Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File:                     NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier:          QaU8W0zw/plrXobpv6Ip1HJiOcYrC8QmIDXxq3xccuo=
Subject key identifier:   03:52:A3:0B:63:91:71:3B:DF:42:37:6C:3F:87:57:88:28:EF:FA:A9
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer:       /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial:       0193628D83B48D345A198482EFE13E449A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number:          137E
Signing time:             Mon 25 Nov 2024 09:01:01 +0000
Manifest this update:     Mon 25 Nov 2024 09:01:01 +0000
Manifest next update:     Tue 26 Nov 2024 09:01:01 +0000
Files and hashes:         1: 17_anoaX0Szv2B8u3aufgOWEkIk.roa (hash: UBfQJExyezrhkwr7nmGaRvYXDhA0AzuFZ5/3NeyOm7c=)
                          2: 2aDHEjOb6GEyE3bNG85KqxbQ8jY.roa (hash: vn2gcgZTwBagseQZ1wHGWP5RP56bkWT4DAFRko5y+i0=)
                          3: 97BAPsew3_1liq1CGxhxofD57Bs.roa (hash: dBTykiavOfHvrnPNMfAg9dP36M+HyNop9EVthW3Ez5I=)
                          4: GqchX1BXmcbND4X870da7zE92R4.roa (hash: aMBXVLFJDvbxFGWSFm6wAQ/Y2qAw1kxRNoQKzYRiUCY=)
                          5: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: v7ZUt3UC+uURv/cPKvjlaTXWoVZfoj4F/e9nppwbFjA=)
                          6: guPJoU3okhYmo4uQ1yquKVFMo3Q.roa (hash: mjuscVovVhksdu3bJpsx5gtCo6CW9QziQvY3zFbtq8g=)
                          7: o9jXhmqLFbD4kWiozGrH64SvXgI.roa (hash: PmWue0Wl3wPApgzPj5uUwenpiBeCLb6UhrfWvdnKeu8=)
                          8: rjbzZJF3uvqe93de_mKvF5HzrlY.roa (hash: YWRtU+KHLJl2voSK8O8QWl/rDGwId7pM04MtS8CI6Xo=)
                          9: yp4Aaee4CkXQq6i1ISJ9NOw-YqU.roa (hash: CvZygV9izRAniDR5eTdKs0kVM2mtX3Q1jfeBcO2bQSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:8d:83:b4:8d:34:5a:19:84:82:ef:e1:3e:44:9a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
        Validity
            Not Before: Nov 25 09:01:01 2024 GMT
            Not After : Nov 26 09:01:01 2024 GMT
        Subject: CN=0352a30b6391713bdf42376c3f87578828effaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:c6:e4:a4:9f:1e:61:02:02:2b:7d:34:33:
                    09:a9:31:36:67:01:c9:91:82:40:de:24:ff:d8:0b:
                    7c:a8:ee:08:14:97:fa:02:81:1a:d6:36:5e:91:a8:
                    50:9c:a9:75:f5:0f:c2:a9:0b:ce:7e:e6:33:66:ca:
                    5a:3b:f0:b8:c4:60:90:bc:b3:65:9c:69:8f:6b:91:
                    8c:49:a6:07:d3:7f:8d:1e:ac:25:3c:9e:e5:f2:d8:
                    35:e0:25:00:63:aa:b1:f9:3b:4e:cc:6f:8d:68:a6:
                    0b:c3:74:9d:f2:73:50:bd:6b:71:81:7d:bc:16:91:
                    3a:25:32:0f:b6:46:f0:55:e0:9c:9f:43:40:55:f3:
                    e1:e6:a4:c5:35:3c:1b:cd:a1:6a:3d:43:32:32:f4:
                    6f:d1:46:6c:92:55:80:d6:d8:29:c4:26:7d:5b:39:
                    8f:57:a5:c5:f0:65:e1:8b:35:ea:6c:04:f8:7a:a4:
                    74:8c:db:dd:99:51:9e:be:62:98:6a:1f:52:bc:20:
                    f3:b1:f7:2a:d5:56:87:63:6c:62:9e:e3:c1:00:8f:
                    a0:8c:b8:f4:0a:ed:68:9a:5c:9a:52:75:1a:ad:6a:
                    06:ca:53:f8:93:bb:90:6e:51:2a:be:30:24:65:68:
                    2f:35:4c:3f:7b:4d:7c:b5:34:e7:c3:3d:b2:af:7f:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:A3:0B:63:91:71:3B:DF:42:37:6C:3F:87:57:88:28:EF:FA:A9
            X509v3 Authority Key Identifier:
                keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:45:34:75:55:46:87:2d:87:fb:f9:5b:ee:89:1a:d8:bb:14:
         73:aa:a8:30:4e:9e:cc:3b:b5:4f:58:8c:78:14:21:2e:3d:15:
         c1:2b:f0:22:0f:e5:08:a8:0e:ee:02:13:01:45:0b:5c:a4:ce:
         e8:1d:5e:28:94:a1:3c:66:77:29:ae:8c:d1:43:a0:f2:22:2d:
         c7:51:b0:2e:20:6a:e6:e3:a8:11:f2:cf:e7:23:46:23:76:9a:
         34:8b:dc:b0:d2:5b:31:75:a3:de:54:a7:a1:89:66:88:14:13:
         6d:48:2d:01:06:ca:31:92:7d:a0:28:2f:8d:fc:3b:32:2d:ed:
         eb:7c:a3:dd:57:09:cf:a6:55:df:dd:90:32:b5:ff:5c:79:88:
         2d:04:dc:b9:03:07:9b:c1:a0:81:fd:3e:1d:30:5a:b4:d9:e3:
         bb:d7:52:9a:d0:5c:c3:2e:b0:92:e0:fa:0d:1d:8b:07:e8:07:
         55:2f:71:84:89:fa:0b:c4:a7:fc:a0:2d:a6:0d:6d:e8:e7:cf:
         c6:ea:99:9a:b4:4a:40:02:53:26:bc:c1:5f:42:2f:50:b5:6a:
         31:1b:f9:6c:62:03:5f:dc:30:4d:c5:0d:7c:41:4a:65:71:f5:
         ef:67:cf:e3:ca:1c:0b:02:e1:d3:17:20:2d:89:73:ac:97:ec:
         fe:b3:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:54:38 2024 by rpki-client on console-fra.rpki-client.org