Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File:                     NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier:          /so9JbVbcar/j8ixbUiTmnjvO94R3lblVZ0myHJXrUA=
Subject key identifier:   01:95:AC:9B:CA:06:A7:47:F4:38:90:F9:52:B4:D3:F3:53:53:8C:CC
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer:       /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial:       0193587738AF16B85C9DA727A2B09676B722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number:          0E07
Signing time:             Sat 23 Nov 2024 10:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:28 +0000
Files and hashes:         1: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: slgJ3arbIbSQSGVdZ0YIaajM/fLzasn+0b02moU4Zog=)
                          2: p1qwCGHC-iI8YHPvNnwFvElitx4.roa (hash: Prvl2PX3adfH3KD3mferLZwxRbE+RqxCPR7KyMJnPxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:38:af:16:b8:5c:9d:a7:27:a2:b0:96:76:b7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
        Validity
            Not Before: Nov 23 10:00:28 2024 GMT
            Not After : Nov 24 10:00:28 2024 GMT
        Subject: CN=0195ac9bca06a747f43890f952b4d3f353538ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:55:11:f6:c5:39:af:1a:95:cf:5e:bc:7d:
                    e7:0d:6c:97:b1:21:1a:b5:e3:dd:ff:c5:3a:c9:79:
                    27:28:e7:c7:56:54:f4:92:bc:75:a6:6e:4a:e0:8f:
                    1c:4f:85:48:9c:15:01:95:ad:a4:83:ed:51:51:d8:
                    08:de:94:c7:e8:8c:00:12:82:26:b8:28:28:0b:f9:
                    65:ca:aa:75:d1:bd:9e:24:42:c7:d7:f7:45:97:82:
                    ad:b3:7a:9c:6b:5c:f8:50:fe:e0:3a:7c:40:9d:4a:
                    cc:86:67:1b:22:57:24:dd:81:22:10:3d:40:24:aa:
                    a1:ff:c6:10:a5:19:c3:9f:ba:f2:18:b0:1c:b4:ca:
                    9a:ae:7f:8d:05:1b:c3:35:cd:a8:8f:d2:03:79:0d:
                    09:4a:b6:05:cf:93:95:88:6b:ae:9c:db:f9:20:7b:
                    45:ef:94:a3:f0:f1:25:37:2b:20:8b:d6:22:c5:98:
                    79:55:d7:fe:27:85:64:9e:8e:93:a9:3d:e3:15:9d:
                    2d:38:47:19:9d:84:b9:29:cd:f1:83:26:28:1c:0e:
                    fd:bd:4e:44:ce:4f:a7:aa:6c:e3:16:1b:9a:cd:db:
                    12:e4:95:be:40:9e:78:a0:5d:a9:17:a4:09:30:7d:
                    17:7a:cb:82:1d:85:63:cb:55:b0:63:4e:27:95:67:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:AC:9B:CA:06:A7:47:F4:38:90:F9:52:B4:D3:F3:53:53:8C:CC
            X509v3 Authority Key Identifier:
                keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:ba:30:03:0a:a0:a5:5a:6e:2c:de:25:5e:0a:b1:39:a6:
         05:a8:0a:70:bd:f3:b7:3c:5b:51:31:7f:57:f1:79:a9:b4:2e:
         63:5d:3e:9d:2a:74:2f:8d:b3:e2:4c:58:d7:2a:68:57:6e:25:
         cb:53:87:0d:d8:ca:b6:97:db:0b:88:0d:0d:99:6e:e7:82:8d:
         5a:59:e1:91:ad:33:de:80:91:d7:f2:b4:39:e5:c1:c1:9b:bf:
         e5:b1:a3:34:7f:9c:09:8d:ab:91:d0:d2:6f:ca:1d:10:57:6d:
         e3:a0:05:1a:39:ac:d1:14:00:61:ce:38:3b:76:bc:e8:08:05:
         e7:87:c0:70:8d:d6:72:29:9c:e6:57:2a:b1:23:af:92:da:8b:
         af:a0:62:c9:b9:e5:30:6f:4f:e4:f0:c3:8a:da:60:92:a7:83:
         d5:6b:a5:7a:0f:4c:77:75:34:27:b0:37:79:58:a6:d0:06:ae:
         83:d7:81:81:24:27:a4:f6:54:f2:f8:57:1b:56:68:96:31:d1:
         a6:9e:29:38:af:a8:3d:a8:37:18:58:85:85:05:5f:94:69:c2:
         ff:c0:47:05:b2:be:09:39:70:d5:6e:ba:db:df:3a:94:d7:7f:
         34:94:b2:06:6b:1b:c8:d9:e4:7d:da:4a:27:f7:d3:0d:56:0d:
         72:3a:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:14 2024 by rpki-client on console-ams.rpki-client.org