Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File:                     NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier:          DiawlgQdQAFqDm2YiAn6LJZRaMqniq9eP6chl8Jsm30=
Subject key identifier:   3C:00:9B:C1:F7:83:AA:AA:01:BF:14:8E:B7:9C:A1:DA:53:16:E9:A3
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer:       /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial:       01935387B2B4C452FCEC7E8E45D737F5A9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number:          137E
Signing time:             Fri 22 Nov 2024 11:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:22 +0000
Files and hashes:         1: Cvgwg-uKvuUaS7cLg_cPYzdD6Uw.roa (hash: 1GZIwwx254bndn2FBEU66FnntwLKhhpMMvGpQmLLXDw=)
                          2: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: tUKZPruHXNPdLVfwt1IrqqBeKJ9SQNcphM18YYP5zNo=)
                          3: TZVMTbn2lC314qxspX8x-MT63kE.roa (hash: FdTosmC4QLTWBR4mPIa+OQthOXiBqzDjcX2oeplsdeE=)
                          4: _I2M00pQgaclvdRn62PgVoNqvMM.roa (hash: et0+KsHtAgs4mSa9hhmd7KlgMT5M85DabbbTi7QuaOk=)
                          5: sNsgwIL7_2NXkqyyoKgU48XsukY.roa (hash: TH+yIsyf6L/Ht/Eq+wZJ+CQWrNj55JIjGL9lon+7uoA=)
                          6: uMb_8McJNSLun_ZCs7iiObatOIw.roa (hash: 0JXp4o7dINiAJD9Ja9j93EAoCA7LcaRkSXimzQW9FpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:b2:b4:c4:52:fc:ec:7e:8e:45:d7:37:f5:a9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
        Validity
            Not Before: Nov 22 11:00:22 2024 GMT
            Not After : Nov 23 11:00:22 2024 GMT
        Subject: CN=3c009bc1f783aaaa01bf148eb79ca1da5316e9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:d7:06:ad:d6:a5:81:0c:23:80:b5:c8:ed:
                    6d:31:b4:cc:32:5f:2a:e3:be:b2:1b:e1:01:12:f1:
                    91:a4:8c:10:9a:ad:26:d4:2d:25:9f:29:4d:8c:a4:
                    ee:35:52:24:9e:79:ea:48:10:b7:21:35:d1:9d:21:
                    00:c9:ec:ae:1b:8f:32:be:af:9c:64:e6:29:94:5a:
                    5a:7c:ea:27:9e:44:65:4c:d6:5f:48:6e:71:d4:35:
                    c7:03:28:ff:06:76:ac:cf:0e:51:5c:63:65:5b:d5:
                    46:89:cf:ef:26:80:85:a1:b3:92:2d:7e:04:ec:ac:
                    4c:0e:ea:49:2f:fb:80:5e:7d:fb:62:cf:e2:8d:2f:
                    9f:44:a9:4f:86:a5:69:7b:9f:21:91:c1:81:38:6e:
                    55:71:ea:86:3e:81:5c:e6:df:b0:b4:f1:e8:2e:43:
                    13:ef:c1:d9:83:dc:e5:72:1d:d7:b4:be:85:cb:ae:
                    1b:fa:81:e4:cb:e5:f0:b0:63:2b:3f:75:db:02:15:
                    ba:e7:d5:e4:88:79:3e:16:3a:0d:d5:0f:ff:d8:ce:
                    52:2c:58:e4:51:12:bc:4e:1c:67:20:d7:bb:00:9b:
                    bc:65:6d:fe:70:ea:e0:d0:27:7e:04:3f:f7:8f:76:
                    5d:f6:74:a2:5d:bc:e2:bd:ff:90:67:2d:7a:08:ff:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:9B:C1:F7:83:AA:AA:01:BF:14:8E:B7:9C:A1:DA:53:16:E9:A3
            X509v3 Authority Key Identifier:
                keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b0:56:17:63:8a:6b:c7:92:84:16:a5:f9:a7:6a:cc:3c:06:
         fd:de:24:7e:3a:7e:06:87:93:b1:b1:18:c3:3d:86:69:73:cb:
         98:70:77:93:8d:4a:a2:8d:de:1c:3d:de:2a:46:8d:40:cb:19:
         e5:4c:cc:12:05:45:34:ca:ef:c4:9b:de:6d:a1:81:c4:93:55:
         91:09:04:81:3c:bf:20:81:8b:15:ce:71:75:66:36:9b:37:29:
         69:e8:ee:bb:17:db:c8:21:76:59:16:21:1f:19:79:4f:ac:39:
         96:43:69:4e:80:69:85:8d:06:f9:b1:82:65:6f:fb:fa:fb:46:
         c5:24:54:97:b8:31:06:44:a0:e8:93:9e:0c:96:e2:83:cd:27:
         ef:f1:cc:0d:b8:37:2e:a3:08:e6:8f:0e:c3:f5:13:05:c3:93:
         36:8c:7c:49:ca:11:d3:74:8b:fb:20:ef:d0:10:fe:e2:10:c6:
         ec:f9:ee:f4:c4:31:d2:c8:a1:b6:b1:47:a3:33:14:af:4a:1a:
         c6:ba:2f:de:75:9b:6e:70:65:ec:f1:36:86:f1:a7:7d:c0:54:
         7b:ab:5a:ba:8f:9f:2e:41:c9:6f:78:51:69:b8:92:06:81:b9:
         e7:c1:4a:6a:1f:2b:d8:32:00:e1:5d:f1:e6:d3:04:1c:f2:c1:
         1d:0f:ad:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:05:28 2024 by rpki-client on console-ams.rpki-client.org