Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
File:                     NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft (raw, json)
Hash identifier:          FHxBwiT/I/K2qbDBMV78L/WYyTnG76aHUMAP4F4t6jc=
Subject key identifier:   C5:6D:AF:D8:FB:53:AF:91:47:19:66:27:19:F9:9B:6C:EA:5F:45:6F
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Certificate issuer:       /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial:       01901DED9402EF0A052BD443E984734838C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
Manifest number:          11D0
Signing time:             Sat 15 Jun 2024 22:03:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:47 +0000
Files and hashes:         1: 0-KJ0bqLfGrRwN3JSnMOhF6K7wI.roa (hash: E0Kj+W6esVMqIKCGcUkEMei4ErKpGpaFSbg9mRjnHwc=)
                          2: 49aTmhDYzXLAyR12gVzi2I8mLLQ.roa (hash: H18UXwiiAGRCmHT4O0Suosn3A2Lo64+OBbO6WiJzT7A=)
                          3: 9jcxPazIo4nuJLzwGEzWMI2OInA.roa (hash: M8oGMIEuUrsT2GxfCTSE96wGnnJ7EGlJ/RFRqjPPIpo=)
                          4: KVTelATikecHl2EjnoTqXX-_CG0.roa (hash: 9QnvkFLkbi1WJoXsSbQSvvnAzwt2wfdurqbPqy+mNgg=)
                          5: NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl (hash: zL7N9Azp5rDe3rPDp4JZPt0OJyrDLqCJhd4Dnyl7o9o=)
                          6: _Mn4U7Wn6sS8CKOMDurkaBPUhOg.roa (hash: pnrZp/3win1GEugEIE2pI0xFb1lkkaQ5DcLCeq8On1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:94:02:ef:0a:05:2b:d4:43:e9:84:73:48:38:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
        Validity
            Not Before: Jun 15 22:03:47 2024 GMT
            Not After : Jun 16 22:03:47 2024 GMT
        Subject: CN=c56dafd8fb53af914719662719f99b6cea5f456f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:b0:33:76:ae:ec:08:3c:d8:8b:18:2c:96:
                    58:7b:06:a6:7e:75:03:a0:3a:0f:76:ae:4f:0c:10:
                    fb:e0:7f:ac:7e:48:dc:c4:77:2c:0e:02:bf:8a:7d:
                    16:3b:7e:8d:d2:b8:ed:6f:c5:43:3d:ce:67:61:20:
                    9c:c1:6f:83:55:62:64:11:1f:11:e4:f5:88:86:2f:
                    bb:2f:e6:2a:30:6e:f8:a4:33:46:6c:bc:fc:63:83:
                    94:f2:cb:06:ae:40:cb:f9:4c:df:5d:e5:63:e2:35:
                    fa:40:6b:cf:ca:56:a0:58:73:32:18:e4:af:70:22:
                    6d:83:2c:e2:e6:a6:07:06:93:e4:ad:b3:b9:98:c1:
                    5a:40:d3:d5:78:8f:2d:07:69:05:48:02:7e:57:73:
                    ad:e9:a5:18:8d:6c:92:71:8a:0c:de:67:59:27:74:
                    90:09:c7:59:44:f8:eb:50:23:66:7e:b1:75:8d:de:
                    5f:90:2c:3e:2d:e1:76:1f:dc:58:a2:c9:0a:20:aa:
                    f5:11:bd:df:99:6d:b6:d5:fb:57:7e:3a:97:88:c2:
                    08:ba:d0:60:c2:d3:95:ae:cc:b7:61:6d:58:a3:9e:
                    65:05:05:42:38:93:d5:9d:dc:01:37:24:e7:ee:a9:
                    08:4f:94:d9:db:0f:0e:c7:79:83:d6:fe:50:2d:e6:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:AF:D8:FB:53:AF:91:47:19:66:27:19:F9:9B:6C:EA:5F:45:6F
            X509v3 Authority Key Identifier:
                keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:91:a6:df:46:56:ea:e9:45:bd:e8:94:cf:b4:ef:6c:13:
         9c:3f:59:3e:28:b0:ec:4b:2c:2d:c8:8c:40:6d:33:86:0a:d2:
         10:1b:e8:57:2e:db:23:42:cb:48:23:96:1e:f3:62:08:5e:a8:
         64:27:bb:51:a4:38:c5:21:a4:f5:10:ac:6e:d4:20:06:14:cb:
         38:d1:40:7b:e2:11:3e:02:45:42:4c:6f:43:67:11:0d:82:62:
         61:de:2c:45:78:2a:94:94:e1:9a:43:ad:7e:cd:02:57:6e:a9:
         11:e3:f6:64:e1:10:5b:84:91:e7:83:68:61:fc:5b:d9:e3:9e:
         a0:b7:fb:9e:67:ed:a9:ea:51:e8:4e:8e:92:4f:c1:29:10:78:
         fe:92:67:b4:65:f3:cc:73:d6:ec:41:e9:99:e8:a9:e9:e5:cd:
         39:c8:5c:4d:61:84:fa:65:6d:0a:72:7c:c1:1e:8e:ca:0c:fd:
         bb:62:14:a8:5a:3a:f0:f9:fd:5a:57:ef:89:7c:fc:2b:3d:36:
         84:28:36:09:2f:88:96:21:8d:b1:9e:ee:eb:c6:53:2a:f8:a7:
         c3:55:25:3f:15:0d:e1:46:b9:2e:bb:10:ed:04:f8:fd:a6:69:
         d0:50:e2:11:04:d5:9a:22:5b:37:3b:6a:bb:63:08:43:0b:c5:
         6b:ee:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:32 2024 by rpki-client on console-fra.rpki-client.org