Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File:                     NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier:          sa6SvAmz7chg+2O1rx6QjLDC4PJ/usk1m2pqI079QN8=
Subject key identifier:   55:FD:29:FA:18:17:7F:11:FF:0A:7A:49:81:4D:D2:E2:CA:5C:24:81
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer:       /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial:       018F5B4CC2CE31191571AF8C281C88792E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number:          1168
Signing time:             Thu 09 May 2024 03:01:48 +0000
Manifest this update:     Thu 09 May 2024 03:01:48 +0000
Manifest next update:     Fri 10 May 2024 03:01:48 +0000
Files and hashes:         1: 17_anoaX0Szv2B8u3aufgOWEkIk.roa (hash: UBfQJExyezrhkwr7nmGaRvYXDhA0AzuFZ5/3NeyOm7c=)
                          2: 2aDHEjOb6GEyE3bNG85KqxbQ8jY.roa (hash: vn2gcgZTwBagseQZ1wHGWP5RP56bkWT4DAFRko5y+i0=)
                          3: 97BAPsew3_1liq1CGxhxofD57Bs.roa (hash: dBTykiavOfHvrnPNMfAg9dP36M+HyNop9EVthW3Ez5I=)
                          4: GqchX1BXmcbND4X870da7zE92R4.roa (hash: aMBXVLFJDvbxFGWSFm6wAQ/Y2qAw1kxRNoQKzYRiUCY=)
                          5: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: TNWLNMuQIXg/vcqmjhq9SUnnkqjVYkaBCMehksLaa00=)
                          6: guPJoU3okhYmo4uQ1yquKVFMo3Q.roa (hash: mjuscVovVhksdu3bJpsx5gtCo6CW9QziQvY3zFbtq8g=)
                          7: o9jXhmqLFbD4kWiozGrH64SvXgI.roa (hash: PmWue0Wl3wPApgzPj5uUwenpiBeCLb6UhrfWvdnKeu8=)
                          8: rjbzZJF3uvqe93de_mKvF5HzrlY.roa (hash: YWRtU+KHLJl2voSK8O8QWl/rDGwId7pM04MtS8CI6Xo=)
                          9: yp4Aaee4CkXQq6i1ISJ9NOw-YqU.roa (hash: CvZygV9izRAniDR5eTdKs0kVM2mtX3Q1jfeBcO2bQSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 19:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5b:4c:c2:ce:31:19:15:71:af:8c:28:1c:88:79:2e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
        Validity
            Not Before: May  9 03:01:48 2024 GMT
            Not After : May 10 03:01:48 2024 GMT
        Subject: CN=55fd29fa18177f11ff0a7a49814dd2e2ca5c2481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:27:94:8d:94:a0:3a:24:82:db:0b:ad:b5:5d:
                    2b:a9:ea:1a:c9:c0:d1:6a:75:b1:c6:72:76:27:15:
                    bb:28:ca:a2:b1:02:ef:8d:2c:dd:f8:7d:b5:76:0d:
                    57:4b:b5:ca:99:ca:f8:02:ae:c9:d4:65:17:d1:8d:
                    c1:98:43:07:a5:6d:b3:e7:36:bb:2c:83:25:5b:db:
                    c0:68:04:79:eb:eb:2c:c9:54:f0:ef:62:a9:2d:00:
                    50:a0:63:90:85:7c:16:29:64:1f:ba:c9:76:6b:d5:
                    88:d3:38:94:a7:1f:44:6b:e7:7b:33:61:24:ef:b7:
                    c9:3b:b7:d1:ac:23:58:0f:e5:a1:f5:d8:44:1f:79:
                    8f:48:d4:90:ea:bd:5a:d9:ce:06:97:39:7e:a3:2a:
                    2d:06:ad:36:9d:78:da:3f:5c:a7:92:5d:3b:39:7a:
                    f4:71:e3:b0:61:3b:73:92:5f:02:68:67:cd:48:bd:
                    65:95:ed:ec:04:56:73:3e:d4:ae:e0:b2:49:4b:dd:
                    06:b3:c5:68:93:c8:2c:d4:e4:ca:ee:d7:c4:81:1b:
                    3c:dd:0f:2a:1e:86:8a:2d:f7:3b:74:bc:62:4b:d5:
                    79:dd:cb:b6:a0:ca:00:bf:cd:7d:fd:5a:26:6c:b4:
                    08:b6:53:8b:70:18:4f:0f:73:81:78:d0:9c:11:97:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:29:FA:18:17:7F:11:FF:0A:7A:49:81:4D:D2:E2:CA:5C:24:81
            X509v3 Authority Key Identifier:
                keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:28:98:66:84:85:8b:2e:59:f9:cd:bc:7a:75:bd:93:ff:
         6c:ea:f1:8f:bd:95:c1:90:14:29:d3:d0:7d:39:3c:19:77:b4:
         f7:54:4b:9e:2c:0f:b9:dd:f4:07:f4:06:5d:0b:79:75:d7:f2:
         8f:40:ad:41:4c:bb:da:65:dd:be:fb:4e:6e:32:a6:07:66:03:
         1b:62:68:d2:ba:9c:cf:ad:4d:31:1b:e9:4b:b7:09:9f:7d:93:
         6a:9e:06:57:c1:e9:6f:bf:2d:56:b3:56:57:ef:dc:50:88:e3:
         da:34:91:de:2b:7d:53:2e:2c:8f:4a:ce:c6:cb:9f:03:f3:6b:
         a6:29:e1:17:00:d9:be:bf:25:21:e7:43:39:cd:a1:8c:17:10:
         be:70:92:98:22:a7:5a:be:94:55:0d:c5:8a:1b:48:f5:d6:10:
         85:97:d5:f2:dc:94:68:d4:f1:d9:37:fc:ab:43:34:b2:4f:5c:
         fa:25:f2:a3:cd:28:91:3b:7e:1d:f4:25:23:d1:c1:74:96:f4:
         e7:5c:9a:c3:da:72:99:59:07:f8:67:65:55:e6:b0:80:b0:82:
         ef:f1:e2:ef:3b:80:a4:9a:02:f3:5f:b9:0f:35:18:4e:15:21:
         7a:dc:8c:87:ce:5c:d7:eb:b5:37:3b:44:d8:2e:b2:f2:63:c9:
         97:23:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:41:28 2024 by rpki-client on console-ams.rpki-client.org