Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File:                     N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier:          mv0MeTpBp37xSP04BSnD2weZa+2CDTJzngpFp5/6QAo=
Subject key identifier:   6C:9A:92:05:07:B3:05:16:17:0C:80:6E:F6:C6:DC:DF:D3:01:E1:F0
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer:       /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial:       018F8749DCE61A9686CB375F8B203C8845D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number:          058C
Signing time:             Fri 17 May 2024 16:01:55 +0000
Manifest this update:     Fri 17 May 2024 16:01:55 +0000
Manifest next update:     Sat 18 May 2024 16:01:55 +0000
Files and hashes:         1: Fy7cWCtKj8YOkoMfbsk_GmQ-omQ.roa (hash: 0XxmheMLs4H1o+dU+r7DMDKeGIGjTSyHgDTmVKVd4wM=)
                          2: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: c2TOL5Zq2sp0GTmhUcPjDnXFrnaz9oqWPOEve2a1woo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:dc:e6:1a:96:86:cb:37:5f:8b:20:3c:88:45:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
        Validity
            Not Before: May 17 16:01:55 2024 GMT
            Not After : May 18 16:01:55 2024 GMT
        Subject: CN=6c9a920507b30516170c806ef6c6dcdfd301e1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:01:09:d7:1e:c2:4e:9d:30:86:98:5e:f3:
                    5d:64:d5:1b:f9:ce:49:56:fb:60:a5:6a:ce:db:7a:
                    07:53:db:b1:d8:de:f4:91:eb:cf:e6:3e:2b:6b:d8:
                    40:28:a0:0c:46:92:e2:55:2b:7d:da:5c:a0:00:cf:
                    c6:52:87:ab:1e:00:15:01:b7:66:c6:30:d8:44:b0:
                    34:c3:12:4d:95:a2:e2:18:64:ad:3d:6b:d2:06:ba:
                    78:e1:77:da:a8:bc:61:74:51:e6:ff:8d:fd:20:3f:
                    b8:4c:16:af:33:0a:6f:2d:d0:fe:06:4e:4e:7a:01:
                    b7:df:6c:53:c0:06:7d:6a:ae:07:f5:3a:e7:b8:a3:
                    35:6d:78:c0:15:af:97:88:59:f2:c0:85:bd:8b:78:
                    e8:93:51:c0:16:90:4d:e1:3e:58:83:d0:5c:a5:21:
                    ad:b0:d8:9d:b1:b5:49:dd:5b:b0:14:db:2c:48:29:
                    03:dc:ac:71:16:16:ab:90:2e:30:92:07:21:7e:d9:
                    98:fd:35:54:da:94:c3:61:00:83:91:e6:70:14:03:
                    70:72:a3:28:23:3c:e8:a5:d3:a5:09:ac:c2:0f:71:
                    d7:01:14:f9:7d:45:0f:cc:7a:11:6d:6a:eb:53:f9:
                    d9:a4:59:36:de:e3:c0:62:0c:50:76:7b:ae:4b:23:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9A:92:05:07:B3:05:16:17:0C:80:6E:F6:C6:DC:DF:D3:01:E1:F0
            X509v3 Authority Key Identifier:
                keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:53:de:1e:53:fc:04:4f:9e:29:18:2c:c3:04:4f:a7:ff:d0:
         2b:9a:56:63:87:bc:57:74:27:28:45:4d:4d:1c:95:9d:8c:e7:
         8d:07:05:71:42:2f:78:b0:17:60:96:75:e5:a6:cb:14:df:77:
         29:7d:27:6a:79:5f:51:4c:7a:03:ac:5d:b0:66:42:a5:9e:0f:
         4a:9d:9a:05:25:d1:04:fd:9e:76:4a:58:f2:a5:e0:fa:7b:f6:
         f0:68:4d:16:20:7a:38:d3:ab:4f:53:e1:d9:69:66:80:a4:2b:
         92:76:ad:1e:3e:de:15:40:f3:a0:72:08:ec:72:9a:4d:04:c4:
         4b:1b:8f:df:55:ad:23:84:69:98:6a:d6:d9:44:2d:4f:4d:eb:
         6b:2b:7c:a9:50:e6:e2:95:f7:96:7a:cb:a9:d0:5b:15:3b:da:
         0d:31:1f:23:ed:54:99:29:b9:65:aa:1d:e3:3e:1d:73:88:b9:
         30:3c:0c:f9:e0:f8:93:50:ef:c6:27:61:61:9b:13:f7:5d:aa:
         03:54:c6:b1:16:d5:9f:82:52:c1:f5:aa:75:c2:55:a7:96:0a:
         cf:0d:0f:99:7a:ce:74:9e:95:58:90:b6:65:bb:fa:87:12:17:
         28:ff:81:46:3b:6d:a6:a5:ea:07:cf:4e:c1:dc:bb:2d:fc:4e:
         a0:39:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:17 2024 by rpki-client on console-ams.rpki-client.org