Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          lQi3rQntoS6hQX9vbpMir3NH936tUTrFRXxlV7/vmRA=
Subject key identifier:   11:A7:EC:0E:D8:F3:51:F2:69:B9:32:85:0B:C3:90:22:0B:B9:CA:F8
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       018F874ADBC2CB8EAE3941C2D53A781D0A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          03B9
Signing time:             Fri 17 May 2024 16:03:01 +0000
Manifest this update:     Fri 17 May 2024 16:03:01 +0000
Manifest next update:     Sat 18 May 2024 16:03:01 +0000
Files and hashes:         1: bPlQ4rorv04UuRkNDeoJ7b9Ze04.roa (hash: vquYVwnYYWpoRn+dyjcEMwewql711vYaSp7z+u4hifg=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: /66zYd0aGTFqvCbjvWNvthbLYe1dJTlf0OavBl6cyP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:db:c2:cb:8e:ae:39:41:c2:d5:3a:78:1d:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: May 17 16:03:01 2024 GMT
            Not After : May 18 16:03:01 2024 GMT
        Subject: CN=11a7ec0ed8f351f269b932850bc390220bb9caf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:7e:e3:cd:c6:98:f8:1f:dd:d4:4b:44:f8:
                    1f:cf:3b:b3:27:99:4c:28:73:d8:e4:b2:6d:c1:e1:
                    11:6e:6c:f8:b5:e1:47:49:a6:0c:97:4f:62:9d:d8:
                    6d:bd:56:05:bb:a1:b9:70:37:b6:f5:cb:5f:90:3e:
                    87:2a:84:5f:8b:a7:06:3c:2f:fa:46:1a:b5:c6:b0:
                    60:f0:2e:62:5f:04:73:ad:a5:79:27:e2:6b:cb:b4:
                    b1:7b:ff:b7:f3:7b:c3:a4:f9:a2:19:aa:c4:84:db:
                    43:19:4d:09:af:5d:55:12:70:a0:46:fa:5e:f0:8b:
                    ad:75:cd:e1:f4:39:c4:b9:32:64:7f:96:ee:7a:77:
                    3c:e3:0c:01:3d:83:61:1c:c7:2a:8d:c9:24:5e:b0:
                    3a:a4:95:61:66:ab:17:cf:23:64:30:d8:0b:4e:91:
                    dc:a2:f0:75:a6:be:f2:70:63:a3:24:e4:60:c1:08:
                    e8:dd:83:8f:d4:f1:ec:32:de:eb:92:73:e9:36:5f:
                    8b:05:20:e3:f6:d0:91:50:a2:46:53:b8:24:26:5d:
                    82:83:2a:5f:46:ce:4a:1b:94:38:a1:0d:fb:63:79:
                    9d:8b:ba:b1:8f:af:91:72:d9:d1:08:67:26:f5:28:
                    78:10:74:7e:0a:aa:67:f2:b6:36:3e:81:1d:fd:36:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:EC:0E:D8:F3:51:F2:69:B9:32:85:0B:C3:90:22:0B:B9:CA:F8
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:24:f1:f7:90:e0:0a:8c:b9:80:14:c8:ef:3c:89:a7:61:
         5b:d3:d4:30:73:aa:39:8d:88:26:14:09:46:aa:96:28:bc:4c:
         4f:54:40:8a:f8:db:51:ed:67:5e:3a:b1:07:0f:63:35:ce:97:
         2d:63:aa:2d:a4:25:b7:34:95:e6:18:8d:82:d4:52:03:9a:67:
         15:a7:20:e6:17:a3:ab:3d:5b:b3:4c:bb:82:9d:52:e0:98:99:
         24:db:96:f4:0f:c5:fd:ff:b8:39:e2:c1:51:4d:f4:df:2b:36:
         1b:0d:ff:1e:c8:a3:3a:b4:48:e1:3b:3b:a8:04:f6:56:f3:a5:
         e9:87:68:4b:d2:8a:38:61:fa:28:40:2e:ce:d7:fa:24:2d:16:
         b5:68:27:80:ab:dd:f2:f4:c1:4f:52:3b:56:a6:d9:0b:36:7a:
         52:69:b1:80:08:ca:8e:5e:ba:8e:fb:6e:60:cc:51:bd:f7:c9:
         72:51:49:0a:0d:82:db:7a:dd:78:4f:e1:2d:68:37:20:20:ac:
         55:e5:09:2e:64:95:85:a8:66:bc:c3:60:77:b0:26:4b:19:cc:
         48:93:eb:5d:49:aa:00:14:ef:5a:46:1c:01:06:bd:ce:7e:fc:
         2d:5b:a3:e6:fd:46:20:08:2f:52:6c:2b:b1:53:ad:89:3b:ca:
         96:a2:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:53 2024 by rpki-client on console-fra.rpki-client.org