Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File:                     NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier:          wPJDNKhomhoJYsXQ+FXNfZwwHAgPzoJiP/qnWjUv/aE=
Subject key identifier:   A6:70:1F:DA:5E:6F:BE:0C:6B:41:F7:27:E7:AB:E5:16:25:F8:29:D0
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer:       /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial:       018F87ED63B5A7637F57150A689A4256522F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number:          1107
Signing time:             Fri 17 May 2024 19:00:32 +0000
Manifest this update:     Fri 17 May 2024 19:00:32 +0000
Manifest next update:     Sat 18 May 2024 19:00:32 +0000
Files and hashes:         1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: zBEC76EGN/m69j8INEbhdL7JZoiaXDffaQDonZLWZ3k=)
                          2: k8xjJo9zY4NR-rLPtlfj-SWeyjk.roa (hash: tBZUKti2YzPVqm+G3eO0LRmISdtpLK81zs2VnKHEgYA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:63:b5:a7:63:7f:57:15:0a:68:9a:42:56:52:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
        Validity
            Not Before: May 17 19:00:32 2024 GMT
            Not After : May 18 19:00:32 2024 GMT
        Subject: CN=a6701fda5e6fbe0c6b41f727e7abe51625f829d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:22:ca:3e:aa:e2:4c:6e:54:82:95:0f:e8:
                    b5:d8:7a:7e:c3:10:52:2c:67:f0:cd:78:bb:f5:77:
                    ff:85:c9:ea:50:be:c1:17:6f:60:dc:22:11:e2:bf:
                    ef:ee:4b:0d:7c:bd:aa:90:c8:ff:f9:46:6a:bc:56:
                    36:de:86:39:52:a8:f9:f6:b8:06:fb:56:2d:7e:6d:
                    f8:48:20:96:f1:ff:a1:20:6f:b1:3f:3d:b5:29:9f:
                    91:54:fa:8b:5b:c9:fb:4a:ab:bb:85:62:d2:a1:43:
                    f2:8e:e8:9f:97:4b:83:ca:7e:82:28:02:db:50:0b:
                    ba:28:c4:b5:42:cd:4d:f2:29:22:98:43:d0:a4:96:
                    ff:3d:84:cf:5e:80:12:4c:76:85:4e:67:a5:9a:dd:
                    3a:23:c7:be:2c:c6:b6:7b:28:13:e1:e2:e6:85:88:
                    e6:c7:f2:82:ed:77:37:b3:84:80:93:83:ce:95:c3:
                    31:4c:2a:6a:84:7d:46:6e:52:ee:6b:70:ad:42:e3:
                    5e:d5:8d:15:93:e4:1d:b9:f0:e0:35:6e:6c:8d:d8:
                    f4:34:7b:f7:05:db:76:ab:be:ce:4d:44:0d:2f:f3:
                    e9:99:80:d2:26:f6:3e:09:9f:5d:45:9b:08:30:c6:
                    7e:a9:15:21:0f:af:4d:38:2e:ae:ef:26:dd:8e:c4:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:70:1F:DA:5E:6F:BE:0C:6B:41:F7:27:E7:AB:E5:16:25:F8:29:D0
            X509v3 Authority Key Identifier:
                keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:de:58:0d:d3:52:f6:40:6b:04:0b:14:80:59:00:19:35:80:
         26:02:af:6d:03:3e:73:bb:07:de:4e:25:fa:28:f6:ff:df:2b:
         4e:0b:a8:78:c3:31:e1:fe:a3:6d:af:4a:15:f7:bf:a6:72:89:
         9f:bd:23:31:89:f3:8d:e6:6a:48:ad:d5:28:24:a9:ea:7d:43:
         3b:8c:aa:81:26:e9:15:4a:e0:7d:b3:50:88:88:62:35:9f:22:
         a8:60:86:64:2e:73:62:5c:65:3a:d4:f9:26:81:b6:df:64:11:
         d2:19:04:5a:ce:22:0d:fa:b5:e7:23:f7:b7:fb:c8:8e:ef:f5:
         a9:18:87:92:7a:9e:1b:28:ef:74:34:dc:f5:a4:e8:6e:17:53:
         f4:3e:8b:84:b4:49:f7:be:91:80:3c:a5:bf:30:83:dd:14:78:
         2e:c3:ce:d7:4c:9c:35:39:8a:6c:ae:f8:5b:aa:15:0c:fb:1e:
         65:b2:a8:45:12:06:38:29:6f:83:c3:c2:0b:a1:77:97:78:2e:
         d5:8d:22:aa:38:6e:ab:9b:fa:2b:53:14:88:6a:d6:e6:cb:b6:
         8a:b9:e9:88:0f:f9:78:a7:ec:45:a8:2e:15:ce:16:83:6d:ed:
         02:50:b8:25:71:47:42:8f:78:7e:21:18:58:7d:03:0a:69:d5:
         3d:40:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:34 2024 by rpki-client on console-fra.rpki-client.org