Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
File:                     NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft (raw, json)
Hash identifier:          4wl3/33UIH3ejobA5VhLlhQXXxJLb8n0GVc4SkLMtfQ=
Subject key identifier:   B4:24:1E:A6:ED:00:46:E3:3E:DB:D4:6A:84:41:64:29:95:C8:FF:B1
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Certificate issuer:       /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial:       018F45A09E3D65A6BED02F37B5AE243A0FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
Manifest number:          115F
Signing time:             Sat 04 May 2024 22:01:45 +0000
Manifest this update:     Sat 04 May 2024 22:01:45 +0000
Manifest next update:     Sun 05 May 2024 22:01:45 +0000
Files and hashes:         1: 1hwrFPr-J6BWBsBUT12V2WGgMY4.roa (hash: 7sY5jJx3P1fc3zohk2olNo5Zn3q8JNnR2MNQ0qIbJPc=)
                          2: 7r6ABkmqlrzoW4VTRM-CW6hYxuA.roa (hash: FG0OIBH/uyR6TVHSRxR/xOAzJSI/URcNB7oXx1C0fOY=)
                          3: NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl (hash: XEFMQDxTGGYxxoC+RMKfHoRbP1VN0TC/E78fJ3Gwm7U=)
                          4: VhPLtAqzbTMeQR55fPFvhophf4s.roa (hash: eP5Ig4UHeUIRBr7bhkGTISE0eYa+I/YV3hJHz+eia1c=)
                          5: jwvGELKolrBywJsluTeDcxVs1bU.roa (hash: qW0PWWEpa9RXg2U7YcJZeNBDd9V1U2bcQCs4w02oAJo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:9e:3d:65:a6:be:d0:2f:37:b5:ae:24:3a:0f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
        Validity
            Not Before: May  4 22:01:45 2024 GMT
            Not After : May  5 22:01:45 2024 GMT
        Subject: CN=b4241ea6ed0046e33edbd46a8441642995c8ffb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:ad:d6:c7:8e:85:fc:44:f5:cb:73:aa:f5:
                    16:ec:15:c3:b7:99:d5:5e:8d:03:dd:d9:48:6d:09:
                    0d:cb:22:12:ae:ad:78:51:fa:79:3b:b9:d3:55:fc:
                    6f:bb:38:23:1a:f8:4c:bd:87:f5:64:d6:36:be:e2:
                    59:eb:3b:3f:5c:23:ba:68:45:e9:01:58:3c:88:59:
                    56:28:e5:df:a5:88:d7:fa:08:29:bd:48:f6:f2:9e:
                    f5:b6:19:26:df:98:7b:2a:61:02:4d:c5:c7:52:d3:
                    8d:0a:74:d1:e1:b6:f4:54:91:f3:5a:ff:b2:ec:07:
                    f2:50:00:58:d9:49:f6:27:eb:c1:4c:90:29:b7:98:
                    08:73:cf:52:f0:22:a2:20:55:33:a3:61:0b:1d:32:
                    56:9b:ae:4f:1b:dc:2e:79:23:6f:2c:4e:b6:06:65:
                    b9:7f:9e:40:02:13:e5:48:ea:7b:3d:9e:82:72:16:
                    41:ff:65:31:c6:74:56:6a:54:62:25:c7:15:56:70:
                    26:9e:83:24:e7:b7:d3:1b:82:63:02:6b:69:92:73:
                    ee:2e:e4:76:87:e0:ee:28:75:a0:45:79:21:50:24:
                    78:2b:d8:d9:4e:76:00:42:11:89:88:50:bc:47:1b:
                    58:fb:a7:56:78:3e:a3:ca:d7:a5:2d:af:38:30:b9:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:24:1E:A6:ED:00:46:E3:3E:DB:D4:6A:84:41:64:29:95:C8:FF:B1
            X509v3 Authority Key Identifier:
                keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:0e:a6:22:1d:4f:6c:8c:6c:85:59:d3:96:49:a0:aa:3e:
         10:3b:91:e8:83:3a:a5:9c:9c:b1:81:ae:86:6e:24:99:25:e5:
         48:f1:f2:8e:a2:7b:57:27:5c:e3:91:3a:8f:cf:c5:88:2d:90:
         e4:27:61:6f:f1:14:c8:98:fd:17:b1:b3:59:96:6c:de:aa:84:
         6b:0b:1c:97:04:36:da:c0:f0:05:1a:3d:20:cd:eb:db:33:3c:
         da:0d:68:34:21:55:0a:47:15:60:d9:45:b7:cc:fe:43:6d:55:
         f3:44:97:78:2f:00:7c:32:37:70:eb:55:19:d7:74:54:33:14:
         ba:cb:7f:a0:1d:58:db:a8:ce:8f:5f:82:07:3f:f2:5b:22:e4:
         8a:dd:68:6a:aa:fc:46:7e:b0:b8:9c:e5:fc:0a:ed:8c:f4:37:
         e3:65:b3:e0:4c:10:fa:e0:44:6e:cd:ce:01:ec:ad:b3:12:81:
         72:a3:93:69:57:5e:dd:30:d3:46:3c:51:1e:5a:44:8d:62:75:
         aa:b4:12:af:a1:b9:86:ea:ea:54:d1:81:93:fe:8c:63:dd:19:
         7e:cf:a9:fb:fc:6d:84:a7:1b:fd:32:1a:15:40:46:7d:a3:d4:
         f5:56:3c:41:30:aa:8c:ce:e1:fe:8d:ec:5b:11:a1:0c:62:1e:
         cd:d7:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:26:36 2024 by rpki-client on console-ams.rpki-client.org