Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          1PRM4ouutpebt/cfcgrKouC0JzUfkU0xu8Y63BhIBtc=
Subject key identifier:   73:19:2F:EB:96:29:AC:6D:F7:02:62:D3:72:4F:22:20:5A:DF:54:38
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       0193549A99D5D73C741D8D21A7B1DD9753A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 16:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:38 +0000
Files and hashes:         1: 0pZdrwiUbu96CHzscHdakkRwuPw.roa (hash: 5EJQWcCSWrqeeYPTfj8eMpVbPmALGYhAq0+GLxC5ySU=)
                          2: 1_PDee4wFs-yRl8LJhTYnKxoGXU.roa (hash: shnb45E6VLdlmPbpDvMp7nFmvyY0hDuyWlY2RohIuqw=)
                          3: 7_O0ZzsK1w5RRFNFuBHol41p94U.roa (hash: V+0vpguLz4PKF5N7a7KIsP5pnVLjeX21KLBQ6QtEFRk=)
                          4: 86hG3shlfKdUSvkVBOCwgUfnFak.roa (hash: g6hFGZB5sjfd6uG+fw6dsamoiAjOAVOgtyEoTXA5WQA=)
                          5: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: xqjQCj82MpRV6cwHU7pCLNYOs56N44UhvrYpeR4scmY=)
                          6: Q2-sQnLsuAPtuHrO-bGzXxyUoTo.roa (hash: g74M2o/fvtFZBcFjqYZ6hezOWYRJbsJmGZ6wZ+OouRY=)
                          7: VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa (hash: YKAGL5PCKD5l8c8jAf3LNU8r4oZFr4gcsZJNcdEIiLs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:99:d5:d7:3c:74:1d:8d:21:a7:b1:dd:97:53:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Nov 22 16:00:38 2024 GMT
            Not After : Nov 23 16:00:38 2024 GMT
        Subject: CN=73192feb9629ac6df70262d3724f22205adf5438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:60:b7:16:08:fd:b1:d8:51:a0:66:34:cf:96:
                    39:97:5c:cb:bd:c4:54:5c:de:17:ce:4a:43:9e:ce:
                    17:cb:d3:ee:ca:28:bb:57:fd:da:58:84:c2:d1:8e:
                    d1:6f:95:eb:bb:8c:f9:03:05:10:e6:8a:3a:bd:2d:
                    f7:bd:06:5f:79:32:4c:27:de:8c:d4:0b:e6:da:35:
                    de:44:2b:d6:9a:98:5c:0f:af:43:b5:8c:c6:0c:20:
                    eb:d3:fa:84:df:d1:41:6b:dc:69:f8:fc:c3:a8:5b:
                    c5:7f:84:a7:af:1f:ea:b3:58:1f:17:c0:b6:de:4e:
                    84:61:36:b7:96:7c:0a:f2:cd:64:ed:d8:52:5f:47:
                    29:ab:c5:72:ba:78:ca:e5:8e:c3:10:41:1c:57:39:
                    de:dd:fd:9d:ab:db:1f:d4:87:2a:25:0d:7d:4a:0c:
                    ee:56:ac:ea:ea:1c:ee:48:57:c5:15:fd:45:ea:98:
                    0c:5a:e3:8c:e6:97:80:0a:1f:c6:28:0a:05:8f:b4:
                    2a:d8:10:74:82:21:eb:77:37:b9:c4:50:2e:dd:7a:
                    60:cf:ad:1c:5b:16:8f:d1:0f:07:27:b6:f7:fc:3c:
                    e4:3c:98:ce:69:1c:f3:13:e5:76:ec:6f:ca:31:85:
                    2d:98:cf:4d:9b:d7:a3:5f:cf:99:66:7a:72:9c:75:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:2F:EB:96:29:AC:6D:F7:02:62:D3:72:4F:22:20:5A:DF:54:38
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:02:06:cf:22:c6:a3:bb:34:3e:55:b6:87:78:40:b3:a8:95:
         9a:2c:18:ff:4d:77:df:6c:47:0b:5c:94:87:23:b9:27:58:3b:
         cc:95:bd:6f:41:c0:ab:ae:98:5c:49:ed:f3:88:d9:33:fe:19:
         94:e0:bb:eb:fc:28:98:40:7d:c6:60:05:b0:e6:98:45:af:87:
         19:86:1a:74:a1:9a:6e:71:59:96:5b:9d:47:19:5a:23:eb:08:
         1d:7d:e4:a7:ed:d9:2e:af:dc:a8:3a:d2:e6:90:70:bf:3a:20:
         93:0d:4a:f8:30:fb:8d:77:db:a7:7a:66:d7:1c:3a:f6:85:1b:
         04:d8:9c:a1:ca:c2:07:38:f7:06:12:a4:12:da:20:5f:ee:cc:
         26:3d:df:5e:8c:a3:47:1b:18:37:f9:81:97:07:a0:aa:06:7f:
         4e:66:f7:dc:2d:62:fe:60:2d:cd:a8:d9:53:f8:85:a2:70:e0:
         f7:28:e2:bf:e5:24:52:19:03:e5:4e:fd:c5:42:1c:20:b3:36:
         df:d6:8d:07:e5:aa:96:9b:3d:79:ab:ab:d5:55:37:55:32:d7:
         42:f1:d3:e6:6b:29:f5:09:5f:0c:d9:0f:ff:04:42:6f:34:e4:
         2c:3c:77:22:bb:4e:a3:15:8c:cf:67:99:66:99:3a:67:e3:28:
         c6:09:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:32 2024 by rpki-client on console-fra.rpki-client.org