Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File:                     nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier:          fQG3BXAHi3vFicPx/hDEgS9WHcs5IWjsG9MtItpGozE=
Subject key identifier:   A7:F3:05:CF:22:C4:AD:6A:B4:49:12:DD:E8:19:9F:CE:F3:D6:1B:49
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer:       /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial:       018F8749284023433F393F66167CAE59060D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number:          0942
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: CDT1AQ5kIQyhnDklZq26oSsjpJU.roa (hash: 3wNrNriaT6DFLn/xqZ/dFwC2JXNVgBKefU3nNrhywIU=)
                          2: FTso0lWfJF7slkbyzAgqYdUFktw.roa (hash: Yx1+5trbmTTeu7To2qBsupKCGzkwzAZnzGZQKg51a50=)
                          3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: +i9wND7a11yVlWIifIA0nS1FOI2QTCWCXnXcctvfpmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:28:40:23:43:3f:39:3f:66:16:7c:ae:59:06:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=a7f305cf22c4ad6ab44912dde8199fcef3d61b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:1f:18:6d:96:7f:33:3f:39:f4:2b:76:1e:
                    b9:c5:ba:07:b2:f2:de:94:72:b0:18:7f:70:a1:d7:
                    4d:33:f3:b4:c0:8e:35:6f:02:ed:61:96:50:a4:6a:
                    61:c1:1e:99:a4:a2:ee:b1:5a:0f:3a:b9:08:f4:95:
                    0b:6a:3f:45:32:24:a5:dd:dd:14:56:8f:e5:06:33:
                    f4:24:09:96:54:98:30:e1:be:5c:38:b3:8a:d0:21:
                    9f:91:62:24:55:3b:b6:0b:40:87:7f:08:03:64:4d:
                    8a:fd:2f:33:6a:2d:b8:58:b0:77:8d:d4:cd:77:d6:
                    b5:9d:92:96:4e:e6:89:cb:48:ce:64:f9:27:70:b3:
                    ac:40:22:85:ca:9e:cb:f0:b2:3c:3e:fe:28:f3:d2:
                    b4:19:0e:5a:bc:ff:51:e7:93:8c:66:fb:ed:d6:64:
                    b4:3c:84:d0:bd:68:b1:d2:32:b5:ac:63:23:47:78:
                    45:6d:89:76:1f:4a:4c:b0:59:0a:5a:ae:d7:14:d3:
                    e9:bc:d8:db:f1:9a:4c:37:e3:7a:37:48:7b:e0:b3:
                    02:04:5b:a7:be:6c:be:b5:8e:8c:b1:d9:cc:06:36:
                    f9:7c:45:f1:ee:e6:fe:25:11:24:4b:c2:0e:b4:a2:
                    5e:c1:b9:90:93:8d:c1:50:f6:2e:9e:57:d6:70:b1:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F3:05:CF:22:C4:AD:6A:B4:49:12:DD:E8:19:9F:CE:F3:D6:1B:49
            X509v3 Authority Key Identifier:
                keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:71:1a:6f:b0:d4:80:58:2e:1d:08:a6:dc:ed:9d:d0:60:
         47:cb:9c:e0:fa:af:62:cf:0e:75:01:81:0e:7e:df:9f:d9:43:
         60:5f:9d:0b:4d:68:2d:1d:65:f2:f0:72:af:bf:38:7d:bf:6b:
         fd:15:22:0f:1b:07:66:a5:ac:51:2b:87:b0:a6:a1:69:a8:81:
         ba:ee:56:30:43:48:37:3f:4f:2e:00:0f:7a:f9:60:a2:98:44:
         87:4a:d0:29:98:67:4a:29:db:b5:43:f0:6c:a7:cd:fa:cb:7e:
         57:6b:cb:d8:d8:e9:20:06:29:c4:1f:2b:b4:9e:27:a1:e4:6c:
         bd:ef:7c:92:ba:c5:2c:45:d8:0a:21:90:bf:23:82:30:3b:28:
         f9:91:f4:2f:9b:ec:0b:9b:df:cf:04:95:c1:77:f3:59:92:13:
         eb:91:c3:bb:a9:20:13:42:ee:63:7a:01:b0:30:3e:9b:67:53:
         dd:90:db:3b:9e:a9:09:8b:aa:97:be:b8:ec:38:92:50:08:41:
         4f:38:e1:8d:47:66:37:9a:fa:94:32:6a:65:8a:bf:80:41:99:
         21:53:b1:9f:8d:b4:0d:33:0c:d7:98:4a:e7:d1:58:82:e0:3e:
         04:55:69:29:81:3f:90:f4:55:93:3d:b4:64:75:f8:69:ed:eb:
         4d:76:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:38:00 2024 by rpki-client on console-fra.rpki-client.org