Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          u9tBuVMnHEfZuyQjKtT6HbV8Sz3lpjVfUed+eZbJu+0=
Subject key identifier:   99:62:D2:4A:6A:39:6D:C9:5B:39:AA:73:08:D3:8B:74:46:30:E0:DC
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       018F87ED97E04F45548549F8D0F622CAC75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0715
Signing time:             Fri 17 May 2024 19:00:46 +0000
Manifest this update:     Fri 17 May 2024 19:00:46 +0000
Manifest next update:     Sat 18 May 2024 19:00:46 +0000
Files and hashes:         1: 76wNd9NP3c59k2JmOuL5wP1wxzs.roa (hash: GnE5a73cFzUrd7zRF9b+uvueqPR9EUoEHdPFO0coQ50=)
                          2: 9gsIWXGcmspdLmH_nQxhmXoWCAk.roa (hash: Egy4i6HoGjr40ly0fWEZuoVTUZq8+s2FyZM7NZMYo0o=)
                          3: LAm09GnL6fIsW1Z0hzjaW9pMDmA.roa (hash: EQ8/uFuZdjAxOS160nC0Pt6qcalBzWUGsZF4gNeJL3E=)
                          4: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: 1VxsPXSQ9IAso8Tzfhkcd6YHgQq7dRvCNvI4FXnT59g=)
                          5: lZqe5XA_dnTRRCXrpa_IbbGalE8.roa (hash: JjmEWi4EASeEY1luQr7sUn0IZ7opQFJcCrrHgAi5DYw=)
                          6: sN4N1yeaLKMJorp6FjKiIymx9Jc.roa (hash: 4suuL/yxK6nMWEwK/gyxYIJ1Hqk7tTVKTg5KQ7oIzzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:97:e0:4f:45:54:85:49:f8:d0:f6:22:ca:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: May 17 19:00:46 2024 GMT
            Not After : May 18 19:00:46 2024 GMT
        Subject: CN=9962d24a6a396dc95b39aa7308d38b744630e0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:64:9f:d4:5e:37:93:41:d9:14:28:fe:c3:
                    8e:f8:bf:f4:29:0b:e8:ba:00:a8:f7:08:b5:96:b9:
                    bb:92:f8:73:5b:21:ad:ff:66:28:fa:b8:31:26:f3:
                    18:07:8d:b5:21:26:60:de:85:73:b8:44:c1:e5:1a:
                    b6:18:23:ac:b3:ae:a9:28:47:58:a9:2b:ea:1e:75:
                    94:25:bd:0f:d2:c2:f3:41:fa:e1:f0:94:2e:58:70:
                    59:88:0f:c6:d4:82:8c:a6:d1:6a:c0:fb:61:89:88:
                    2c:19:af:e0:a9:f4:0f:52:4e:cb:64:d0:30:5a:e2:
                    e1:d8:76:f5:ae:84:eb:cb:4b:76:ab:a9:3d:c7:80:
                    6b:77:ab:29:aa:78:33:bc:3f:6e:43:e4:7e:8b:2a:
                    d9:ce:f5:25:07:f1:5e:7d:6f:ca:98:c7:41:48:65:
                    b9:d1:37:c9:96:39:45:78:b3:71:30:24:bd:bb:a0:
                    8d:95:34:a9:5b:b2:6f:cc:f2:15:00:24:7f:f0:4a:
                    0b:ea:a5:3d:24:21:40:97:e6:f4:32:01:33:91:92:
                    ec:fd:ab:9f:fb:c7:4e:c6:fd:bb:7a:e3:ce:d0:e6:
                    02:de:28:55:3c:c2:84:94:f3:7f:b5:58:13:d2:4a:
                    54:17:ea:25:d4:d0:3c:3b:83:9d:18:a6:f5:36:a4:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:D2:4A:6A:39:6D:C9:5B:39:AA:73:08:D3:8B:74:46:30:E0:DC
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:54:fc:5a:91:d2:6f:dc:7f:43:7a:19:a1:1c:f9:40:1e:8c:
         96:1f:fd:87:32:a7:3c:d5:e1:f1:c2:4d:00:60:ca:25:57:60:
         e1:6d:0c:2d:ab:28:39:d2:ee:b6:6b:ed:c2:b5:db:5c:bc:98:
         75:74:4e:50:aa:fc:0d:a0:20:2b:d8:7e:97:2b:81:f6:40:13:
         a6:8c:0a:d6:4a:5b:f7:10:8b:f8:d6:13:16:f0:de:8c:1d:bc:
         21:0e:b7:f6:dd:6c:41:37:3c:de:8a:f7:c5:5a:06:91:25:b4:
         bb:6e:eb:26:00:3d:db:68:e7:e5:65:fe:8b:0b:39:2a:a4:50:
         56:bb:ae:8d:f1:15:36:67:da:68:90:c5:6b:70:da:45:34:39:
         01:7c:05:f1:9f:1c:61:32:ad:30:a5:e5:29:11:9e:15:8d:12:
         15:26:14:9c:ab:28:8c:a6:37:f3:72:de:4b:f4:87:66:88:02:
         e1:b1:14:f1:4b:ae:b7:06:ef:71:98:cd:23:e9:a1:10:82:8d:
         e0:b4:9f:f7:74:a1:55:eb:6c:47:0b:47:64:da:60:a0:eb:a0:
         a4:a2:7c:29:1e:96:13:d9:81:5d:f1:5e:8d:60:17:bc:d6:32:
         eb:7f:0a:b5:e6:e5:b0:d1:9f:54:a9:21:29:d5:28:bb:4c:4b:
         8f:9a:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:55 2024 by rpki-client on console-fra.rpki-client.org