Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File:                     NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier:          M5GQG7YmmUfEwl/otbS+GXRhif3rpDLwiKpjfN1cUbI=
Subject key identifier:   97:E6:35:24:43:13:9F:08:47:18:AC:57:0A:72:74:42:92:0E:B1:75
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer:       /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial:       01905358BB01B1256B7F98F1F645FE1D57A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number:          0F1B
Signing time:             Wed 26 Jun 2024 07:00:42 +0000
Manifest this update:     Wed 26 Jun 2024 07:00:42 +0000
Manifest next update:     Thu 27 Jun 2024 07:00:42 +0000
Files and hashes:         1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: LMptkMXEAoM6wKfssvbOwU6FD/9hGwEj/OgtK7LcR6o=)
                          2: pZQfa7LZBnHar0epaU622h4x7iA.roa (hash: A/1n5KGghwN80sIHHmoEyN9YAGwA6UClFBft8pI7Tew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:58:bb:01:b1:25:6b:7f:98:f1:f6:45:fe:1d:57:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
        Validity
            Not Before: Jun 26 07:00:42 2024 GMT
            Not After : Jun 27 07:00:42 2024 GMT
        Subject: CN=97e6352443139f084718ac570a727442920eb175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:20:06:2c:bb:fd:8c:11:88:8c:cd:45:03:55:
                    ff:42:62:dd:be:f2:f4:14:d1:8e:5b:7a:a5:d2:b7:
                    b0:51:a3:d3:f3:0a:17:a0:47:4c:d5:d2:2f:a1:a1:
                    f9:49:15:b0:ce:ca:ba:79:9b:50:a9:ab:c9:7c:49:
                    6b:ae:69:a1:46:bd:4d:97:45:07:71:a8:f5:f0:0d:
                    1f:46:d6:ef:d5:b0:04:b9:e8:38:92:67:45:1e:da:
                    53:5b:6d:8b:65:23:21:a5:eb:52:db:b1:a7:6f:00:
                    1a:06:2f:7b:37:93:f0:ee:96:7b:b1:cc:17:f6:11:
                    1c:48:92:c2:f4:ea:b5:8c:99:e8:2e:3e:2d:f3:70:
                    66:fb:b6:fc:e1:d2:14:41:82:2c:0b:1f:0d:45:0d:
                    92:fc:cc:b7:2b:49:db:c9:ec:a2:a7:f0:cb:81:17:
                    d5:a1:60:95:27:ae:6e:38:04:18:3c:96:47:ba:40:
                    54:76:58:e9:28:f5:cc:91:ef:4b:14:66:65:ae:1b:
                    e2:7b:a4:7d:14:a6:ca:07:8e:91:6a:2f:97:82:93:
                    99:96:54:08:95:cf:3d:db:8a:b2:8a:72:2c:16:71:
                    dd:fa:a2:16:1a:ab:b5:42:37:cc:a9:61:e5:88:8d:
                    0e:f3:4c:d4:02:a4:c6:fb:e5:e7:0a:74:15:bf:0a:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:35:24:43:13:9F:08:47:18:AC:57:0A:72:74:42:92:0E:B1:75
            X509v3 Authority Key Identifier:
                keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:f1:b2:68:0f:58:a0:fc:8c:8d:0c:0f:74:45:fe:36:53:
         00:2a:69:d1:61:d7:91:f0:4c:80:0f:cd:8e:f5:d4:7e:29:bf:
         36:90:5c:4d:4e:db:33:1f:97:cd:83:d8:d3:23:d6:f3:eb:39:
         b7:3f:d2:03:db:1a:d7:8d:a8:39:d6:6b:e0:48:db:4e:50:30:
         c8:1a:74:0f:f9:a0:b7:f0:7c:35:e4:94:55:c9:29:e7:ba:c6:
         ea:36:cf:7b:bd:cb:99:58:04:05:c5:20:c2:f1:66:3f:43:5e:
         70:02:1e:a4:e9:05:18:a7:f6:6a:af:34:19:88:5e:31:27:67:
         c5:84:72:4d:92:35:ff:72:4e:b7:fa:72:4d:91:34:bd:8b:ca:
         e4:6e:67:43:76:c5:00:df:5e:29:6e:01:df:02:0c:bd:8f:7e:
         a7:42:40:bf:11:f9:76:4a:7a:1b:27:a4:03:9e:5a:5f:41:53:
         20:8c:cb:3d:4a:23:ce:ff:7f:5c:c4:58:a7:95:5e:66:e4:89:
         ee:7b:65:b4:33:06:04:f4:2a:6f:99:9b:48:96:8a:40:88:5a:
         e0:dd:1a:f2:76:21:b3:3f:c3:1d:01:bf:07:5d:fc:55:30:f4:
         4c:7b:3f:24:13:57:80:45:67:38:c2:09:ce:fd:62:29:1b:6b:
         d8:6f:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:27:56 2024 by rpki-client on console-fra.rpki-client.org