Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
File:                     NXbf2byYxhO4QyfTQGIHWsxWJy8.mft (raw, json)
Hash identifier:          ljQjYyFCcBQE+WGrMzXIKBpWBadSr2eYccDZE9NWyB4=
Subject key identifier:   15:94:DF:B3:75:59:9A:CE:52:1E:80:EE:EF:04:D4:5B:2C:65:3F:74
Authority key identifier: 35:76:DF:D9:BC:98:C6:13:B8:43:27:D3:40:62:07:5A:CC:56:27:2F
Certificate issuer:       /CN=3576dfd9bc98c613b84327d34062075acc56272f
Certificate serial:       018F874A073A32CFC08851342E3FD01105AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NXbf2byYxhO4QyfTQGIHWsxWJy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
Manifest number:          0A9E
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: NN74X72IwSUNR3yQFSH0hwYDSgc.roa (hash: SvCeizUp0Mkqnbsk2qjsnMi7MhnT60HuOJZnpKjboCU=)
                          2: NXbf2byYxhO4QyfTQGIHWsxWJy8.crl (hash: tee/vZ5ngioxvfIUQsUVpaz271PJhWnTWtGLvT8at7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NXbf2byYxhO4QyfTQGIHWsxWJy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:07:3a:32:cf:c0:88:51:34:2e:3f:d0:11:05:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3576dfd9bc98c613b84327d34062075acc56272f
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=1594dfb375599ace521e80eeef04d45b2c653f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:ce:10:7d:f1:62:fa:e3:3c:54:74:30:c5:
                    fa:9d:da:11:53:26:b3:c4:0d:47:38:18:17:f2:d5:
                    c2:54:cf:5c:e2:5d:e0:e6:17:4f:bb:6e:89:ab:8a:
                    dd:43:cb:16:ec:e5:87:01:ae:4f:e6:b1:44:df:45:
                    dc:19:79:3c:c0:64:e7:ac:61:86:7d:fb:2a:75:49:
                    55:8d:9d:bf:92:6c:3c:dd:59:78:ad:d4:42:ab:b9:
                    f2:7a:66:29:49:8b:06:40:64:66:29:4a:2b:31:7a:
                    36:10:af:20:7f:9b:11:b0:7f:19:e2:43:73:bb:d7:
                    81:98:79:1e:c7:97:2d:cf:5d:5e:a5:a7:f8:a0:dd:
                    ef:f6:59:34:2f:12:a1:98:db:1a:3d:16:ab:41:eb:
                    bf:d2:fe:17:ee:3c:fc:85:56:34:31:f0:14:11:a2:
                    5d:db:77:f3:4d:4b:85:98:b8:05:b0:4e:9f:45:27:
                    dd:a4:6b:5b:e8:26:0c:75:cc:0b:f5:51:9b:31:63:
                    c9:3c:16:bf:00:ab:92:f8:8c:ce:f5:c7:45:49:35:
                    1c:e3:d0:7d:3f:16:35:95:e5:50:f7:ba:1a:aa:9a:
                    71:db:23:dd:09:be:fd:b1:77:24:1e:03:df:e1:79:
                    17:d3:60:2e:0c:8d:2f:16:99:86:c3:60:fb:bd:50:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:94:DF:B3:75:59:9A:CE:52:1E:80:EE:EF:04:D4:5B:2C:65:3F:74
            X509v3 Authority Key Identifier:
