Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File:                     NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier:          rZ23PK/fnCWm991HF7jtxDfPAGWFt6skHOLgMPD89KQ=
Subject key identifier:   61:66:3E:69:65:DB:28:BC:2C:D5:B5:BF:77:3C:1B:62:1D:00:AA:B0
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer:       /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial:       01935764E07EF6431A4F5D32858FF89C9D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 05:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:49 +0000
Files and hashes:         1: 2QC-7R-TAnEHkaPbgnYjG2kzu68.roa (hash: tJ/OlgoOOfyHLsV27wptOkItBLZhUc1xBWukbz+/gvE=)
                          2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: Hxdg3Shc3iLw60QwWGBdLEMTVcKq4ZfmauzEgzfmdB4=)
                          3: sRfKXdv3nPsUjRMXg9Ab2ANqDv0.roa (hash: nCccQSHX5icIb1zXqz4uRKXNg2gbGbqTmUojpuGOrec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:e0:7e:f6:43:1a:4f:5d:32:85:8f:f8:9c:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
        Validity
            Not Before: Nov 23 05:00:49 2024 GMT
            Not After : Nov 24 05:00:49 2024 GMT
        Subject: CN=61663e6965db28bc2cd5b5bf773c1b621d00aab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:ca:8b:2e:92:57:cb:08:77:d9:d8:31:13:
                    19:85:07:56:87:44:92:e6:20:7b:8c:23:1f:f6:ef:
                    1a:00:41:67:3d:b7:1b:83:07:0f:2b:4b:e3:6d:5c:
                    7d:05:6b:7e:e0:9a:53:ea:b2:77:5a:8d:d4:41:88:
                    24:ac:79:50:7b:6c:cb:98:c9:e6:0e:30:d7:7b:ae:
                    96:d1:ed:25:56:8d:b7:39:9b:a4:dc:93:14:0f:5d:
                    5c:94:ca:1f:36:95:15:d7:12:00:c2:22:81:ff:8b:
                    50:a8:fd:28:87:2c:d3:a9:7d:ed:f1:dd:f1:49:7d:
                    da:42:de:6d:79:d1:9c:f3:84:ff:a4:8d:a0:fd:5c:
                    33:4e:c4:2a:78:50:cc:3e:34:1e:d6:ae:e7:bc:f1:
                    86:1b:f3:e3:10:a8:f1:f0:ca:eb:6f:50:f5:ce:99:
                    25:1b:f3:64:6d:f8:6d:a2:3f:cb:e9:45:ed:9e:e0:
                    56:8f:19:0d:41:8c:fb:44:16:30:51:22:95:77:4b:
                    3a:2e:9e:00:70:42:b7:04:c0:03:42:76:1a:69:84:
                    4a:60:00:3e:49:0d:13:e0:cd:b9:b6:e8:65:f9:10:
                    18:59:93:df:40:65:8c:c0:96:1c:ab:cd:87:7f:23:
                    53:22:05:02:82:45:27:2d:a3:b4:e3:4c:16:87:1a:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:66:3E:69:65:DB:28:BC:2C:D5:B5:BF:77:3C:1B:62:1D:00:AA:B0
            X509v3 Authority Key Identifier:
                keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:af:bd:ec:cd:14:b8:cb:a2:4c:f7:c0:29:84:91:73:1a:
         d9:f6:31:73:96:41:77:46:48:1f:f4:c1:aa:b9:8c:3d:ba:e2:
         1c:6f:c8:4c:8a:be:6d:f4:13:24:ec:7d:61:f7:5f:b6:03:b7:
         46:5c:a2:11:ba:0e:1f:32:35:e5:c8:27:b9:b7:ac:47:45:9b:
         d1:db:63:67:8d:ff:9d:e0:e9:24:9c:55:49:cf:47:58:76:70:
         ec:23:78:2a:99:c0:0d:47:ea:2a:2c:f0:87:ca:46:c7:9e:a0:
         ad:75:b6:c0:74:18:56:1b:5d:ac:9a:7d:ad:c1:44:2d:0a:02:
         b1:61:8b:6b:7c:2c:8c:0d:07:28:43:c0:12:d5:ab:91:0e:73:
         2f:4a:48:9f:ef:f2:85:da:ea:85:ea:78:bb:ce:e4:bc:ce:2f:
         0a:49:5a:1e:ee:9b:08:d7:f9:af:ec:af:2c:b6:41:50:58:bf:
         25:00:0e:1b:3c:a1:1d:cc:21:57:61:1d:95:5b:9d:24:fe:5c:
         05:e3:d6:d7:63:1a:c8:46:c8:d6:be:60:ef:b7:f1:0f:ab:f0:
         56:db:7c:28:46:b3:2d:e4:37:72:9c:3e:d3:5e:3d:6b:2e:bd:
         1d:c6:05:c4:a2:ef:3d:bb:dd:7b:26:15:5d:97:94:fb:95:e8:
         e8:e4:47:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZOB+9kMaT10yhY/4nJ0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjEwMGUxZjZmM2ZmZTZlMzVlOTg3ZTBkMDE5NWI3OTkz
YThkMzMwHhcNMjQxMTIzMDUwMDQ5WhcNMjQxMTI0MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg2MTY2M2U2OTY1ZGIyOGJjMmNkNWI1YmY3NzNjMWI2MjFkMDBhYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIXKiy6SV8sId9nYMRMZhQdWh0SS
5iB7jCMf9u8aAEFnPbcbgwcPK0vjbVx9BWt+4JpT6rJ3Wo3UQYgkrHlQe2zLmMnm
DjDXe66W0e0lVo23OZuk3JMUD11clMofNpUV1xIAwiKB/4tQqP0ohyzTqX3t8d3x
SX3aQt5tedGc84T/pI2g/VwzTsQqeFDMPjQe1q7nvPGGG/PjEKjx8Mrrb1D1zpkl
G/Nkbfhtoj/L6UXtnuBWjxkNQYz7RBYwUSKVd0s6Lp4AcEK3BMADQnYaaYRKYAA+
SQ0T4M25tuhl+RAYWZPfQGWMwJYcq82HfyNTIgUCgkUnLaO040wWhxrNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFmPmll2yi8LNW1v3c8G2IdAKqwMB8GA1UdIwQY
MBaAFDaxAOH28//m416Yfg0BlbeZOo0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQt
ZTIyYzZlZDc4NDg1LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQtZTIyYzZlZDc4NDg1
LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8GvvezN
FLjLokz3wCmEkXMa2fYxc5ZBd0ZIH/TBqrmMPbriHG/ITIq+bfQTJOx9YfdftgO3
RlyiEboOHzI15cgnubesR0Wb0dtjZ43/neDpJJxVSc9HWHZw7CN4KpnADUfqKizw
h8pGx56grXW2wHQYVhtdrJp9rcFELQoCsWGLa3wsjA0HKEPAEtWrkQ5zL0pIn+/y
hdrqhep4u87kvM4vCklaHu6bCNf5r+yvLLZBUFi/JQAOGzyhHcwhV2EdlVudJP5c
BePW12MayEbI1r5g77fxD6vwVtt8KEazLeQ3cpw+0149ay69HcYFxKLvPbvdeyYV
XZeU+5Xo6ORH/Q==
-----END CERTIFICATE-----