Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File:                     nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier:          dPVN2EKpuztBeulS4aeQKhL3dyVNrchqqqDDcpxuNR4=
Subject key identifier:   07:F6:CF:EF:AF:C1:16:07:D5:14:04:55:9A:DE:C0:42:35:A6:19:CC
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer:       /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial:       018F874AD1F49227E9E3FE62AB85F862BA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number:          0742
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: jDGLLpmAcrQ99YYseq522TDpwQc.roa (hash: PZ/uT713dgeHbHtatOxca/xf6sZ8Ij6LCtTjVmiSVfI=)
                          2: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: RsAI4fFKMqjRWwZceZ0kUklxP5NyK0xLz/Hb1M1elRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d1:f4:92:27:e9:e3:fe:62:ab:85:f8:62:ba:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=07f6cfefafc11607d51404559adec04235a619cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:e5:73:5a:37:1e:c2:e9:0e:6d:78:cf:53:
                    89:38:88:a6:d9:23:70:17:9c:22:a2:9a:87:0b:97:
                    37:3e:1f:4d:95:b4:94:9b:97:ac:44:ea:fb:88:ab:
                    4c:48:37:c5:fe:0d:0a:2b:84:a8:55:1a:68:a2:c0:
                    2c:9a:0d:5e:76:e7:c8:95:8f:76:57:b8:fa:e4:d3:
                    cb:58:6b:c5:9f:78:7f:fe:14:b4:19:79:58:8d:52:
                    c1:07:69:8c:8b:db:d1:47:10:a8:9e:55:d0:3d:ed:
                    62:61:c2:08:86:b5:30:83:48:21:58:cf:c0:65:0e:
                    3a:47:09:09:96:5c:3f:c5:9c:68:00:b6:d4:46:b4:
                    88:33:73:72:c9:2f:14:5e:8e:7f:50:83:ca:b8:64:
                    1b:8f:69:5e:03:2e:a4:7d:d9:6b:aa:6b:04:45:8b:
                    0d:2a:f9:f0:a4:c1:96:78:2f:e4:20:cb:75:43:4a:
                    42:e4:de:2e:c7:47:fe:c4:f2:c9:ef:a2:05:e0:6f:
                    bc:74:77:ca:61:69:be:cf:b5:8f:0f:77:f4:36:99:
                    2a:6f:a9:a0:d9:f2:b5:d3:36:1d:63:fa:d5:aa:b0:
                    8a:48:e8:4b:17:f0:55:63:0b:46:f9:b2:ad:7a:69:
                    4f:39:2a:ca:ea:a5:b5:7a:63:f2:33:d5:4a:ee:cf:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:CF:EF:AF:C1:16:07:D5:14:04:55:9A:DE:C0:42:35:A6:19:CC
            X509v3 Authority Key Identifier:
                keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:a5:63:65:6f:ca:74:8d:f3:d1:52:21:be:f6:9d:6e:8f:
         89:c8:59:ec:e1:fe:a6:7b:39:fb:ad:d8:50:0d:fc:34:2e:3e:
         59:2c:48:8b:52:d3:2a:0c:dd:24:de:32:75:b6:d4:93:42:be:
         c2:b7:48:14:7c:10:0c:aa:e0:16:ac:98:e0:d1:75:91:f2:a2:
         20:3a:d8:ba:5d:80:f3:0b:f2:06:ca:3e:cd:db:79:b9:a1:3a:
         f0:6a:19:5b:62:79:da:57:e0:f2:20:0c:b2:71:a0:74:7b:0f:
         8e:7b:82:3c:eb:94:d6:33:2f:aa:e4:ef:7c:a9:b4:dd:08:29:
         dd:87:7f:34:3e:20:3a:24:69:f1:09:a3:12:9b:61:e9:5d:69:
         bf:9a:9e:d6:68:79:04:4a:f4:e9:e3:45:c5:00:6c:b4:64:6c:
         ca:bf:9c:ab:b3:14:be:2d:76:38:b7:ad:2f:19:be:94:07:b3:
         5b:c3:b0:c3:d3:5b:af:2c:ac:a7:97:12:7b:1a:a7:81:1f:ab:
         33:91:ca:d9:f6:23:0c:52:aa:f6:c3:83:13:84:0d:c1:ce:95:
         21:b0:b5:a1:18:68:b7:fa:57:03:eb:a0:6a:e2:33:39:bc:48:
         37:61:45:4b:bb:44:be:49:a3:10:82:f6:78:ba:94:b7:ac:5b:
         0a:f6:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:13 2024 by rpki-client on console-ams.rpki-client.org