                keyid:35:76:DF:D9:BC:98:C6:13:B8:43:27:D3:40:62:07:5A:CC:56:27:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXbf2byYxhO4QyfTQGIHWsxWJy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:e3:97:41:df:20:d9:6a:d6:8d:61:a7:51:44:3c:de:97:
         22:45:5c:6d:a8:1c:0b:6f:85:aa:28:20:c0:f1:fb:fa:e3:91:
         34:33:53:07:61:12:b1:92:25:c2:a8:d1:9e:9a:ac:9d:09:28:
         80:9f:cf:17:0a:6f:68:8a:01:f5:e3:d2:be:33:ce:c6:87:e4:
         3f:e7:31:1c:da:05:a5:01:a9:e5:46:43:c7:c2:a5:4b:3c:10:
         36:f9:2e:59:6f:72:b9:7a:b0:c7:c5:9d:cd:32:b7:59:1d:b3:
         22:17:09:ef:26:5d:5a:86:9c:6e:f6:b5:34:9f:54:32:5b:d9:
         45:d6:20:46:b2:06:a6:c0:91:87:bf:a5:13:77:3e:37:2b:55:
         e1:4e:a2:a3:55:5d:fc:91:3e:92:05:f1:f9:da:68:a2:40:83:
         d6:51:76:c2:7b:ec:be:c9:55:db:b4:39:f7:ce:5b:7a:28:64:
         db:e4:8a:89:78:f5:67:38:3e:6f:b9:e8:3e:cc:fc:a6:03:6a:
         7a:0d:11:b3:57:db:4e:0b:f1:69:4f:7a:1f:52:df:15:93:c9:
         da:3e:61:fd:de:af:26:11:e1:ab:c9:b4:2d:a2:43:2a:16:b0:
         0f:77:30:f0:45:1d:a2:18:22:ef:89:e1:de:4b:0e:f5:98:e0:
         d9:ec:ef:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSgc6Ms/AiFE0Lj/QEQWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzZkZmQ5YmM5OGM2MTNiODQzMjdkMzQwNjIwNzVhY2M1
NjI3MmYwHhcNMjQwNTE3MTYwMjA2WhcNMjQwNTE4MTYwMjA2WjAzMTEwLwYDVQQD
EygxNTk0ZGZiMzc1NTk5YWNlNTIxZTgwZWVlZjA0ZDQ1YjJjNjUzZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowXOEH3xYvrjPFR0MMX6ndoRUyaz
xA1HOBgX8tXCVM9c4l3g5hdPu26Jq4rdQ8sW7OWHAa5P5rFE30XcGXk8wGTnrGGG
ffsqdUlVjZ2/kmw83Vl4rdRCq7nyemYpSYsGQGRmKUorMXo2EK8gf5sRsH8Z4kNz
u9eBmHkex5ctz11epaf4oN3v9lk0LxKhmNsaPRarQeu/0v4X7jz8hVY0MfAUEaJd
23fzTUuFmLgFsE6fRSfdpGtb6CYMdcwL9VGbMWPJPBa/AKuS+IzO9cdFSTUc49B9
PxY1leVQ97oaqppx2yPdCb79sXckHgPf4XkX02AuDI0vFpmGw2D7vVA+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWU37N1WZrOUh6A7u8E1FssZT90MB8GA1UdIwQY
MBaAFDV239m8mMYTuEMn00BiB1rMVicvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhiZjJieVl4aE80UXlmVFFHSUhXc3hXSnk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zMTFmZTUtMzg4NS00YzNmLThjYTAt
OWJjZjZjYWRhYWQ2LzEvTlhiZjJieVl4aE80UXlmVFFHSUhXc3hXSnk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zMTFmZTUtMzg4NS00YzNmLThjYTAtOWJjZjZjYWRhYWQ2
LzEvTlhiZjJieVl4aE80UXlmVFFHSUhXc3hXSnk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPjjl0Hf
INlq1o1hp1FEPN6XIkVcbagcC2+FqiggwPH7+uORNDNTB2ESsZIlwqjRnpqsnQko
gJ/PFwpvaIoB9ePSvjPOxofkP+cxHNoFpQGp5UZDx8KlSzwQNvkuWW9yuXqwx8Wd
zTK3WR2zIhcJ7yZdWoacbva1NJ9UMlvZRdYgRrIGpsCRh7+lE3c+NytV4U6io1Vd
/JE+kgXx+dpookCD1lF2wnvsvslV27Q5985beihk2+SKiXj1Zzg+b7noPsz8pgNq
eg0Rs1fbTgvxaU96H1LfFZPJ2j5h/d6vJhHhq8m0LaJDKhawD3cw8EUdohgi74nh
3ksO9Zjg2ezvFw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:26 2024 by rpki-client on console-ams.rpki-client.org