Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File:                     nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier:          /HoGSXJ8VV68xaFNMi88nfedlCnaBEDpWGn6wwllxcI=
Subject key identifier:   C7:E5:14:95:3D:1C:66:E4:C5:83:E0:87:28:C7:5F:DB:02:A0:C5:FB
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer:       /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial:       01905321E856C0C55D71C1CCB99D5E2675A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number:          A6
Signing time:             Wed 26 Jun 2024 06:00:49 +0000
Manifest this update:     Wed 26 Jun 2024 06:00:49 +0000
Manifest next update:     Thu 27 Jun 2024 06:00:49 +0000
Files and hashes:         1: UjT-wi3wQfBntUguPIo5v9JQIp0.roa (hash: FUNvYfXF0sJigqZdrThOlz++XWg+4eB1dnCtCRGRolA=)
                          2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: fSdcFl3lWqON7eyI+XVzUFLmLHR8olCMdbV75N3ohn4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:21:e8:56:c0:c5:5d:71:c1:cc:b9:9d:5e:26:75:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
        Validity
            Not Before: Jun 26 06:00:49 2024 GMT
            Not After : Jun 27 06:00:49 2024 GMT
        Subject: CN=c7e514953d1c66e4c583e08728c75fdb02a0c5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:50:44:ce:10:4d:74:28:13:93:0f:52:da:b7:
                    e1:54:ed:06:e7:28:67:72:fc:9d:b0:b3:05:70:c2:
                    aa:18:6b:12:6a:69:39:20:6a:54:b2:9f:cc:0f:b1:
                    e2:b8:63:10:d7:74:20:33:57:02:b9:b4:a2:77:66:
                    1f:7b:50:5f:97:bf:c4:16:eb:c0:62:f1:fe:b4:c1:
                    3d:e5:03:8a:9f:e3:f5:c6:f1:1d:9a:ae:32:3c:03:
                    f5:d7:b4:ba:93:80:2b:bf:fc:06:04:e8:b9:a6:8b:
                    db:31:9a:71:5a:ce:ef:77:81:2e:90:08:33:e1:a3:
                    6d:ec:06:d4:82:1c:ec:ab:9c:b8:c7:2f:dd:4c:22:
                    06:31:53:42:e3:01:ad:f8:7f:36:49:e8:46:14:64:
                    15:05:e1:21:fa:6c:f0:5b:74:d6:20:ac:06:13:74:
                    84:22:95:00:ff:5c:4f:a3:85:51:e3:cf:88:f7:91:
                    0c:34:af:f9:c8:a6:5f:22:7f:a0:87:65:bf:cc:2f:
                    42:f9:14:6f:1d:cd:45:29:25:b9:71:ae:31:6e:95:
                    e4:e5:23:ee:bf:77:a8:18:bc:af:b7:f8:b1:93:06:
                    b8:8f:0c:a2:8c:d9:08:77:80:c1:dc:0e:77:d1:7d:
                    91:37:6a:e9:e1:20:82:73:5d:eb:cb:a0:f7:73:0d:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:14:95:3D:1C:66:E4:C5:83:E0:87:28:C7:5F:DB:02:A0:C5:FB
            X509v3 Authority Key Identifier:
                keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:84:4d:2c:3e:fb:e2:70:c2:b9:c3:fe:3a:5f:c4:04:e3:
         b0:f4:92:f5:49:e8:15:e9:6b:e1:3d:28:17:43:76:0e:06:f6:
         ab:fd:ea:07:cc:46:66:41:79:07:d4:3d:32:10:50:24:8d:6f:
         cd:51:ff:a3:16:6b:ac:6c:c7:c3:95:4d:25:99:9a:13:bd:0f:
         ad:31:40:4f:71:51:4e:c0:47:2a:cd:1d:fe:ef:39:04:39:18:
         cd:a1:eb:ec:16:92:76:c7:50:54:9c:d7:48:12:20:28:1a:3a:
         9b:2a:5e:e1:55:41:72:b9:b8:48:77:f8:79:3e:2b:27:73:d8:
         50:8a:f0:0a:f8:0b:80:5e:e2:cc:e7:a0:02:77:45:96:25:b1:
         72:bc:2c:26:75:a2:a4:f8:0c:6e:bc:77:89:d7:54:79:63:8d:
         47:3a:4e:29:ae:5f:bd:c7:34:e6:88:4a:a7:79:e9:80:08:c1:
         c8:d7:28:fa:5b:b1:5c:ca:c6:ed:57:bb:6c:4e:3a:2c:6b:79:
         b9:ea:a7:2c:07:e4:c6:c9:0b:6b:3b:cd:2d:50:51:53:7f:18:
         06:a0:c9:72:ad:e3:45:11:90:03:4b:a0:62:5e:95:29:21:2d:
         db:7a:84:d8:b5:e1:16:02:c4:64:7f:1f:a8:9a:c7:84:af:dd:
         5e:91:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:40:48 2024 by rpki-client on console-ams.rpki-client.org