Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft
File:                     78NCM-2WQkpRbiv505Fxti5EtEE.mft (raw, json)
Hash identifier:          9MXcWLq283NEYM1M6Sz/Lq5nPIUtp9Dyxevx9ddubAc=
Subject key identifier:   37:13:2B:5E:76:FA:F6:A2:47:F3:59:66:79:47:EA:B1:FD:D0:95:1A
Authority key identifier: EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
Certificate issuer:       /CN=efc34233ed96424a516e2bf9d39171b62e44b441
Certificate serial:       018F411EF63A9590F38FB2136FA4A153DC19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 01:01:39 +0000
Manifest this update:     Sat 04 May 2024 01:01:39 +0000
Manifest next update:     Sun 05 May 2024 01:01:39 +0000
Files and hashes:         1: 78NCM-2WQkpRbiv505Fxti5EtEE.crl (hash: oI+bBvMNZ+Bclt6GoaF4UwhbBRhVq7cw2BwkAtuCcvo=)
                          2: VLu8qXaB6nMyQI0IrTkn42lYGs8.roa (hash: IHfapnZhT9q3vBWij3E9p9XWs/z9gR6tNKdantbH3Ks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1e:f6:3a:95:90:f3:8f:b2:13:6f:a4:a1:53:dc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc34233ed96424a516e2bf9d39171b62e44b441
        Validity
            Not Before: May  4 01:01:39 2024 GMT
            Not After : May  5 01:01:39 2024 GMT
        Subject: CN=37132b5e76faf6a247f359667947eab1fdd0951a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:fd:67:14:07:e3:62:ce:70:ad:c6:2b:e9:
                    a6:80:71:d7:7c:7e:d7:49:53:bc:e5:4a:88:3c:c0:
                    09:6c:c1:e7:5a:40:1e:8f:96:cf:58:89:05:a4:be:
                    42:cb:ea:a0:c3:76:22:01:3d:3f:25:03:2a:42:54:
                    f1:71:09:73:dc:ff:32:93:cc:bb:a0:ce:22:a1:b6:
                    9e:27:ae:23:cd:5e:e7:fa:6e:57:c1:53:52:81:c5:
                    a7:c1:85:2f:02:b1:4f:c5:87:c4:0b:e1:44:55:63:
                    1e:24:4a:19:ec:cc:b4:38:f3:6d:2f:ab:8c:3c:52:
                    60:08:b2:ce:0d:98:ae:79:40:dc:1b:e7:1b:18:28:
                    ef:37:7b:6b:da:9b:f8:c7:7c:74:9f:da:54:b1:e3:
                    82:ad:5e:33:bf:ab:d1:15:64:b0:88:4b:36:59:85:
                    03:f2:ba:1a:d6:91:55:97:be:02:bd:c1:db:2a:68:
                    21:88:33:09:cb:a1:d1:89:27:20:93:c6:ad:e9:06:
                    88:6a:8a:c6:e3:a2:2c:0b:2e:f1:db:d2:4e:b9:ea:
                    a0:39:b0:f3:6d:a7:14:b9:99:fc:3b:2e:7f:d3:30:
                    44:76:32:61:e1:0a:40:5e:2d:13:bd:b4:23:f8:f8:
                    62:1f:bb:41:20:80:6e:08:6c:94:8b:d7:02:be:72:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:13:2B:5E:76:FA:F6:A2:47:F3:59:66:79:47:EA:B1:FD:D0:95:1A
            X509v3 Authority Key Identifier:
                keyid:EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:92:2f:22:75:3c:2e:76:e2:c1:12:57:f0:fa:25:b8:58:25:
         36:7c:d0:09:82:07:ab:87:8b:3e:89:12:d7:c7:74:a2:84:a1:
         88:ca:48:f0:94:66:b3:42:b8:a5:a7:15:cc:f3:d3:73:4f:8f:
         80:7d:1b:d1:77:85:e2:e0:a9:00:01:c4:77:b0:c8:16:45:1a:
         f6:00:67:a3:9e:b2:26:d1:f2:55:a3:28:6f:c4:90:b9:00:15:
         ac:0e:80:77:35:28:ac:80:81:5b:90:7f:da:37:3c:ba:52:ec:
         3a:dc:42:f6:8d:8e:dd:5c:f8:05:52:09:83:fb:18:d4:8a:c0:
         b0:a3:e5:8d:da:62:1e:f3:28:de:15:a1:d3:45:06:93:7b:23:
         e9:64:ae:7d:e9:d1:72:9b:70:a2:a8:4a:a1:ac:3a:41:91:9f:
         f8:62:ef:9e:08:29:80:3d:5d:ca:ee:00:3c:fb:9e:72:83:73:
         4b:3d:3c:26:76:c7:66:bb:28:c1:2f:ed:87:63:99:d9:c1:5e:
         bd:62:8d:2b:fe:56:38:13:95:40:d3:1b:1f:aa:6c:79:0f:46:
         77:cb:1f:87:6a:72:20:9d:d9:30:02:50:d7:6a:42:01:99:dd:
         58:f3:01:1e:4c:7f:ea:51:29:18:24:3f:ba:a4:e4:5e:d7:57:
         1a:d4:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:13:43 2024 by rpki-client on console-ams.rpki-client.org