Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File:                     N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier:          PcWtfHH32D41PTFTlhdRomXT1BOaXheTvNc5QIHWOW8=
Subject key identifier:   9D:DE:BE:03:B0:B5:F0:B2:1A:95:8E:68:3F:EA:E4:DB:6F:5B:16:8D
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer:       /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial:       018F86A37955020E122DF5F8FBAE9C7CFB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number:          0723
Signing time:             Fri 17 May 2024 13:00:11 +0000
Manifest this update:     Fri 17 May 2024 13:00:11 +0000
Manifest next update:     Sat 18 May 2024 13:00:11 +0000
Files and hashes:         1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: Ym78P9Qh7Ou2WZY9EHu6VwtxsmM5qrAigZjJzV3pL38=)
                          2: uGq1jpQliVUqZ_2S8AaiXve9Bu4.roa (hash: s814d2KO9V5mWkDSdST9g6dCrrSAB2TwbmlsGhotE4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:79:55:02:0e:12:2d:f5:f8:fb:ae:9c:7c:fb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
        Validity
            Not Before: May 17 13:00:11 2024 GMT
            Not After : May 18 13:00:11 2024 GMT
        Subject: CN=9ddebe03b0b5f0b21a958e683feae4db6f5b168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:bf:59:30:9c:eb:59:82:7d:13:4e:23:65:
                    bd:77:4a:48:1a:85:98:fc:7b:9c:a4:f2:51:8a:53:
                    0f:59:9e:93:c6:d7:0a:2d:85:b0:16:4f:e5:09:d7:
                    d2:4b:be:26:f9:70:d5:9f:a7:4d:b7:a4:8d:9d:ed:
                    75:3f:2b:41:11:0e:75:fb:49:e3:7c:72:33:b9:c8:
                    bf:3a:4a:a8:f5:45:34:65:34:0d:c8:ca:21:3a:74:
                    75:87:87:8f:7c:c8:a7:c5:d1:67:a0:56:eb:3e:45:
                    71:9c:bd:8e:1b:cd:42:3c:75:ff:dd:a4:df:5a:9c:
                    6c:fc:3d:93:a5:25:f4:6f:bf:12:d5:bb:83:52:ba:
                    e9:6a:68:3c:73:a8:fe:cf:30:9a:35:36:3a:aa:f6:
                    84:22:e4:db:dd:53:45:d2:97:92:53:f3:de:4d:25:
                    d5:5c:96:eb:94:8a:f2:35:c9:ed:7c:f2:8a:f3:93:
                    19:7d:24:9c:f8:ef:e7:73:7a:95:23:c9:ae:6d:41:
                    a4:ec:c0:12:59:46:f5:d2:37:27:00:c3:ca:42:37:
                    0e:1c:27:32:93:ce:b7:05:82:60:4e:12:27:86:8b:
                    dd:d2:fd:98:7e:07:88:8d:87:b0:64:34:3a:3c:f2:
                    d9:fa:1d:37:32:a8:e8:86:5f:64:74:7d:85:d5:8d:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:BE:03:B0:B5:F0:B2:1A:95:8E:68:3F:EA:E4:DB:6F:5B:16:8D
            X509v3 Authority Key Identifier:
                keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:d0:62:f1:64:84:37:a7:44:ea:4d:26:41:fd:68:21:c8:
         df:22:6a:60:6c:9e:83:fb:8f:d4:ff:8a:16:0b:f7:bc:24:77:
         71:6a:ed:91:cb:92:5a:d5:8b:ca:6d:ee:db:04:ab:52:27:47:
         36:f2:87:60:c0:3e:67:da:5c:3a:a3:5e:fc:cd:69:9e:28:8b:
         c7:d0:44:2d:e2:27:8c:9c:3e:ef:de:d0:49:92:49:32:92:95:
         86:4b:f5:ff:9a:31:30:46:53:d4:41:7b:cb:3c:15:46:69:0c:
         09:50:29:49:54:c4:94:58:a9:93:54:fc:68:a7:23:6f:07:f0:
         88:34:79:b8:01:f1:45:e5:a3:f4:2d:68:d3:e2:58:63:d7:e3:
         3c:fa:97:60:0d:7e:c3:cc:bd:b5:22:8e:07:c8:5a:d4:80:af:
         e4:e3:5d:8d:91:a6:80:6f:03:6e:5b:a8:35:63:99:89:c5:80:
         07:56:17:b7:4b:fe:60:e7:e5:d0:50:d1:3a:e6:47:39:5c:02:
         22:4c:b7:08:18:70:da:a0:6f:08:6c:2a:a8:b4:18:be:6a:8a:
         20:5c:33:a4:25:79:45:97:6d:ab:99:49:e7:a7:70:47:b4:01:
         79:9c:ba:2c:b5:67:66:b8:e0:d2:66:e9:fd:99:53:31:1c:6f:
         1a:ed:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:00 2024 by rpki-client on console-fra.rpki-client.org