Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File:                     NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier:          iyXUUqpKH5tbqU8TL+tbmcUl8cEk9aWrZ0/SejU6lhg=
Subject key identifier:   67:F9:39:7C:77:BF:A3:D2:FA:51:C1:7F:6A:43:6B:BA:37:82:92:7D
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer:       /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial:       018F8749490EBC73D2CDDD710125F137CCAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number:          0EB1
Signing time:             Fri 17 May 2024 16:01:18 +0000
Manifest this update:     Fri 17 May 2024 16:01:18 +0000
Manifest next update:     Sat 18 May 2024 16:01:18 +0000
Files and hashes:         1: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: YbZDpiQPwRXqxo8qoh4ZCkGpYggpzuTHBVxHzdi82iU=)
                          2: U7aQJdKZYsbidU_kErSd4Vs7vXU.roa (hash: yf4DMUGLD4TqmCPD3icZQEnif8qOKJ8Oi93C5oxUH3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:49:0e:bc:73:d2:cd:dd:71:01:25:f1:37:cc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
        Validity
            Not Before: May 17 16:01:18 2024 GMT
            Not After : May 18 16:01:18 2024 GMT
        Subject: CN=67f9397c77bfa3d2fa51c17f6a436bba3782927d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:6d:d3:da:76:41:7b:2d:a0:eb:65:c6:0b:
                    a9:6c:f9:e4:04:db:b1:b9:bd:7a:39:e0:eb:ea:95:
                    8f:cf:77:00:47:76:5b:93:aa:b3:c9:66:89:21:12:
                    27:5c:e7:fd:a5:ff:c4:cc:33:79:d0:f0:c0:35:2e:
                    d0:02:94:6d:e9:8b:7b:9c:bf:a6:f1:13:b4:c6:23:
                    3f:ab:ae:da:70:d9:f7:f8:4a:a7:7f:b1:dc:bc:e7:
                    cc:c1:49:94:a8:17:b8:db:be:1c:ad:e7:e7:19:bd:
                    30:a4:25:80:f0:cc:f0:7e:0b:77:8a:ce:e9:56:43:
                    48:a0:32:f7:5e:f7:30:f3:4e:e9:c6:55:50:a1:0b:
                    70:81:98:51:d4:28:03:11:39:d2:43:7c:43:6e:7f:
                    3e:a2:8c:7f:d3:10:49:ad:f2:8e:d4:67:1d:d1:71:
                    91:94:a1:19:63:26:53:d6:95:a7:72:68:d0:7a:eb:
                    98:7c:2b:cc:6a:b8:48:7b:21:07:a2:17:7a:b0:81:
                    be:40:c3:5f:11:c5:2b:64:9e:1a:f6:a1:89:a1:8f:
                    d2:17:0d:f0:77:76:b9:a8:e3:51:2a:21:85:d4:e6:
                    1e:9d:83:e2:01:50:d4:3e:43:b0:17:5a:7f:e2:d1:
                    37:4f:31:e3:5b:50:b4:d9:aa:88:03:6a:37:ca:ca:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:39:7C:77:BF:A3:D2:FA:51:C1:7F:6A:43:6B:BA:37:82:92:7D
            X509v3 Authority Key Identifier:
                keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:72:af:f4:72:88:3f:62:01:67:f5:ca:85:62:a8:e6:4e:
         b1:23:52:60:84:f6:e1:68:49:11:d9:d9:79:df:20:d2:49:c4:
         67:5e:f8:5e:f8:1f:d7:57:7b:ba:b4:38:e3:ff:8a:5d:6b:3a:
         55:0d:bf:a5:01:73:47:6e:2d:13:3b:2c:f3:96:37:31:6b:ae:
         13:1f:41:78:4f:14:cb:58:38:54:95:60:d3:d8:24:0e:9a:c4:
         21:3e:6a:af:cf:66:5a:79:90:fd:a3:6d:17:f4:9f:d9:7c:35:
         b4:b4:c7:92:1b:61:a5:c4:82:7e:09:d6:e5:ca:9b:0f:12:63:
         5c:cd:6f:63:75:e6:f4:16:ec:ac:9d:fd:5a:61:52:9d:27:c1:
         04:bf:b8:4e:17:a8:be:e2:ab:7d:58:ad:7f:ac:ba:22:19:27:
         9d:1f:35:c3:d2:df:e7:58:3b:8c:01:fc:a3:36:f1:94:a9:8e:
         ee:a7:56:d6:d9:20:5a:60:38:ab:3a:a8:15:16:23:d3:31:13:
         2d:f7:67:65:13:63:60:f1:a1:19:5f:fe:c6:e3:4a:b4:a5:d7:
         ae:a1:42:9f:f5:15:cc:c1:42:9d:0f:f9:20:09:0b:16:d0:70:
         e9:01:c0:e3:8c:06:d5:5d:b7:98:10:17:da:b9:a7:6b:11:c4:
         d5:a9:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:05 2024 by rpki-client on console-fra.rpki-client.org