Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File:                     NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier:          y6Ldk9w2LvwkZAbsxicOf9jvfEkBmN7OJdXRr64M84k=
Subject key identifier:   85:36:88:39:A0:7A:97:9B:70:72:3D:F9:C8:55:91:6D:2F:56:94:06
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer:       /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial:       019351998E367F15944A557A5DCC41976E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 02:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:38 +0000
Files and hashes:         1: 1-dBWc-gjB6UFJ9qKVrHu2ayToSs.roa (hash: B+t4UKZ5yoCDLEwgMpcdYCeJmu6Mxq0A3H26XanQ8WM=)
                          2: 8X80FMCDyoFkLCbC5l1YtdWAyBE.roa (hash: dVtUfRg6vAbM2BbJSrh3zX5rpcOVoDwi3DEXsahX4DE=)
                          3: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: CD/86J3hbE5F6Gus7WNaWx8XtmiMkJGuo+XUPd/qLdo=)
                          4: NGFpI09iUmrJ91Y3MJnGVBst-g4.roa (hash: e/w6E9kjdPyHtvuAlroCEQNqnpwy0RTGRByFojmRUyY=)
                          5: Xz0wI_pCJDd8UUw9CH5KX_N2MDg.roa (hash: /P4xOvM5B/PHo+LRVBhU15slC6fDxyjhv0TWk60KuMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:8e:36:7f:15:94:4a:55:7a:5d:cc:41:97:6e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
        Validity
            Not Before: Nov 22 02:00:38 2024 GMT
            Not After : Nov 23 02:00:38 2024 GMT
        Subject: CN=85368839a07a979b70723df9c855916d2f569406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:e0:f6:f3:f5:96:61:d5:89:9b:f6:9e:9b:
                    39:fb:a1:1b:d7:ab:4e:a5:68:e3:5e:83:27:47:e7:
                    c7:1a:39:fc:a9:16:f1:ab:de:8a:a4:bb:4b:08:b9:
                    7f:82:db:c2:93:06:74:f7:9f:ef:62:f9:ad:83:27:
                    c5:f4:25:3e:2f:40:07:26:3c:07:03:16:2c:69:57:
                    02:0d:e0:1b:7c:36:03:aa:d4:76:c3:e0:d1:98:22:
                    ab:95:7f:ba:6c:71:47:4c:7a:b6:eb:95:3d:43:ef:
                    7b:38:8c:a8:7c:7e:8c:27:8f:6c:28:e7:3f:58:89:
                    48:70:f6:bd:bd:e2:01:d1:31:c0:00:c4:f7:b0:56:
                    54:08:53:e8:34:9e:05:42:25:e1:33:02:f0:f6:73:
                    da:bd:7d:31:45:10:cf:06:5b:43:1b:e2:b0:b9:b8:
                    53:d0:1b:88:8c:a9:6d:73:99:4a:9e:14:77:6b:db:
                    8d:d8:ed:da:be:60:dd:6e:e6:67:bc:a9:c0:a4:db:
                    8f:e1:8c:66:07:1c:3e:2a:b5:a3:b9:1c:db:ae:c7:
                    81:c7:40:07:85:07:bb:37:c7:56:14:dc:c2:f0:41:
                    d8:83:f5:a5:d1:96:ab:9f:3a:fc:5c:cf:e8:8c:01:
                    ff:04:19:12:17:2b:a7:6a:ba:ee:aa:22:3c:74:88:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:36:88:39:A0:7A:97:9B:70:72:3D:F9:C8:55:91:6D:2F:56:94:06
            X509v3 Authority Key Identifier:
                keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:26:d6:9d:04:7a:99:4e:6b:f8:f8:df:d6:43:61:e8:54:
         e7:0a:2a:27:b3:9e:c3:08:54:2a:03:e5:69:86:ae:52:67:81:
         46:06:2c:d2:fa:d0:cd:8f:8f:b7:60:3d:ae:7b:f3:df:f7:77:
         52:ba:a1:91:ca:02:6b:1f:68:4f:36:9f:b4:31:8b:eb:ea:55:
         88:d3:da:37:84:99:f3:ff:ea:ed:3d:78:d9:eb:bf:0e:01:e9:
         27:18:3d:b3:9e:0a:7e:7e:81:4d:57:3b:e5:4f:8d:60:79:d0:
         5b:00:5a:2d:d1:55:65:55:b6:37:8a:36:ca:5d:f8:c3:6e:4a:
         da:f2:53:0a:80:16:46:dc:44:86:d3:f0:3c:0d:1d:cc:1c:ad:
         ad:67:bd:34:49:86:57:9b:87:b5:f0:50:99:89:20:0a:46:63:
         54:c8:1f:34:e2:0c:e7:f7:ab:00:6d:b8:19:f2:86:d9:c7:41:
         da:01:bc:c7:f9:79:ba:b3:d6:8c:c8:c2:55:69:04:87:e2:eb:
         77:12:d3:32:b2:25:60:fd:52:67:bf:51:c1:25:dd:5a:cb:93:
         3f:a3:55:3c:b2:2f:2f:bf:8c:51:a5:a3:af:f6:93:12:50:9c:
         f7:c1:07:05:69:42:92:bc:d2:58:3b:bc:ec:b0:4b:63:1d:32:
         b4:ca:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:52 2024 by rpki-client on console-ams.rpki-client.org