Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          g0l4K/TbEy6SGqlqwscvrIrEB61r3necrF8QViBYS20=
Subject key identifier:   52:7D:8A:5A:A7:34:77:9B:5D:56:3E:51:4B:6E:6B:36:AA:88:74:D6
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       018F87ED5BEC98D9FB4F46751B86B2CD4FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          1193
Signing time:             Fri 17 May 2024 19:00:30 +0000
Manifest this update:     Fri 17 May 2024 19:00:30 +0000
Manifest next update:     Sat 18 May 2024 19:00:30 +0000
Files and hashes:         1: 3n_56JWKOXWgz_XWpbx8MTM7LU0.roa (hash: n21owNVWm3o04gq4+sKgwmwvhdEqlqnex9MiZ6ygEbY=)
                          2: 9h7__af2NE9z6X6OqyB0wjicmD8.roa (hash: +XcGUzmf/SZ2Nlbjt1gLw0MVkPh5doD6/CQhGY+ZVis=)
                          3: 9qyXVuFB4kEruZP7Tzct03twJ_I.roa (hash: hIsqqE6gRN3SgnPSDtXcuN1cooM5ZwIkThIR/rS3Njs=)
                          4: CAm2zkoREjgdBIsA_W_0T788UbE.roa (hash: qW5jzPiB72169zhmuwdI3hJAz642Vbl8rFARmIgA0AQ=)
                          5: Cljh7KoccmYNLvOVHw_dl9cXyGk.roa (hash: J9ep7qkkaZ0CoYMTz0ijbWvER14h/4NeLhO2yepVLlQ=)
                          6: HCXEHioqLwtOvZ0yH2poRWsk8bQ.roa (hash: bNdM8kMJkC71aYcXEffTejhB3XGUlIXR5ztUXYidbtM=)
                          7: K_GKFulSX6Oy_EAQzLQa-3i5CJg.roa (hash: l9gFAG8lRkWg7ngTMBFdXklVQR1yNsmnq3CBshIRfbs=)
                          8: MDgRwsqSH1qDSEZYKWoZ-c6oV4c.roa (hash: dq2oJsxxjpC6qJ3CunLDgBKo0Q+6JfPWaH3jDHSL2JU=)
                          9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: lte3W1tbFgp7aeKjq2ohwPerUFYfHWji0ezwixc2rWg=)
                          10: TkONv6p4712ltbBWIOKfovJm9qc.roa (hash: u9IbHqPh7hzzpi/SnyKWyjP5fGp41eal8tnU3G4FvUY=)
                          11: UmWHDfklvkJ6gNEyIAtN3hKFhZM.roa (hash: CgAB4qiSFvuss3ySfftPDlanfZ+UnNafmz8ZfEE/gZ8=)
                          12: aV3O0hoZk3qdHJbbDnlB7fNwxGY.roa (hash: 4DkD+pB05bZZAwA0VCibOpwi5k+487wuKrvY4+LyV04=)
                          13: d-qbaMTmjmh4iD3R9hdV1XjgLNU.roa (hash: hbQD/FXZiapXvOA1P9vcBFCW6IVZTR+HRJ6Ebhj49lM=)
                          14: jkFm2Y6p0zJ8rZRgYoZV6mXGgnE.roa (hash: jc5QOZ9LFzvtFGNnEulYtdxF6ZT0jDuitm6RFc2oFg8=)
                          15: lMlXeLqw45PFwwM9axEeAQDeoRU.roa (hash: fxLR7L4WXf9QkCUmD2b0i6xOJHTscWQUGTcDyzmWXu0=)
                          16: mZScfSxL4T78-fhidGxlZmNIw6I.roa (hash: Pze/pgdSIvXn1+Fag2kb0JP6MvO/4uOv01h68+qgORY=)
                          17: pi9GDdufVhThRiMS4yjbHwvj4NY.roa (hash: ljOLzY8/nBA6QByAxhTdNvxgLLAEPrRU1pQeCwUXDdc=)
                          18: q3Drz0MaEOffYD8n_mTEACvRmZs.roa (hash: 58W+VGbx5Oy2Ij+JB67NPykOehvg0QeHJqv/yxGQS/4=)
                          19: qsyxCvo3ntBQFv_S4a1sizGHsM0.roa (hash: 02WrPMGEy5BFj1aJfAmRIwE2mBS5y9YD3iykOfhzGSs=)
