Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File:                     NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier:          joVhvtQRz2w7kV5su56C2RF7vyM311o/USXxPV5UI50=
Subject key identifier:   AB:BE:6D:E3:88:D0:91:CA:60:52:86:60:D0:7D:F7:D4:85:5E:9C:8E
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer:       /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial:       018EF1F03B9E6CD71FA2A55ACA59562814F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number:          0D07
Signing time:             Thu 18 Apr 2024 16:00:36 +0000
Manifest this update:     Thu 18 Apr 2024 16:00:36 +0000
Manifest next update:     Fri 19 Apr 2024 16:00:36 +0000
Files and hashes:         1: 7eO25AG3VvSbqWCwbhJU_DDLXm8.roa (hash: 5YiT1v8XrXFMAo3jSyyaPJo/smfsHfkGjzCtTXvQlAo=)
                          2: KojLdVy2VAoCFKD7QRsrQpg1GDY.roa (hash: P5w40DctDhp+vNw57dyKISU4yNHTgm4ImH5nMaUALDk=)
                          3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: bl8FT6MKOutvmLEgMpZ7r17sUuf8Qr/2wZGPnwz8FwM=)
                          4: hWR6zHHPTBqZU3Iu5JfZPpTFA1w.roa (hash: BsP8md4WxDRyXhknDztBIp5/olh2KECDJMaS4fUvEdo=)
                          5: r7VHeEf6BPvCUpUnWOu-52asrM4.roa (hash: QUYoprGLY+64JxXEWKaIHVW7E6B83D++QZuZHJKKXbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f1:f0:3b:9e:6c:d7:1f:a2:a5:5a:ca:59:56:28:14:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
        Validity
            Not Before: Apr 18 16:00:36 2024 GMT
            Not After : Apr 19 16:00:36 2024 GMT
        Subject: CN=abbe6de388d091ca60528660d07df7d4855e9c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:39:13:40:c2:8e:de:a9:50:20:ec:94:00:
                    d9:c7:a4:a9:a1:92:59:46:1c:cb:e1:02:7a:77:a4:
                    91:18:f1:64:d6:f8:61:85:0e:e2:3f:0d:c1:ca:41:
                    6c:c6:4c:67:59:41:05:fe:33:d7:3c:f1:09:70:29:
                    ab:d7:a4:9e:86:5e:79:61:21:35:aa:b8:14:d4:51:
                    ad:11:98:62:7d:65:0d:dd:c1:7d:2a:39:4a:e6:9d:
                    d6:fc:65:bf:c4:7f:46:f3:3e:f2:34:a9:38:bf:6e:
                    73:03:7f:55:08:f7:ac:17:5f:cb:d8:02:a8:50:31:
                    50:58:6e:cd:2f:4d:e3:ff:9d:13:3c:55:13:f5:0f:
                    69:e3:e2:7a:3c:1f:7f:3b:e9:fe:8a:fc:47:4e:1e:
                    66:1b:94:d9:56:a9:a6:88:56:8c:44:7e:10:84:ed:
                    fb:a6:cd:fc:df:a7:6e:f8:e0:5f:c3:28:aa:ec:a2:
                    f5:04:ec:af:ed:f5:23:fa:cf:2a:21:8e:a1:92:2c:
                    7b:5e:30:80:1e:45:e4:16:46:fc:15:3d:8f:c1:fa:
                    16:12:27:11:7e:d4:d9:83:ba:d2:6e:26:13:5c:85:
                    27:a4:ef:0a:d9:d5:a6:b8:02:8c:4a:a5:6b:04:be:
                    9d:1e:46:5b:12:4f:65:ed:f1:dc:b4:d9:f6:9f:06:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:6D:E3:88:D0:91:CA:60:52:86:60:D0:7D:F7:D4:85:5E:9C:8E
            X509v3 Authority Key Identifier:
                keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:78:12:a2:7c:10:43:3f:39:2b:c7:51:b7:9e:2a:11:7d:
         2a:5f:3c:18:f0:bd:6f:a3:82:b6:70:59:cc:3f:70:68:f6:90:
         4b:ba:ae:0e:61:8f:27:b4:81:01:31:83:31:a0:c4:cc:fd:f4:
         9d:c3:1c:b2:b6:8c:12:3f:00:12:fc:b5:a5:d5:8f:3b:60:06:
         c0:04:6d:b3:9b:c5:82:74:5c:92:ff:5c:5b:89:ef:25:5e:d6:
         59:ea:68:6b:2d:aa:e1:c3:5e:f2:78:05:85:ce:5d:86:2f:e5:
         05:2e:f0:03:5a:08:a1:ce:ef:88:3f:3f:50:89:54:15:88:22:
         50:7a:0a:d9:e9:d9:b0:eb:0c:38:9e:ca:1f:6d:bc:43:0f:b2:
         a4:fc:17:31:d7:6d:b6:a5:e3:71:7b:6c:2f:73:c6:c1:17:7a:
         ad:97:a0:86:54:f5:b4:25:65:b4:4d:aa:80:97:ab:ca:df:c8:
         b5:dc:53:a1:91:6f:e0:95:c2:b8:17:47:d7:c6:4e:18:5b:94:
         6d:98:06:dc:9e:f9:d1:f6:c4:73:9f:84:d4:8e:21:da:71:ce:
         bc:20:53:ee:c5:8d:a8:5e:30:c2:81:d1:23:69:b9:62:21:39:
         1d:8b:c3:da:44:50:7a:f1:34:66:d7:5e:6f:6f:38:0c:1e:58:
         ec:2a:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 21:03:24 2024 by rpki-client on console-ams.rpki-client.org