Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File:                     nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier:          rBMv7uOg9ixhX3cfTxgB8myAUinAF7kQ22NrmcSU9BQ=
Subject key identifier:   E3:02:C0:B2:C4:FF:B8:67:E5:E8:DE:DD:60:50:9A:6A:2F:3A:D2:33
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer:       /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial:       01935689C0FDD52170C0035AC416F2B4FFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number:          104F
Signing time:             Sat 23 Nov 2024 01:01:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:28 +0000
Files and hashes:         1: 54KK4aZZz4FI6mWSAjSjd1MRiPA.roa (hash: N53RX9q3oKYPM6AEFYUQ7vsBY/k1sVwgiPFn1643sfg=)
                          2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: 8M/+UUgzq9JjJ6qBjk9pu0FedJ+bV9H5FBYfBRQFNxQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c0:fd:d5:21:70:c0:03:5a:c4:16:f2:b4:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
        Validity
            Not Before: Nov 23 01:01:28 2024 GMT
            Not After : Nov 24 01:01:28 2024 GMT
        Subject: CN=e302c0b2c4ffb867e5e8dedd60509a6a2f3ad233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:37:f2:14:46:c4:95:3c:c9:3a:d5:1c:8b:
                    d6:a5:b5:7d:92:f7:08:7c:c8:01:4c:f3:39:42:ca:
                    2e:86:bb:5e:2e:e0:5a:19:3d:e9:88:ac:4d:0f:7d:
                    ef:ef:73:d0:12:2a:58:f6:41:04:ae:68:19:3e:ab:
                    fb:7e:4a:88:ea:cb:8c:d6:e7:d1:d8:37:d4:1d:dd:
                    2f:45:10:6f:62:2b:19:36:05:f5:4c:c4:6c:d5:05:
                    ba:e8:a5:b7:83:d5:11:cc:36:e5:04:c0:f6:18:b9:
                    4f:b7:6a:18:2b:a5:99:8a:13:66:d8:6e:f6:b8:54:
                    85:6b:73:e2:4b:e2:d3:2a:c8:60:0e:6b:e1:1a:aa:
                    ab:26:46:57:0b:2b:10:fa:fa:6a:60:fa:20:9a:42:
                    64:69:de:62:5e:16:05:c6:09:5c:07:e3:d8:f8:cd:
                    b6:8d:80:60:e0:39:31:4e:7a:51:93:24:cf:10:d1:
                    de:da:49:0b:95:5c:3c:08:00:bd:cc:e8:99:41:fc:
                    d6:30:77:c1:83:87:c1:2e:e5:83:7a:0e:ec:83:b4:
                    53:7f:f8:2c:ec:3c:18:c3:0a:f0:74:a7:8c:48:d8:
                    27:3e:c2:22:f3:60:8f:68:c8:9d:54:1c:13:2f:f6:
                    01:2a:7a:8c:26:07:f4:81:97:08:58:b3:74:78:0c:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:C0:B2:C4:FF:B8:67:E5:E8:DE:DD:60:50:9A:6A:2F:3A:D2:33
            X509v3 Authority Key Identifier:
                keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:51:40:b4:0f:7d:19:6b:70:79:e1:e7:a8:46:30:dd:45:e3:
         df:c0:fb:28:93:3f:63:9c:f3:7d:e8:45:aa:bf:c7:14:b0:33:
         95:4e:33:f9:e4:14:12:6f:44:7d:13:3b:69:a8:34:c2:5e:75:
         82:32:7b:35:fc:ce:8f:9e:a9:19:3e:6a:cb:c4:fd:1f:52:03:
         9d:9a:c2:0d:d4:e6:7f:c8:0c:6b:17:0d:45:91:35:e0:96:75:
         46:62:a5:5c:b9:0d:4a:4c:03:ed:c1:19:aa:c9:f9:a4:46:95:
         3c:26:86:71:9b:39:d4:72:4a:58:14:5d:38:8a:62:be:b7:74:
         9d:1f:f3:4b:ac:1a:70:b7:b1:20:6b:88:24:86:b6:0b:fb:39:
         05:00:b9:d9:1d:8a:1e:ef:0b:ca:72:52:cb:5f:f2:ec:0a:5e:
         58:83:32:10:55:fa:52:5b:f8:43:d6:14:46:cc:89:b5:8c:81:
         ed:e1:cb:46:cc:e9:31:75:07:ef:fb:31:da:0e:9b:51:0c:f2:
         56:6c:f8:49:15:5b:7a:62:e9:e6:1e:19:80:90:25:8b:b6:ff:
         ce:9e:10:6f:ce:30:be:b3:cf:88:24:8a:c0:a6:c5:49:4b:4e:
         93:3d:58:7b:06:09:92:ff:c2:cd:f1:23:38:0e:47:f2:4a:fc:
         28:2f:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:26 2024 by rpki-client on console-fra.rpki-client.org