Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File:                     Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier:          RTgpNN0cpeL+nW60rVxXT6toQSiyUSCosOd8T9FdkQo=
Subject key identifier:   43:FE:8B:F8:3A:27:F7:68:4B:72:D6:AF:1D:0B:26:E7:35:39:CD:18
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer:       /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial:       019040E48C777AF4ACA3955D55DD4F44426A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number:          B7
Signing time:             Sat 22 Jun 2024 17:00:38 +0000
Manifest this update:     Sat 22 Jun 2024 17:00:38 +0000
Manifest next update:     Sun 23 Jun 2024 17:00:38 +0000
Files and hashes:         1: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: qWzdn3tlYSsgxHB4hZVIU1Z6L6xThqGFIbjf956IPQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:e4:8c:77:7a:f4:ac:a3:95:5d:55:dd:4f:44:42:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
        Validity
            Not Before: Jun 22 17:00:38 2024 GMT
            Not After : Jun 23 17:00:38 2024 GMT
        Subject: CN=43fe8bf83a27f7684b72d6af1d0b26e73539cd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:50:64:cc:cf:b4:d1:9b:25:ca:b6:3c:4a:
                    1c:f7:f9:4c:f1:1a:8c:d1:af:e1:67:53:91:13:b1:
                    8e:dd:d4:d0:49:97:71:3a:d3:70:89:98:94:f3:11:
                    39:33:8d:22:8d:12:4f:a6:38:cf:96:aa:20:9c:be:
                    79:1e:54:15:4b:b3:91:bb:26:c8:96:43:05:2b:5c:
                    3c:60:3b:2b:74:f7:1f:b7:11:29:00:f7:10:bc:b5:
                    03:1f:5f:88:15:ec:bf:6f:04:a1:43:3d:a5:81:96:
                    38:c3:49:54:ea:e2:74:16:dc:5c:2e:28:17:53:a2:
                    a4:4f:3f:1c:fd:67:6e:6b:06:dc:78:e2:93:ff:0b:
                    2e:0e:0b:4b:60:7d:4a:b1:a9:57:1c:9d:46:34:83:
                    00:c0:a9:25:4b:50:39:b6:cd:16:61:60:8c:52:88:
                    95:e0:57:d0:1b:c7:fb:de:88:fc:1b:ed:96:5b:54:
                    6e:28:4b:5c:ba:37:da:bb:fe:b4:06:da:f1:6d:3c:
                    a4:34:13:45:c7:64:64:bb:32:dc:00:79:d4:77:af:
                    f3:68:da:c1:8c:f6:9e:ab:d1:bf:f7:6a:97:27:0e:
                    e3:46:7d:aa:be:5b:e9:75:63:b3:6a:6a:c9:bd:65:
                    ca:16:ba:43:1b:b8:d4:09:80:42:43:65:4d:53:97:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FE:8B:F8:3A:27:F7:68:4B:72:D6:AF:1D:0B:26:E7:35:39:CD:18
            X509v3 Authority Key Identifier:
                keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:13:c1:17:9d:a7:07:79:db:f3:49:87:5f:29:10:53:d5:37:
         83:8c:a3:08:1a:a8:f6:00:f6:82:ba:1f:e3:9d:f2:b9:6f:52:
         db:41:b2:71:fb:1d:19:f2:e8:07:79:40:20:1e:b2:44:15:70:
         8c:57:16:14:35:79:e6:64:9a:95:7c:49:59:a6:7e:24:04:4f:
         97:54:ba:55:38:41:00:a0:b0:25:b2:34:ab:db:8d:87:1d:2e:
         f0:ea:3b:89:8b:c5:90:f2:11:a7:60:7d:1e:e4:c2:1e:4f:0e:
         aa:18:da:04:cd:38:f6:e5:45:d1:83:00:12:f1:bf:39:3b:da:
         1e:5c:e8:46:98:e7:cb:ed:99:d4:75:7d:24:39:bb:46:53:70:
         a2:93:45:fe:72:52:83:c7:ef:0f:52:a9:dc:d9:b4:58:a5:b5:
         54:e8:f1:95:83:63:85:19:8f:f0:8e:c7:f6:b8:2f:f0:b4:a5:
         d0:36:e3:20:d1:fe:24:56:95:60:7a:79:da:d0:a3:7e:36:42:
         0f:79:19:7a:69:46:22:af:bc:15:9c:b3:3d:1d:61:74:6c:60:
         e1:8f:00:1f:61:97:8c:1a:1b:82:90:f8:b1:31:3a:e5:bd:e0:
         fd:b3:6c:d2:5f:70:7f:c2:4d:65:d2:77:7b:6c:0f:1f:cc:b2:
         fb:13:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:42:06 2024 by rpki-client on console-ams.rpki-client.org