Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          Aewb5T1xQBBu72bSqlzgD2pE+8+H3bdpzokZ2V7b9Sc=
Subject key identifier:   BC:A5:52:B1:A1:B9:5D:F9:E0:13:EB:9D:89:FD:B5:5E:CE:88:0F:7C
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       019356F694D7924AC993CCB6C10964597BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          1098
Signing time:             Sat 23 Nov 2024 03:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:20 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: j54+y2xkX0oLBaBjFadfA0Mv//OHs2eROZhcuuk2zsw=)
                          2: Rzr4ZskSOZBD1VYHgEulNUKYkqw.roa (hash: D9kFslPZhEeCf8rvBLe3Z9ATJx9zucUl+oDTHk03w+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:94:d7:92:4a:c9:93:cc:b6:c1:09:64:59:7b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: Nov 23 03:00:20 2024 GMT
            Not After : Nov 24 03:00:20 2024 GMT
        Subject: CN=bca552b1a1b95df9e013eb9d89fdb55ece880f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:2f:d9:9c:ef:1d:c0:a7:4e:8d:ff:57:17:
                    ff:b4:88:a2:86:f2:a1:2d:a3:bb:55:3d:7f:32:be:
                    3b:0e:ec:4e:f0:29:9e:c0:3e:5c:91:3a:3d:5b:c3:
                    c3:dd:99:5c:35:c8:17:39:5b:52:6e:73:ec:fb:58:
                    4c:c6:6f:40:76:02:7f:13:1c:f4:ee:69:76:50:fc:
                    9d:af:ba:dd:a5:5b:fa:8e:d8:bb:21:10:e8:38:9f:
                    b9:7c:e9:6a:54:1f:41:d2:25:6f:17:6b:a3:e2:93:
                    f6:f3:63:16:e7:a3:40:70:3f:e3:e1:53:51:aa:50:
                    68:ac:18:cb:ee:44:97:29:d0:22:31:2d:35:c5:74:
                    01:3a:03:76:5a:72:44:fc:48:f6:d9:a6:54:d3:70:
                    1b:6a:74:e5:2b:c4:84:e1:aa:ea:d6:d1:56:d3:c2:
                    21:e0:b0:46:d6:ed:ea:fa:d0:aa:0d:c8:db:0f:ab:
                    52:4d:12:79:da:ee:bb:a2:79:9b:71:ed:80:2f:93:
                    29:ea:84:b7:41:c0:03:a9:f8:a2:05:4d:08:9a:a7:
                    7d:27:ad:0b:14:d7:34:47:29:9c:ff:66:ca:8c:02:
                    d7:2d:b0:f5:c2:b3:6d:d3:8c:5f:63:d7:d6:7d:a9:
                    56:b5:60:57:9c:62:ec:1c:ff:6c:7e:31:07:03:27:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:52:B1:A1:B9:5D:F9:E0:13:EB:9D:89:FD:B5:5E:CE:88:0F:7C
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:41:9c:a7:0f:0d:78:39:cd:83:ba:5d:e7:14:5a:3d:28:45:
         66:7e:99:51:4e:33:3c:47:48:e3:33:9f:15:51:b9:fc:27:6a:
         0b:fd:34:4c:ac:0b:de:aa:67:dd:c3:30:45:76:f2:4a:72:ed:
         87:85:ea:64:11:c9:53:bf:e1:ff:da:da:ac:f5:39:cd:5d:09:
         be:18:a9:ee:4a:75:fe:8f:82:65:0d:2b:9e:31:6a:8b:71:1d:
         8d:7d:18:e6:ae:a1:15:54:24:fb:5b:9e:9e:26:02:ae:b4:82:
         ad:da:3a:2e:a2:be:8b:ca:b6:8d:5e:d2:92:01:c3:49:31:e2:
         76:84:32:3b:2a:5a:1f:89:9b:58:3e:ef:45:34:43:85:66:4c:
         c8:40:65:15:82:57:bd:d2:fc:23:b1:2d:eb:a6:c0:70:31:31:
         f5:9d:f0:ba:cb:3a:59:c3:50:88:69:28:95:59:fa:8a:26:98:
         78:b7:6e:71:37:5f:9b:32:55:a4:23:52:67:aa:85:bd:2a:fc:
         89:36:60:11:b2:8d:af:54:b5:05:58:23:5e:41:f9:24:e7:4f:
         a0:b5:99:ed:66:3a:62:f6:09:fe:84:db:a3:38:5b:0b:7e:19:
         8b:6a:71:8d:11:5c:f4:08:bf:21:4e:4b:7d:a8:d1:0a:c7:6f:
         bf:33:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:40 2024 by rpki-client on console-ams.rpki-client.org