Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          PP9kw3k2qTHyTS1a3Zif/2MXC6jNpW0v8+VUze5Rnqs=
Subject key identifier:   2A:44:C4:05:FD:CF:E9:0F:E5:78:2F:55:6C:B8:83:AA:63:60:BB:0C
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       0191F9A2A524635FD8CA68354B301C8F2512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          1078
Signing time:             Mon 16 Sep 2024 07:01:11 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:11 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:11 +0000
Files and hashes:         1: HXB1LDm5zZgSMqaKb90Jy7tlX0I.roa (hash: Uxx2smW4IaJLMvXo86ENK4ZfxEo76T9stAo4MC3YFho=)
                          2: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: sPq4bjWPEXrYMV86Hu4oVFdq6jXxUFlPofbMwrA/KDc=)
                          3: TtRu3IY5JyymFU-Lp4MMnJa1csc.roa (hash: kACTHvZz8FUkRe0OgL/KFJyclfINAJaZPfX1Cu+Xa48=)
                          4: o-uQlsnJrHGIWLBNMpiLVn7bm54.roa (hash: x02oh3RHmQszYWaVgKV/BGqgzF80+kOF1fX1gQazNlQ=)
                          5: y6Rwtx86gdhAceApWSVIyGHe2Vs.roa (hash: veuqizgd4MvSyDHw6G+3HZzUjstsMHA2h1zx4T22lLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:a5:24:63:5f:d8:ca:68:35:4b:30:1c:8f:25:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Sep 16 07:01:11 2024 GMT
            Not After : Sep 17 07:01:11 2024 GMT
        Subject: CN=2a44c405fdcfe90fe5782f556cb883aa6360bb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:28:57:5f:f3:59:98:2f:c4:9c:72:1b:6e:
                    2f:f2:5d:f1:e3:6b:ad:c5:2d:c0:e5:4e:72:a4:a7:
                    2f:40:33:b3:d7:16:95:d4:4e:c2:54:6c:e7:0a:1f:
                    27:d4:42:19:4c:ef:bc:13:ce:7b:d1:21:f2:f6:53:
                    26:69:35:ca:21:ce:15:a5:9f:af:3d:f5:38:1e:82:
                    87:73:07:e7:3c:57:2e:a9:92:23:54:fc:a9:22:d8:
                    af:77:61:1e:07:f1:44:9a:85:94:16:50:59:60:86:
                    6f:e9:67:89:4c:2a:cd:49:38:53:6a:d8:f5:20:a2:
                    6f:b5:59:34:78:54:25:84:48:f5:8f:a8:d0:60:d7:
                    5e:20:df:07:71:9c:c1:01:68:fd:31:b5:ca:24:22:
                    ce:49:fe:3b:7f:56:0d:3b:a2:dc:a0:1b:f9:bc:33:
                    ec:df:32:6e:81:36:d0:a8:a3:3d:48:5e:3d:5b:f3:
                    c5:f6:b9:85:0b:4e:c1:29:b7:9d:3e:76:32:51:44:
                    8d:f6:7f:c5:6b:c5:e2:02:63:2c:35:38:3a:c9:d4:
                    c8:3f:53:d1:0c:8d:b3:92:b7:42:eb:3d:09:09:26:
                    66:61:e3:a8:2f:a9:ee:b2:ee:70:62:82:22:84:3c:
                    2f:cf:ac:de:94:7d:75:52:3d:bc:16:37:fd:9e:b2:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:C4:05:FD:CF:E9:0F:E5:78:2F:55:6C:B8:83:AA:63:60:BB:0C
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:87:3f:a1:38:b4:fd:8e:80:81:55:64:0f:cc:17:2d:6a:
         2d:d1:e1:b2:f3:10:da:a9:47:52:fe:d2:ff:b8:82:a0:2c:b5:
         c7:d0:18:ac:df:6f:69:2b:cd:dc:44:61:c3:c6:c2:8d:20:38:
         82:a1:a2:96:30:f5:b6:20:9c:51:87:f4:00:45:df:70:2a:f6:
         72:1e:9f:b4:37:ed:7a:a1:2c:06:ec:19:69:52:d6:a1:a9:b6:
         44:37:7f:44:ea:93:16:7f:05:14:98:64:11:1f:cf:10:27:e1:
         39:2d:b6:b0:3d:94:18:c6:0a:9b:91:bf:2e:81:82:7d:d2:c9:
         c5:3e:cd:b5:ee:f2:a0:c4:f0:72:2d:48:b4:f2:53:50:f6:f8:
         82:d4:47:6d:81:42:7f:5f:a2:7c:90:99:d7:72:65:0e:e6:80:
         89:27:c0:b5:b5:a6:e2:72:ab:cd:e3:e2:9c:99:4e:30:41:e2:
         68:98:39:36:d4:ab:b4:64:e8:ed:42:56:49:c2:48:f9:25:aa:
         a1:5f:96:83:a3:d1:f9:1f:e6:98:8f:fb:09:f1:b4:d9:f9:f7:
         d7:d2:66:04:24:c3:88:5e:4f:ec:37:39:8a:dd:38:4b:43:53:
         a3:fa:04:6d:fd:0d:ae:b1:f0:87:7c:0b:e2:50:63:60:1b:2f:
         8f:63:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:29:37 2024 by rpki-client on console-fra.rpki-client.org