Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
File:                     NZXHvH5fzXae1uUxEfPF5IkfnaE.mft (raw, json)
Hash identifier:          FlR4PqaQ0fHtZ4PdjBQJU4P3z4FoQmX9rfw+JH+E/84=
Subject key identifier:   58:A1:18:6B:12:77:1E:B5:EA:3A:73:14:CB:BA:B6:D4:E9:F4:C9:14
Authority key identifier: 35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
Certificate issuer:       /CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Certificate serial:       018F8748F31DC46F98D10C76E72FCF507581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
Manifest number:          0CBC
Signing time:             Fri 17 May 2024 16:00:55 +0000
Manifest this update:     Fri 17 May 2024 16:00:55 +0000
Manifest next update:     Sat 18 May 2024 16:00:55 +0000
Files and hashes:         1: 5ozpL5w8_gRCY-B3fG0KOcdTeNY.roa (hash: HbDKKgAteCGQaTBgu4bbxW34llukleqLb8U6qsEp8ck=)
                          2: NZXHvH5fzXae1uUxEfPF5IkfnaE.crl (hash: 6KX6mTZdSBZwQ5pxYgeShVDR2Lbsbbqg6DQDDBJ4eWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f3:1d:c4:6f:98:d1:0c:76:e7:2f:cf:50:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
        Validity
            Not Before: May 17 16:00:55 2024 GMT
            Not After : May 18 16:00:55 2024 GMT
        Subject: CN=58a1186b12771eb5ea3a7314cbbab6d4e9f4c914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:22:54:ce:e8:33:73:be:6f:be:1f:91:d9:
                    8b:5a:17:04:3e:fe:b0:13:f9:12:7c:74:85:d5:7f:
                    52:33:1a:42:c2:6a:8a:bb:a3:b3:88:96:12:76:58:
                    9f:15:36:1b:42:5c:cc:6d:2e:c2:fb:4a:f3:e4:1b:
                    b1:9c:19:0c:c8:bd:83:c0:49:1a:fa:00:37:7a:12:
                    6b:39:a1:98:77:48:c3:da:e6:2f:5c:b4:bd:0a:4e:
                    cc:dd:86:b6:f4:04:32:d0:9c:f3:f5:d4:ed:31:b9:
                    c7:28:c0:49:d6:60:d5:4c:f3:1e:14:2f:de:8a:04:
                    eb:ce:06:65:df:22:14:f8:a7:02:91:37:1e:83:9d:
                    cb:fe:83:b0:76:42:d2:29:f9:82:40:50:85:f5:a6:
                    19:83:21:5b:7d:94:99:2c:b2:21:02:af:21:5d:c1:
                    d6:bf:dd:ac:80:2d:98:b8:50:36:df:68:75:99:4d:
                    c0:cb:40:60:79:99:1f:88:d7:4c:0d:d9:c5:f0:ce:
                    a0:ce:c0:10:0d:25:0f:38:87:35:91:64:c2:20:7c:
                    5c:1d:27:88:18:d9:95:e3:de:a9:65:5a:2e:62:04:
                    9f:7e:d9:65:1b:24:54:5b:23:08:5c:09:de:ce:6a:
                    54:00:9d:42:cd:0b:66:ce:08:f5:b8:97:90:68:14:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:18:6B:12:77:1E:B5:EA:3A:73:14:CB:BA:B6:D4:E9:F4:C9:14
            X509v3 Authority Key Identifier:
                keyid:35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:8d:eb:c9:88:04:80:23:68:30:08:99:7a:4d:1d:b6:ab:
         2a:32:5f:08:f3:69:f6:9b:43:3f:ba:42:93:84:87:76:d1:82:
         79:f5:6e:c3:03:a8:99:81:ed:92:25:53:b3:2b:5a:e2:b0:98:
         93:ae:8f:1c:41:70:cc:c3:6f:d6:4d:60:15:26:31:b3:b3:07:
         fb:45:92:4e:0b:9e:2c:60:18:7a:61:c4:6d:99:a3:4f:49:6a:
         ae:be:99:6a:cd:ab:0b:0f:62:29:0d:95:d6:39:32:31:a3:f6:
         c4:41:c9:1c:61:67:b4:51:dd:8a:2f:ee:62:8e:b2:9e:cc:83:
         f6:bb:12:73:4c:87:3e:21:e7:5e:81:0f:55:8d:eb:93:ee:27:
         4d:2c:67:0e:6d:be:89:66:d0:48:03:d8:93:a7:f1:5d:40:09:
         6e:27:29:80:68:7c:f7:23:e0:c4:ba:98:b7:4f:5b:d1:48:85:
         a9:89:66:d5:f6:cb:e0:27:81:58:48:bb:b4:9f:b9:43:9f:68:
         e0:0a:de:23:39:6f:2d:df:7f:28:b0:96:6f:f5:d9:6c:a2:64:
         44:06:ed:12:30:92:d7:81:a4:2d:2d:54:7c:0a:64:94:ee:16:
         b4:6a:33:cc:30:35:af:21:4e:a5:18:fb:1e:0a:ac:8a:c5:47:
         67:aa:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:46 2024 by rpki-client on console-ams.rpki-client.org