Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File:                     NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier:          RkXE5V+DrMk7PQQql5TyoImp3PbtEGaUDgb/zB2ZWxg=
Subject key identifier:   82:58:B4:44:FC:E6:E8:23:A0:C8:23:DE:9B:CB:79:6F:83:E9:CD:1D
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer:       /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial:       0196CCF3A95A4D2296D553D48A2723AF6766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number:          153B
Signing time:             Wed 14 May 2025 04:00:42 +0000
Manifest this update:     Wed 14 May 2025 04:00:42 +0000
Manifest next update:     Thu 15 May 2025 04:00:42 +0000
Files and hashes:         1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: FkZilWnB7fNKgpUXMtN4ZHEXtyPb3L4IkwQOKERk8xE=)
                          2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:a9:5a:4d:22:96:d5:53:d4:8a:27:23:af:67:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
        Validity
            Not Before: May 14 04:00:42 2025 GMT
            Not After : May 15 04:00:42 2025 GMT
        Subject: CN=8258b444fce6e823a0c823de9bcb796f83e9cd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:fb:7f:d7:ea:4a:80:ef:42:b2:25:68:3b:
                    52:68:4d:07:ca:db:81:4b:36:a3:0a:58:70:1f:cf:
                    be:6b:31:11:98:76:7d:47:4c:fd:7e:1a:dc:d4:0c:
                    c7:04:7c:df:60:61:54:a3:ff:fc:1a:fb:34:50:10:
                    b7:57:22:8c:83:71:9c:a3:0c:0e:0b:e5:63:9f:57:
                    12:89:08:63:40:60:a9:22:12:89:08:9d:de:98:da:
                    9a:93:ae:9e:68:2d:b9:21:95:c9:55:4e:ed:73:74:
                    3f:08:d8:fe:86:0d:85:7b:43:c8:56:c2:b4:42:06:
                    f8:75:db:eb:1a:e5:73:8d:ec:bc:56:6f:84:c3:43:
                    b9:05:5a:d9:fb:15:09:ea:5d:c5:56:7e:72:b6:3a:
                    47:73:2c:e4:63:31:e9:1a:60:39:f0:bd:fb:6a:cb:
                    a9:e4:8f:06:19:08:27:fa:0d:b8:1a:a4:96:9b:60:
                    77:6e:d3:71:ab:7f:2f:f4:66:88:6d:28:5c:7f:07:
                    83:d1:90:b6:63:4a:c8:d9:d4:6d:8c:48:66:76:c0:
                    80:97:58:86:db:db:74:b6:58:b6:74:83:a1:85:a0:
                    87:3b:57:aa:4b:56:7c:fc:0e:a9:99:e3:d9:e5:11:
                    f9:3d:6d:63:e7:81:58:30:ac:2e:28:ba:18:61:af:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:58:B4:44:FC:E6:E8:23:A0:C8:23:DE:9B:CB:79:6F:83:E9:CD:1D
            X509v3 Authority Key Identifier:
                keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:da:da:94:9a:91:3a:e1:62:ce:3c:7c:fd:42:07:2b:b4:61:
         cd:24:59:07:ac:cd:14:9d:30:1c:22:17:77:97:e0:ae:97:df:
         1a:93:07:c6:e8:eb:ea:0c:0a:54:fd:dd:e9:2e:e9:94:c7:ef:
         df:df:49:a7:a7:cd:04:8e:1b:e8:6a:c6:93:44:da:bf:05:3d:
         7e:f5:b5:41:63:0a:2d:67:33:ef:08:5a:50:17:85:a3:27:37:
         c6:62:32:ad:cd:36:60:76:d3:85:cb:54:28:e7:b4:56:61:c4:
         06:57:e5:9e:ec:32:47:e7:63:ab:08:52:1e:5d:72:c9:bc:42:
         64:7a:7e:a3:21:09:23:b8:90:5a:4f:74:1a:49:c4:a6:e9:06:
         b8:fa:16:a3:33:28:5c:ac:93:4d:46:33:fb:93:e9:14:90:44:
         77:08:90:67:d4:c1:6d:17:57:b6:b5:58:29:29:88:b6:69:de:
         79:04:08:13:1a:dc:32:1e:f6:e3:a1:2a:5f:53:07:31:be:b6:
         97:e1:69:b3:24:7f:47:8f:cc:d4:f3:95:19:c0:9f:66:89:a3:
         d5:32:06:7b:65:46:b2:6c:12:80:07:41:b9:41:e6:5b:92:6d:
         7f:27:51:e5:59:b0:b9:34:14:48:0e:bf:15:49:67:1b:7a:d7:
         cc:52:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:28:23 2025 by rpki-client