Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File:                     NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier:          oZGj9mPmoZWkRRSdbJgscrRDgDuliDDjcjnR7aevpds=
Subject key identifier:   51:BE:30:B3:55:0D:A3:AA:27:A9:6E:30:DA:30:EE:9D:21:B4:D5:4A
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer:       /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial:       01906FE2ED72A15E7B56C6C806FD050BC4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number:          11EF
Signing time:             Mon 01 Jul 2024 20:01:01 +0000
Manifest this update:     Mon 01 Jul 2024 20:01:01 +0000
Manifest next update:     Tue 02 Jul 2024 20:01:01 +0000
Files and hashes:         1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: Jse5vOPDncdrXamOWb2Kqd1nmh3TYNwlKWtIVOMX6LU=)
                          2: jZOHOD59xHX0U3VEnHn8aI3jTCY.roa (hash: 5ou4lKmFHhEh+OfK2dS2/u8ruhQD5i5b2JCIYTv9G50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:e2:ed:72:a1:5e:7b:56:c6:c8:06:fd:05:0b:c4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
        Validity
            Not Before: Jul  1 20:01:01 2024 GMT
            Not After : Jul  2 20:01:01 2024 GMT
        Subject: CN=51be30b3550da3aa27a96e30da30ee9d21b4d54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:3b:18:65:75:e3:57:ce:88:37:35:9a:da:
                    62:65:28:93:d1:42:f6:97:61:f0:af:d1:66:77:b6:
                    7a:59:76:a1:f1:e2:91:ff:17:7b:cd:b2:46:20:f6:
                    b2:dd:24:f0:a2:18:e7:cf:ab:f0:52:91:b3:03:72:
                    8b:b8:08:50:98:3c:69:0f:82:02:36:83:bd:26:e5:
                    14:e7:ae:dd:e6:ec:74:a9:50:25:f4:78:36:c4:02:
                    79:86:20:ae:b6:5a:41:ba:cc:98:22:55:85:32:50:
                    aa:21:b2:2b:a1:4d:3e:f5:8d:a5:36:77:f6:1b:4a:
                    29:9c:e8:91:af:f8:27:f8:5e:b4:7b:4b:ac:03:96:
                    e0:39:d5:62:e6:77:a1:b4:8b:a7:1e:f9:69:17:fc:
                    7d:3c:61:41:78:56:06:22:99:8d:32:30:19:4c:7a:
                    f4:5e:59:81:2a:ab:9a:fd:1c:da:c9:1a:fc:c9:57:
                    2f:ea:83:2a:5f:e3:19:a2:f5:98:12:20:7f:c0:ce:
                    99:92:8a:f1:35:57:29:c6:ce:7b:c9:74:3a:de:94:
                    b6:b9:4a:dc:ea:0b:4a:b3:c1:11:b5:a4:e1:b1:37:
                    98:11:56:e2:76:d1:ad:fd:93:98:61:eb:66:3d:ee:
                    b3:9d:c4:8e:47:35:08:b9:c2:5b:db:41:e8:7c:c9:
                    5e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BE:30:B3:55:0D:A3:AA:27:A9:6E:30:DA:30:EE:9D:21:B4:D5:4A
            X509v3 Authority Key Identifier:
                keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:3f:7f:02:e0:3a:9b:86:1e:0f:81:b4:4f:1a:a4:d0:2c:
         70:4c:c7:eb:39:f2:95:c2:5f:7c:25:91:e7:0a:6c:01:1a:c2:
         1b:6c:84:51:03:4a:50:7f:e4:f8:30:4d:92:4b:b9:d6:89:a5:
         8e:d4:94:b8:7c:4d:2f:01:d1:8a:4b:8b:bb:ac:0b:fc:91:47:
         54:17:a6:de:76:59:d5:69:29:da:a0:28:24:64:67:fa:ce:20:
         a9:8a:e0:18:1f:c6:e1:76:8c:fc:82:47:49:ef:cb:78:c8:87:
         d9:cf:98:08:25:ff:06:38:09:34:c5:df:49:23:be:e1:fb:2b:
         03:37:ff:06:4e:fb:10:1a:f8:8c:b0:86:99:10:82:cb:34:6c:
         41:25:38:6f:65:05:12:db:a1:be:8f:09:e7:4f:2c:4f:42:a4:
         f3:b8:ae:1c:ee:cd:80:0c:40:4c:08:31:47:5c:b8:db:f6:04:
         aa:68:4c:c2:e9:28:57:e2:f1:a2:d1:6b:cc:d6:29:1c:93:2f:
         0f:e7:5a:dd:d7:66:2f:0e:e1:6d:ce:36:71:88:d2:01:d2:37:
         7f:dc:d4:78:3c:6a:58:3e:7f:bb:54:e0:a2:f6:5e:42:d0:02:
         df:82:b4:44:b2:23:6e:e2:7c:71:6f:27:40:1e:05:71:0d:30:
         f9:69:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 20:55:40 2024 by rpki-client on console-fra.rpki-client.org