Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File:                     NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier:          Df/vxOwtr6hMd9hnfYdfDPEXRbNgVCBl1Fe3DbURDf0=
Subject key identifier:   52:0E:D4:C9:66:72:A4:84:2A:79:68:DF:79:FA:93:50:B8:31:08:E4
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer:       /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial:       019352070A691A5E654BEA42793C5B483292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number:          1390
Signing time:             Fri 22 Nov 2024 04:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:13 +0000
Files and hashes:         1: 25I9sUIfX1aCmv3zSIPXwTWsFyw.roa (hash: yMkfpLWeT2GdQzWsuXzLHbqz1lkHeHnZYkJalkxG/g4=)
                          2: HLE4yP5PmaZ6WD3K6P5i3rbE1ko.roa (hash: ltpHmqdXLj7OtssznNeEcF2uByieb3WPy550Rxzt5Lc=)
                          3: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: zYrHeaLhVfOLEXEeZjepNhN3jhwoJ7fzBQT4VQcbIP8=)
                          4: O5ik6yXyEQdURNrL03XAll-nH5A.roa (hash: Cyl7clr0FKMgp/AxEBoolgK/QK3C6Q1Vj3IUeNOc+tw=)
                          5: cNZFORuYvUhzGIR57-c5eqMSyzY.roa (hash: FvuCKPP8mbnZTXRa7oafYpdKuEYx8KFnC0y+dzc3T2w=)
                          6: r6sYDk21lKaf89Gf72fjSMqcya4.roa (hash: Iqm3JRU6264pdYTo3Eq0Ot+DAxe5dYQkDFK47h6cBww=)
                          7: tmEvOIFyELo233i5O9Q4mI4E0A8.roa (hash: 4+o1KWEhzmvz8+LdPon++ZQENtfcX2YY9bF4pfTft2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:0a:69:1a:5e:65:4b:ea:42:79:3c:5b:48:32:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
        Validity
            Not Before: Nov 22 04:00:13 2024 GMT
            Not After : Nov 23 04:00:13 2024 GMT
        Subject: CN=520ed4c96672a4842a7968df79fa9350b83108e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:b1:32:36:6c:31:cf:df:8c:26:dc:1e:76:
                    ad:5a:20:24:cf:dd:f5:7d:d3:0c:3e:d2:82:1d:78:
                    0a:ff:25:15:f6:50:72:64:5f:2c:75:25:a4:95:49:
                    79:66:ff:2a:2a:63:41:33:8d:04:e9:ae:e0:f8:a0:
                    d2:0d:e0:a7:70:1e:ff:4d:2e:e6:85:30:95:bc:71:
                    63:06:6b:63:69:64:ac:c7:50:87:7a:e8:a6:08:90:
                    a5:8b:b9:ce:20:35:5b:9a:16:80:af:fb:b0:bd:de:
                    26:2d:6b:3a:09:fb:13:a1:bf:8c:42:7f:3c:2d:c0:
                    2e:33:21:f5:51:0f:27:65:ec:df:98:46:7e:71:f5:
                    87:90:31:a6:ab:9a:c8:84:37:3b:9b:b1:b3:87:60:
                    eb:c4:eb:0b:64:c0:7b:05:43:02:bf:ed:95:b9:10:
                    b1:c8:77:4f:22:d3:08:28:a3:08:00:ae:ec:d1:2d:
                    4e:95:91:86:ba:53:db:b6:75:25:9f:0f:b4:0d:50:
                    01:e9:27:0e:bd:1c:93:fa:e5:cc:35:de:e6:16:fb:
                    49:a6:4a:1d:22:06:f6:28:07:7e:d1:7d:2f:32:9e:
                    7d:50:1e:24:65:e9:c1:d6:47:72:ef:f5:46:3d:55:
                    0c:16:4d:56:bc:d9:3e:2c:ba:9c:f5:04:c6:c4:84:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0E:D4:C9:66:72:A4:84:2A:79:68:DF:79:FA:93:50:B8:31:08:E4
            X509v3 Authority Key Identifier:
                keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:72:ff:fa:16:fb:30:de:8a:fb:e5:70:df:1c:59:10:9b:cc:
         29:5a:bc:f2:1e:ea:3d:6e:17:4d:d3:64:b3:af:9a:d6:3e:9c:
         26:2c:ed:c8:51:44:77:79:eb:e9:bc:93:5f:9b:27:2a:8e:90:
         f7:65:e3:4f:41:53:a6:a1:fa:fd:ca:86:59:c8:7c:75:e4:a9:
         35:1d:55:0b:ae:d6:6a:7e:c0:ca:9b:f7:49:45:26:11:da:c3:
         9c:81:15:66:0d:e5:29:36:8c:69:0b:b9:f0:b9:ac:a8:ff:bc:
         1b:40:73:b4:1d:ee:a4:48:9d:ec:71:88:b6:95:d8:7c:60:05:
         ec:78:52:86:ea:82:fa:ff:70:d9:45:a0:35:56:94:d0:85:c9:
         57:06:93:1e:d4:84:e1:bb:14:60:84:69:28:a6:05:9e:e2:09:
         7c:21:aa:96:55:1e:0d:44:41:2d:9b:cf:59:4d:36:10:9f:71:
         e4:1a:24:66:3c:81:e1:e5:c9:7a:9b:56:82:22:5a:2f:14:a7:
         b1:51:aa:e0:ef:fd:c2:c5:6d:37:2a:79:0b:f9:a0:c9:06:e2:
         cb:0b:f7:60:c5:b6:96:08:69:51:e8:e8:a7:15:77:c3:a1:64:
         c2:64:81:0c:b0:39:c5:ba:ed:46:fc:cd:65:c5:6d:78:23:84:
         c9:25:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:37 2024 by rpki-client on console-ams.rpki-client.org