Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File:                     NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier:          krUU9VtH0hpHnDFIq993py5m5At+8YlR+EgHhtQh9lE=
Subject key identifier:   6C:B9:41:27:E4:D7:75:0A:E6:EE:E6:B6:6B:2C:9F:D0:B9:62:2E:65
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer:       /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial:       0193553FBB241CB926A6E16CEA311F7CA7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number:          0C31
Signing time:             Fri 22 Nov 2024 19:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 19:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 19:01:00 +0000
Files and hashes:         1: GFyH1s8RXOhkUlwmbT35RlJXSBc.roa (hash: /Ok0YmRjvn7lu7Dwubx7OdgoRkVXReS51hKg21im8gw=)
                          2: MG9tuUbeLOUJyZp1EogZ9Fb7gcc.roa (hash: 58cbm4Pb+PiU6WyIhr6liBolqw+hkLtGhjZfUEeIBss=)
                          3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: 9QIMuJapQkxI0WbR6eTnfjPmnUhqvbR8oGGfdzzvtZA=)
                          4: r0_ENj30bzNLGV3CTYHyT2Wrcf4.roa (hash: PXkDaQDRIYVSYOq6JxbXdoQv7zZphTUdu9clSZUyuqk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:bb:24:1c:b9:26:a6:e1:6c:ea:31:1f:7c:a7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
        Validity
            Not Before: Nov 22 19:01:00 2024 GMT
            Not After : Nov 23 19:01:00 2024 GMT
        Subject: CN=6cb94127e4d7750ae6eee6b66b2c9fd0b9622e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:f0:1d:5c:bf:7a:2b:2a:0d:89:df:27:70:
                    22:e6:3c:fc:c6:90:5d:9a:e2:cd:c3:00:2b:61:a2:
                    89:9b:92:f1:86:02:aa:be:a6:ff:df:99:28:ea:7f:
                    b8:a7:56:f5:be:57:8d:b9:1a:67:43:2b:45:57:fb:
                    c9:21:82:b5:f4:51:72:52:db:17:57:85:f1:9b:7a:
                    ef:c0:c8:f1:15:5a:16:c2:55:ad:9a:0e:e0:93:e6:
                    65:9d:48:f2:60:e8:49:84:b0:78:37:f9:c2:b1:f1:
                    56:72:5d:7f:b3:ba:3e:c1:04:dd:9a:95:04:bf:dd:
                    59:a3:3b:7a:86:31:57:5c:f3:3b:66:da:6d:9d:44:
                    3b:81:28:06:37:9a:f8:fe:77:b8:a5:bb:d5:6a:04:
                    d8:12:a3:55:4d:05:da:d0:9f:b9:23:ca:6f:68:e3:
                    4b:ea:e3:c5:d9:c3:63:67:aa:3d:f7:51:b3:d9:55:
                    10:b3:20:08:53:62:c5:dc:5f:8e:36:30:00:86:96:
                    8a:a5:81:3f:0a:c8:b9:e6:e5:89:4c:a7:98:f0:2a:
                    83:fc:f4:26:c7:5f:16:46:ef:68:bb:54:fc:75:5b:
                    4e:40:3e:a5:fc:56:0d:20:75:85:43:31:57:9c:59:
                    ac:96:ef:1d:ba:36:0a:a0:20:b4:3a:85:25:69:1d:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B9:41:27:E4:D7:75:0A:E6:EE:E6:B6:6B:2C:9F:D0:B9:62:2E:65
            X509v3 Authority Key Identifier:
                keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:39:9a:07:4a:79:b1:1b:9d:78:c9:84:40:e4:9f:d6:b5:
         02:dd:cf:d9:55:8c:f7:bf:6e:45:dd:d0:cb:69:90:38:d3:67:
         40:75:30:99:28:85:71:68:f2:34:4f:94:a2:a6:06:ec:2c:b7:
         72:48:c8:35:59:a4:f8:34:74:1e:26:0e:1b:3d:ac:70:b3:d8:
         62:b6:d3:39:f9:ea:48:d1:c1:e9:41:b3:ed:bd:96:85:bc:ce:
         00:c8:42:c2:7a:7e:c7:92:4b:bd:62:30:92:d8:a8:8a:16:cf:
         2b:66:54:da:81:aa:5c:d7:7b:28:ee:31:e3:e4:dd:53:76:b2:
         9d:13:bb:4f:55:ee:d5:5c:a7:8e:41:df:f7:e4:be:bc:e0:2f:
         ca:7b:3d:a2:a3:95:1c:10:89:46:eb:f5:3c:71:15:32:b8:95:
         74:40:1b:73:0c:7c:22:b2:89:bc:62:6a:32:17:bf:bd:90:fb:
         c2:ea:be:e1:a1:31:a9:76:fd:65:66:55:16:cc:52:3e:a7:2c:
         58:89:f3:aa:16:5c:b1:7b:8e:fd:de:f7:9b:ed:10:57:42:6c:
         05:91:9a:78:d9:30:b1:45:b1:be:46:a6:4e:55:b0:1a:c2:1d:
         21:d1:ea:5b:84:5f:60:c6:1f:a2:65:33:6c:68:c0:10:ca:ab:
         ac:92:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----