Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File:                     nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier:          01Pf+eJhf/8ijivrbXbINGsAvW/VEpEIsIvzw7wWpqU=
Subject key identifier:   83:46:86:B6:83:3E:CD:1A:F9:24:1A:5A:F1:77:A5:C6:29:18:05:66
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer:       /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial:       018F87ED98E96478403389848883FFF4F2D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number:          10C3
Signing time:             Fri 17 May 2024 19:00:46 +0000
Manifest this update:     Fri 17 May 2024 19:00:46 +0000
Manifest next update:     Sat 18 May 2024 19:00:46 +0000
Files and hashes:         1: 1kzbcgCnBar5pUMf8qAohvoF2H4.roa (hash: 7EjHpBM+rTFT0lK2nmGSwjwSYThS7qTFjOc7+Ci9G9M=)
                          2: S7lDiKRDO7mEOsNbvMeG9_DaFXs.roa (hash: AGs/JITjd+YenZ8VSSu6nwYtXP3pqQyzIVhGXRfI5J0=)
                          3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: 3r4kl9ae+3rESJ2A+InmDL481fHwzZ/HzxudjAsMqlI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:98:e9:64:78:40:33:89:84:88:83:ff:f4:f2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
        Validity
            Not Before: May 17 19:00:46 2024 GMT
            Not After : May 18 19:00:46 2024 GMT
        Subject: CN=834686b6833ecd1af9241a5af177a5c629180566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:57:18:58:2b:07:c2:38:53:19:ef:3d:06:
                    bb:e3:ac:e3:00:38:3f:fe:bc:0f:be:91:bd:b9:45:
                    c0:14:c5:de:86:d1:78:13:b8:73:66:6f:e0:9b:78:
                    fa:56:1c:75:06:42:30:e6:11:e0:83:b9:b3:b1:e5:
                    15:f4:a5:b4:6a:1e:4c:2a:87:53:b9:9a:d7:ac:2d:
                    8d:93:c0:93:89:c6:27:27:c7:08:f5:f0:45:bc:16:
                    3c:5b:b4:61:91:d3:d7:dd:42:63:e5:0b:14:9b:ea:
                    5d:61:48:aa:75:3c:a1:45:8b:d8:78:5b:34:42:71:
                    07:3e:83:7e:da:76:86:0c:d2:16:46:54:77:c7:a5:
                    fe:7d:89:25:85:dc:ea:1d:80:55:8e:ba:fc:88:60:
                    dc:cc:4b:d4:26:c5:cd:5c:c8:11:72:fe:db:bc:76:
                    7d:a4:bc:a2:92:a5:5f:c1:e0:80:ae:1f:91:77:9c:
                    24:09:2e:bd:f5:64:67:d3:78:83:90:c4:dd:e2:2b:
                    03:57:4c:b1:2b:e4:23:60:76:e7:a1:ac:07:5b:68:
                    ac:29:ba:b2:6a:1f:dd:f5:22:75:7c:ed:71:9f:50:
                    90:bd:a0:eb:2d:ce:db:d1:c5:10:9e:cf:b5:ae:4e:
                    ea:03:db:19:81:2e:ff:0b:3d:8d:30:e6:c2:ea:c5:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:46:86:B6:83:3E:CD:1A:F9:24:1A:5A:F1:77:A5:C6:29:18:05:66
            X509v3 Authority Key Identifier:
                keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:a6:53:c3:40:46:bc:47:76:e3:d7:62:b4:79:92:a2:9e:
         8f:57:cf:87:61:3a:b4:9a:a5:81:29:7d:21:46:03:95:44:05:
         58:3e:bc:09:d5:11:7e:88:89:11:8c:7c:16:a1:68:ba:fc:7d:
         50:75:66:e5:14:bb:06:8a:91:2f:57:22:76:0f:35:cc:f9:69:
         35:30:c2:60:59:a3:be:72:04:5e:55:83:68:d3:5f:d1:e2:57:
         0b:f1:b8:dc:86:5c:8a:57:85:32:6d:8b:8c:a9:35:48:53:af:
         4f:65:f3:c3:32:6e:bc:a4:cb:d8:8a:35:7c:85:0f:27:34:0f:
         13:a8:58:01:0c:b8:83:7c:14:47:b4:e0:3c:20:87:27:7f:6d:
         a7:74:67:67:d4:84:4a:06:ea:a8:d7:da:25:ff:b9:79:37:15:
         69:1b:ab:b3:ef:6c:37:8f:e5:32:ae:39:ef:90:ab:4c:c8:63:
         65:eb:1f:67:c7:3c:fa:9f:09:83:3a:7e:e8:a8:76:f3:23:66:
         22:e1:a4:39:49:46:ce:2e:fc:cd:f5:e6:e6:39:4f:21:07:da:
         c5:dc:d7:b9:a1:37:e6:e6:6d:76:cc:db:cc:82:65:8e:3c:50:
         ac:af:7d:d7:6f:6a:a2:c1:b7:97:13:2e:41:66:f6:24:36:98:
         b8:43:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:36:14 2024 by rpki-client on console-fra.rpki-client.org