Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
File:                     nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft (raw, json)
Hash identifier:          HP7q9g7aBdr6JazZq4k/69N9x/49Nj6CRkOLdzCj5MU=
Subject key identifier:   A4:E4:26:CB:CD:3B:7A:28:5E:B8:34:08:4F:AB:00:C1:AE:58:8C:33
Authority key identifier: 9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
Certificate issuer:       /CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Certificate serial:       0190521137E9A3AB28C34F891C7EE79C37AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
Manifest number:          C6
Signing time:             Wed 26 Jun 2024 01:02:58 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:58 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:58 +0000
Files and hashes:         1: nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl (hash: oetC9uTfelNHb2s7cbBFBz+OyvWO8hoaxzzmEkGf22M=)
                          2: rl3IpZtk0UWrMF_j3f1b-uKliiE.roa (hash: FB+DdC582u7dbGZXS/9NvDB4sUwsuCF3UREgyZAlAX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:37:e9:a3:ab:28:c3:4f:89:1c:7e:e7:9c:37:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
        Validity
            Not Before: Jun 26 01:02:58 2024 GMT
            Not After : Jun 27 01:02:58 2024 GMT
        Subject: CN=a4e426cbcd3b7a285eb834084fab00c1ae588c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:2d:ca:26:a7:da:23:50:ed:66:e7:b7:1b:
                    34:e5:c4:c7:91:c3:39:c8:69:c6:f6:20:8d:b1:f0:
                    f1:83:1a:b8:f7:74:17:dd:bb:60:05:ef:c5:65:64:
                    fd:10:81:52:6f:be:ba:8c:21:04:67:5c:07:56:50:
                    71:13:a8:de:6e:b5:78:3f:1d:47:e0:ef:4d:15:eb:
                    26:28:46:11:49:b2:f6:fe:2e:0b:a3:65:a8:ca:d0:
                    bf:0f:06:66:fd:7f:1f:e3:b1:b1:72:77:53:06:50:
                    2c:62:6f:ce:11:c0:bc:07:e8:5f:1f:52:29:c8:1f:
                    6a:31:5f:c3:df:2f:22:1c:ea:92:46:31:d0:8b:f0:
                    db:99:f7:b9:aa:7f:10:a6:12:06:e2:d4:fa:0e:03:
                    85:ff:69:1f:a1:8e:51:6a:9c:c8:eb:c2:2e:6a:9f:
                    88:af:5d:e8:e3:82:5e:97:9f:8b:03:82:70:7f:92:
                    d0:af:2a:9e:ae:29:7c:5c:e9:34:89:53:d1:66:3e:
                    61:28:8a:e1:9a:07:70:4e:d8:b7:7c:77:df:75:31:
                    e3:c8:cb:ab:98:af:b4:3f:1a:e0:ab:28:45:b2:39:
                    41:b7:32:c7:9e:d9:d7:3e:4c:37:70:9d:66:80:0b:
                    bc:46:e3:80:ed:f2:73:ad:5d:d2:eb:ae:9f:1b:4b:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:26:CB:CD:3B:7A:28:5E:B8:34:08:4F:AB:00:C1:AE:58:8C:33
            X509v3 Authority Key Identifier:
                keyid:9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e6:03:81:71:61:0f:7d:78:d2:24:c6:7b:2d:b2:02:96:c7:
         35:c3:68:52:8b:09:a4:35:73:17:d3:77:86:0c:b1:4c:37:b1:
         c8:f2:c3:45:92:88:24:56:3d:dd:89:16:a3:53:b6:4e:2e:8e:
         5d:49:1e:7e:b4:ce:17:77:7e:a7:c5:89:1c:6f:18:cd:7a:9c:
         e5:e1:af:0f:7e:cd:0d:6b:c9:ed:57:90:df:43:ae:8d:c7:2c:
         d6:67:70:fe:62:bf:31:9a:04:de:3c:02:1f:95:69:1e:f3:86:
         d1:19:41:1e:76:3b:4c:b5:a2:a5:38:67:13:07:51:cb:6a:37:
         d8:77:3a:69:20:f2:2f:9d:b7:d2:de:e1:16:d0:de:f2:36:c5:
         7f:4c:8e:fc:11:2e:47:5c:eb:9a:45:3d:ec:93:48:db:c3:c4:
         57:96:8c:b1:f5:f5:c9:13:1b:41:c9:74:a7:7c:21:51:c3:92:
         93:81:bd:39:ac:f3:b9:f8:36:cd:f9:3a:cb:5e:48:5e:da:2f:
         48:c2:6d:27:4e:39:8f:e1:a5:b5:37:a0:29:08:4c:2b:89:53:
         ec:ad:68:04:70:3f:1e:94:ed:fb:09:06:98:4c:39:21:25:01:
         9f:9e:48:4a:f4:b5:7b:c9:a0:a2:4d:5d:27:c1:f7:22:d9:90:
         37:ac:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:59:47 2024 by rpki-client on console-ams.rpki-client.org