Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File:                     ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier:          c8uOwbhBKU0/owjpdd5GGQHnRPPn+r1eDA0z9SX00uQ=
Subject key identifier:   2D:D8:4E:5C:EB:53:AB:F4:63:26:99:17:99:47:7B:84:EC:AB:DE:40
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer:       /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial:       018F889219968B370B37BBD3AFFBEC629C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number:          0E17
Signing time:             Fri 17 May 2024 22:00:27 +0000
Manifest this update:     Fri 17 May 2024 22:00:27 +0000
Manifest next update:     Sat 18 May 2024 22:00:27 +0000
Files and hashes:         1: HdNXl5Js0qjnGK8juixpsHBVABQ.roa (hash: GhOOz3V+ci8IurXvMcHjinAM3SJ2hHQtsr75VkbcfKQ=)
                          2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: l78fCcwjlJ4w/k5kmI7EYzcnuW5o1DBYvNlyCdpUtlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:19:96:8b:37:0b:37:bb:d3:af:fb:ec:62:9c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
        Validity
            Not Before: May 17 22:00:27 2024 GMT
            Not After : May 18 22:00:27 2024 GMT
        Subject: CN=2dd84e5ceb53abf46326991799477b84ecabde40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:29:25:64:74:02:cd:86:dd:be:ca:21:69:
                    47:6f:60:de:6f:54:05:33:83:7a:f2:83:a5:6b:a5:
                    31:13:8f:b7:ef:f5:c1:77:b7:d0:32:94:3e:2d:17:
                    7c:3a:d4:76:c5:ca:ec:f4:3e:e0:12:1b:7e:87:f0:
                    76:bd:50:4c:2e:95:29:a8:33:d6:ff:9d:9b:ac:8f:
                    3a:3b:97:2f:62:54:8c:d5:4c:97:93:e1:be:3c:e1:
                    0c:d9:d2:bb:a6:36:3b:38:39:49:13:63:2c:30:6c:
                    49:82:01:fa:01:5d:c8:81:da:7f:1a:c5:fb:53:3f:
                    1b:0a:76:09:8f:4b:e2:66:23:27:20:ac:c6:ad:b7:
                    3c:41:e4:dc:8e:d5:5b:20:57:63:f3:6d:76:b0:96:
                    b4:e7:ca:21:d2:f1:a5:89:fe:99:7e:c7:55:87:2e:
                    25:8a:73:d2:1f:c7:92:4c:bf:7d:76:1a:ac:ff:9c:
                    39:65:04:e3:32:4c:fc:4a:39:ad:ec:a3:e5:bc:a2:
                    63:30:e0:9d:4b:a3:d6:40:88:d9:90:9b:aa:34:e6:
                    f1:a4:65:bd:9b:ef:3a:b6:fc:62:04:05:f6:d6:dd:
                    9c:82:28:ef:ad:41:68:76:84:18:28:f4:de:8c:d3:
                    ad:1d:74:0e:01:cd:ce:de:37:1a:6c:3e:15:af:06:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D8:4E:5C:EB:53:AB:F4:63:26:99:17:99:47:7B:84:EC:AB:DE:40
            X509v3 Authority Key Identifier:
                keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:f4:13:f3:53:40:c5:b1:94:8a:0e:ae:13:cc:ed:73:e9:
         1b:30:b5:72:3e:ee:91:94:82:34:9d:5a:43:15:e0:0a:1c:41:
         8e:23:73:e1:4e:41:62:1e:98:e4:e2:f7:24:56:6f:37:2a:e4:
         3c:1c:bf:e5:73:d8:3a:dc:9e:c8:f1:5c:a0:2f:3a:7c:9b:5f:
         a0:90:d0:6c:3f:b3:46:7f:23:b5:a7:62:4f:bd:4e:c4:0c:21:
         bb:a7:22:19:ff:ca:c8:2a:98:c2:88:00:3a:a9:fc:e6:b8:bd:
         2b:4c:e3:55:c5:56:ae:b9:02:82:6c:51:55:6b:eb:eb:03:9e:
         bf:af:fc:86:16:89:23:b8:0d:43:15:b3:80:06:42:b0:ba:cb:
         7c:9d:31:9b:37:fe:95:6e:15:6a:e5:eb:0c:e0:41:20:90:2d:
         da:0e:b0:0f:e8:7c:5e:4b:be:1f:1c:14:ce:cb:ea:44:66:c0:
         32:f0:23:38:b5:af:9b:ee:6a:67:bd:2f:47:0c:6e:40:04:e5:
         ab:7f:41:9c:30:b3:db:15:48:f2:38:5e:1d:c0:bb:f5:8d:ce:
         b8:c4:3a:d0:29:29:75:a2:f9:1c:06:1c:b6:3f:ca:15:38:b5:
         72:aa:0a:96:05:0d:04:13:b6:01:7d:71:f8:76:2a:81:f0:1e:
         48:29:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:58:29 2024 by rpki-client on console-fra.rpki-client.org