                          20: vzmRLq_DlO1sObTxAP8qD4GozuY.roa (hash: rEJEzZ42GdJFXUWq9NpNUIHMqaBc1AqNT2yL17H9KRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:5b:ec:98:d9:fb:4f:46:75:1b:86:b2:cd:4f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: May 17 19:00:30 2024 GMT
            Not After : May 18 19:00:30 2024 GMT
        Subject: CN=527d8a5aa734779b5d563e514b6e6b36aa8874d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:27:27:7e:9c:8b:87:6e:1e:62:8b:06:88:
                    68:18:8a:89:8b:1d:52:ea:87:21:07:58:20:a9:1e:
                    ad:15:73:2b:37:94:dd:60:ff:ed:45:2a:c3:27:74:
                    f2:68:05:f9:73:30:51:27:e7:66:47:71:fb:3a:2d:
                    61:8c:d3:44:5d:3b:b2:6c:d0:f2:28:9b:41:8d:77:
                    f5:60:eb:a6:bd:32:00:9e:3e:24:a7:62:f1:8b:4f:
                    c8:0b:ae:98:3a:3e:d4:d8:85:4b:b8:a9:7c:ad:04:
                    d3:1f:af:d8:37:27:22:55:1c:c2:c5:94:2b:5d:65:
                    25:0c:d8:cb:c1:73:4e:f4:5c:75:c7:97:c3:d8:2f:
                    80:7e:16:0f:3f:7d:38:1f:58:e0:b6:3e:18:c6:84:
                    20:ed:1f:68:93:f9:09:4b:59:d4:37:d0:a7:9e:dd:
                    91:8f:2e:cb:7c:11:83:99:6f:70:2b:b3:b4:be:83:
                    21:3f:3c:ff:16:8b:69:f7:ca:16:07:8e:fa:cb:bc:
                    7f:1e:dc:ff:10:c1:26:b7:a6:63:2f:03:6d:58:f4:
                    4e:f2:a7:92:64:63:87:38:d1:2b:dd:7e:f9:20:4e:
                    cb:f7:1b:82:13:b2:64:f6:44:0c:cd:45:bd:64:3b:
                    ce:d5:b4:09:49:ea:dc:01:ac:c8:7b:a0:ce:38:d8:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:8A:5A:A7:34:77:9B:5D:56:3E:51:4B:6E:6B:36:AA:88:74:D6
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:fe:63:23:2c:2a:ec:be:52:a9:4d:8d:56:59:6f:a6:15:
         61:2e:07:99:1c:11:5b:9b:41:0f:2d:47:a8:6a:ee:85:34:36:
         d7:a4:59:5a:00:52:98:75:cf:e2:50:dd:4c:a1:91:08:ed:34:
         a7:92:f5:7b:d8:92:69:6e:44:88:7c:18:d7:e8:b2:0d:5a:da:
         ed:30:85:51:1d:4e:42:a5:da:e5:3e:ed:7f:eb:29:31:9f:cf:
         39:8e:21:a1:cb:eb:55:37:92:0a:55:4f:a9:f6:a5:b7:ba:6e:
         a6:a7:8b:cc:20:e4:80:99:0c:f8:78:d0:a1:e3:51:06:85:df:
         88:ab:bb:dc:af:04:7c:d3:99:90:b2:6d:f6:1a:e2:ed:3e:70:
         a4:eb:ee:6a:d3:45:44:c7:77:5e:c7:91:59:cb:49:7a:60:0e:
         75:2a:68:c9:44:65:9a:3a:f1:23:98:db:6d:97:7f:5b:29:09:
         56:13:7f:9a:d1:92:59:7e:54:a0:3f:a5:2d:cb:ca:f5:6a:63:
         32:8e:ba:a0:e6:ed:f7:fa:dc:b5:73:b1:04:b4:50:92:bb:71:
         7d:0d:e3:ae:5c:e3:7b:9b:f3:5b:c2:a4:c3:bd:0c:32:c7:57:
         40:15:54:0c:03:b4:9b:6c:10:d2:90:d4:d3:6b:f3:e4:3c:7d:
         df:25:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:24 2024 by rpki-client on console-fra.rpki-client.org