Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File:                     nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier:          Jhsm6QtYsClzk986V5mzPNFXjcEYsxHlhZRpdxhToMI=
Subject key identifier:   FE:F9:0A:E8:F5:FA:65:3A:B4:CD:DF:AC:AB:AE:69:4A:E4:9A:32:4C
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer:       /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial:       018F8823FD3CF9C7AC0128F022167127DDEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number:          09AC
Signing time:             Fri 17 May 2024 20:00:10 +0000
Manifest this update:     Fri 17 May 2024 20:00:10 +0000
Manifest next update:     Sat 18 May 2024 20:00:10 +0000
Files and hashes:         1: BBjR4xg6_QtvFLfM0hyysyywanM.roa (hash: /BShAsVPVK5S3w25mPqXVobt7aEDK1IMUBgHLDrlBp8=)
                          2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: 38pbhmVLnVHN0m+ls9rOyw4yW7R/gDKX3zd39Ep3IFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:fd:3c:f9:c7:ac:01:28:f0:22:16:71:27:dd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
        Validity
            Not Before: May 17 20:00:10 2024 GMT
            Not After : May 18 20:00:10 2024 GMT
        Subject: CN=fef90ae8f5fa653ab4cddfacabae694ae49a324c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:fb:30:be:04:01:18:bc:ed:10:aa:ba:a9:
                    a4:5f:df:af:63:f4:70:55:9d:75:dc:2b:e4:e9:0e:
                    80:d8:35:20:0a:18:bb:b5:67:39:c3:6c:8c:17:be:
                    bf:a6:5b:84:9d:d9:ab:3a:3c:67:b1:66:7c:4c:41:
                    33:2a:26:0d:f6:1a:b4:0e:ef:9e:4a:97:8b:1a:58:
                    1e:7b:36:fb:ab:b9:27:d5:a6:16:44:77:13:35:d0:
                    16:fb:e0:33:73:96:70:fc:19:30:35:2f:24:f1:f8:
                    f8:82:49:f9:2b:e8:b7:a4:d7:f6:50:78:f2:3c:18:
                    bc:52:79:65:7b:19:d0:44:69:30:22:10:17:20:71:
                    97:e1:04:61:81:5f:f7:25:31:a4:e3:ca:7c:e4:65:
                    2b:5b:3a:96:aa:10:57:f3:d0:11:e2:0f:cb:e5:da:
                    39:05:63:02:46:1c:f4:73:97:a3:32:f4:53:bb:56:
                    c6:4f:1f:5e:cc:e8:48:34:cf:5e:83:93:21:01:3c:
                    a8:81:d7:9a:0a:46:5f:b1:a6:b6:88:75:2a:d9:f0:
                    9b:6f:6e:fd:2d:99:a0:14:bb:4a:f3:0c:ba:d8:29:
                    1a:02:12:3e:7d:97:63:a9:bb:62:91:c7:4b:1a:45:
                    ff:a7:66:f2:b4:4a:6f:92:8a:6e:67:a6:51:54:85:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:0A:E8:F5:FA:65:3A:B4:CD:DF:AC:AB:AE:69:4A:E4:9A:32:4C
            X509v3 Authority Key Identifier:
                keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:f7:7c:9d:0d:95:1f:89:55:07:11:a3:05:01:29:7e:d9:
         48:81:68:82:1a:18:ee:9c:6a:35:05:e1:3b:f1:d0:52:9c:da:
         f2:e9:ff:12:16:24:cb:5e:43:bc:30:87:8a:66:0d:f2:b7:f4:
         38:ec:60:16:28:1f:93:81:22:aa:94:ab:a9:33:08:e7:42:97:
         42:9c:ee:96:03:20:ee:01:0a:cd:90:0d:77:e4:49:0b:34:82:
         20:58:19:44:bf:a5:8d:18:d2:a0:b0:a3:5c:c8:48:dd:58:11:
         c0:ec:e3:5f:0f:78:f6:46:a7:92:b3:13:77:32:7c:5a:57:3c:
         07:c0:91:19:55:68:5c:5d:6d:51:03:13:c1:09:43:f4:5b:27:
         ae:0c:6a:2f:50:4a:a1:7e:5d:99:41:80:8c:66:c0:85:91:6a:
         e6:81:21:24:50:74:6c:8c:de:8b:a6:d0:6e:83:ef:47:0d:f2:
         13:5c:c8:65:94:0c:b1:52:92:44:76:3b:d5:51:fe:28:8b:1e:
         8c:62:49:74:21:1a:e4:9f:ea:b9:1e:94:4a:57:f2:61:9a:ed:
         fe:a9:c0:db:2a:f3:59:c8:1b:3b:22:f3:b1:31:0d:0f:7f:56:
         78:9d:d1:c3:72:18:b6:ff:22:d8:e1:09:5c:06:e2:8f:45:0e:
         52:49:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:29 2024 by rpki-client on console-fra.rpki-client.org