Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File:                     Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier:          a+YB3XKm/BTl2kgSPhJ7HikiGcZaPZRTtt+4chGWZ1I=
Subject key identifier:   B2:F9:B8:78:03:B6:1D:37:CB:51:EE:00:67:CB:D6:B0:7E:08:16:4B
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer:       /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial:       018F8636186CBFC9F404203DCFE120314AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number:          0AC6
Signing time:             Fri 17 May 2024 11:00:43 +0000
Manifest this update:     Fri 17 May 2024 11:00:43 +0000
Manifest next update:     Sat 18 May 2024 11:00:43 +0000
Files and hashes:         1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: j6zFQ5GcryeshwYaRJSrLzR64uaUNv9ZtPLNJ6DYTWQ=)
                          2: iy4arj3HpBm4HeMdtKuF4iJYXtA.roa (hash: hjdhwOkvz04hMLgJpQO4ImbdGDxbgFmx5Pm4l78d7D0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:18:6c:bf:c9:f4:04:20:3d:cf:e1:20:31:4a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
        Validity
            Not Before: May 17 11:00:43 2024 GMT
            Not After : May 18 11:00:43 2024 GMT
        Subject: CN=b2f9b87803b61d37cb51ee0067cbd6b07e08164b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:3b:1f:29:80:b5:58:61:21:e4:7c:a6:17:
                    c0:a1:ae:72:c5:6a:c3:ad:82:20:c1:68:42:3f:ff:
                    75:ba:b9:01:06:82:84:7e:14:a9:ac:64:3b:ad:db:
                    2a:e8:dd:98:c6:a1:29:6c:e3:4c:41:df:9a:95:94:
                    60:e6:b7:ce:01:bf:d5:84:dc:06:49:50:e1:30:a1:
                    53:a9:ff:4f:6c:0a:48:67:00:a8:e2:0b:ce:a2:06:
                    45:82:83:3f:5d:2e:ff:ec:7d:56:a9:f3:ea:55:e7:
                    67:9f:b4:8a:f1:6e:ef:bb:25:53:56:f7:1b:cf:ea:
                    32:24:0d:f1:7a:ac:77:27:d4:99:27:5c:51:8f:93:
                    c2:56:8f:8a:0c:d8:94:b8:44:de:b6:25:c0:9e:59:
                    d6:8c:f8:1c:1c:eb:a0:46:3e:88:d4:b5:7d:29:67:
                    ab:bd:f8:e4:60:53:8f:7c:e8:c5:4d:52:aa:df:25:
                    0b:79:21:b6:5e:33:53:2e:9f:88:10:9b:a9:3e:fe:
                    cd:e6:41:53:cc:87:54:11:71:04:37:3e:73:54:b3:
                    8c:05:4b:71:a0:75:e6:41:28:97:92:ea:26:cf:83:
                    cd:74:20:d9:86:d6:f3:1f:86:13:a7:fc:3f:2f:2c:
                    25:6a:21:d4:95:b9:dd:dd:ac:00:78:67:a4:3f:80:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F9:B8:78:03:B6:1D:37:CB:51:EE:00:67:CB:D6:B0:7E:08:16:4B
            X509v3 Authority Key Identifier:
                keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:62:ea:e1:c3:d4:09:9b:29:2d:e3:73:bb:e5:e0:52:7a:
         70:30:aa:61:78:cc:d1:d4:77:58:2b:fe:81:7c:63:fd:a0:d9:
         56:c6:e0:3f:45:42:2f:28:32:86:93:c7:7f:8c:0c:b6:c5:d4:
         70:4f:82:4e:ee:fd:7b:f5:df:c0:d8:6f:f7:4f:83:f8:79:dc:
         a8:70:2a:f1:93:a3:92:c3:68:91:26:7a:3f:ff:67:00:c8:5f:
         11:29:e7:5a:7c:cb:0a:b8:f1:b3:7c:db:f9:74:7f:68:83:4d:
         dd:47:c5:8f:37:08:06:5f:b0:c5:9d:82:86:ad:e7:45:2d:18:
         0f:c9:50:f3:63:bc:af:25:6d:70:3e:38:f1:57:0a:0b:26:66:
         3d:92:18:4e:c0:a7:ba:1c:9e:3d:67:6a:cc:7a:31:a6:af:a3:
         d7:40:21:af:13:fe:04:1c:ce:63:a9:1c:9c:23:5e:20:20:8f:
         49:20:8c:69:a2:ab:12:b8:1d:c5:28:7e:48:de:80:4e:43:0f:
         75:5b:c1:c3:3e:4f:ec:6b:fb:5e:c9:04:11:b7:a2:f9:f5:29:
         90:dc:88:93:1f:6b:9f:18:2a:c8:4f:70:17:98:72:c6:73:ab:
         c0:d6:e4:92:4a:a2:83:cf:b8:4c:5b:83:48:c9:56:93:ca:01:
         87:e3:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:17 2024 by rpki-client on console-ams.rpki-client.org