e4:ec:da:d4:08:85:50:41:cd:
                    1a:f7:3f:93:4f:16:6e:90:8d:f2:c2:60:b8:09:2d:
                    36:86:46:98:f6:70:be:91:2a:50:b7:ff:04:c4:52:
                    7c:a7:ef:69:04:59:24:20:10:33:a4:3e:28:61:e1:
                    0d:ac:a2:88:0c:b3:cc:45:20:a7:8b:39:06:0c:32:
                    ca:c6:d1:7c:6f:c7:f2:0c:19:c8:35:80:2a:19:b1:
                    37:9a:21:5f:7d:73:f2:2d:20:d8:93:b4:7c:07:f7:
                    7a:1c:ad:ba:70:51:04:49:be:76:1f:40:4d:3a:a5:
                    ef:57:57:d6:43:28:d6:e3:ef:08:2d:9c:a5:eb:38:
                    69:81:55:ff:16:91:51:03:45:a2:50:b4:1d:21:d8:
                    df:97:22:0d:3b:aa:f2:05:b0:25:cd:6c:f6:ce:ed:
                    b8:78:8d:a3:24:b6:55:77:1e:41:c2:ff:82:40:0c:
                    48:79:d3:37:3c:ca:b4:63:b2:68:a3:07:29:92:49:
                    be:55:b2:44:b6:d3:2f:72:34:de:cd:d6:f4:f3:70:
                    f1:62:69:5d:fd:a1:e2:86:0b:15:5f:56:fc:46:9d:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7E:EC:EF:62:D4:E9:BB:26:8A:D1:0C:F2:FE:DE:E8:D2:44:6A:0E
            X509v3 Authority Key Identifier:
                keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:63:12:f3:25:91:b4:13:fe:4c:02:de:bf:d2:25:13:08:8f:
         23:22:e1:4e:37:41:32:e8:e9:ee:ec:28:bd:c5:38:f3:1c:1f:
         26:df:f6:8a:6e:54:43:09:85:28:13:5d:6f:f4:3f:5f:08:1a:
         a1:d0:4f:52:6a:ac:48:5b:cc:08:0c:c8:6c:83:2e:88:b5:5b:
         3a:df:71:4e:ca:e1:f8:a2:c9:9b:74:ae:7a:d1:82:2a:01:9b:
         49:73:e5:44:1f:c4:ee:e9:0c:81:7b:87:c3:7a:e6:b6:ea:9b:
         11:dd:14:61:2d:7c:d2:88:1b:a6:1e:99:49:fc:0c:b1:ba:53:
         56:42:97:51:e4:d4:bf:0c:f7:81:c6:ff:09:88:f3:bf:62:0f:
         52:cd:75:ac:a3:f2:a7:9b:fd:88:87:c0:2c:f3:65:6d:1d:b8:
         bc:90:7e:07:39:b7:63:27:5b:4b:42:c4:cf:60:35:20:b4:39:
         45:f1:4a:57:16:da:d0:1a:32:9a:dd:ae:2f:dc:3a:15:ea:e6:
         f3:4d:84:29:35:c5:61:44:0e:01:b5:1a:80:a1:37:cc:8c:0b:
         54:c1:3a:2c:ea:05:35:6e:66:11:0e:06:6f:23:2a:4a:0a:be:
         02:bb:34:28:7e:4c:f9:8a:62:9d:57:b5:dc:d1:a4:dd:de:c8:
         f0:2a:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:54 2024 by rpki-client on console-ams.rpki-client.org