Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File:                     NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier:          0spM2l+MtyW7mEAt0wDwRa7Tx6jVGt+c11RerOCD0Dk=
Subject key identifier:   36:CB:05:76:A5:EB:9F:98:AC:1E:3F:DA:5A:FB:63:17:9E:5D:96:95
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer:       /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial:       018F88243327BDAF8B84D31CD316DDDAE1C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:24 +0000
Manifest this update:     Fri 17 May 2024 20:00:24 +0000
Manifest next update:     Sat 18 May 2024 20:00:24 +0000
Files and hashes:         1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: Uc0FaNMw2jN2u9GpX7SYKgbUWoUzQxZSkPF4URX7xTs=)
                          2: kTe_jC3i4EFFJ1G15Z12oXYpmR8.roa (hash: dOsCdg/y8qm2Hn6Xf3LthRD1GPOHyZ8eDH2PBtmS1Fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:33:27:bd:af:8b:84:d3:1c:d3:16:dd:da:e1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
        Validity
            Not Before: May 17 20:00:24 2024 GMT
            Not After : May 18 20:00:24 2024 GMT
        Subject: CN=36cb0576a5eb9f98ac1e3fda5afb63179e5d9695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:df:3c:eb:be:a8:39:d5:5f:40:8d:46:08:
                    07:bb:e3:3a:85:d8:8e:04:8f:12:12:81:c4:65:02:
                    48:15:85:52:55:c1:5a:e7:79:f8:6e:70:2e:b0:33:
                    d1:0f:a1:6f:ab:9a:dd:34:3d:0f:7c:f1:df:66:c4:
                    99:14:99:90:78:89:4b:c9:a3:03:4f:cc:11:ee:56:
                    69:d8:8a:45:58:35:0c:c8:f0:92:59:d7:8d:40:ce:
                    1e:e4:29:bd:2a:e9:05:66:e7:04:10:1e:72:7c:98:
                    b3:ad:e7:59:83:21:ab:b1:c0:c8:d7:c5:d1:dd:63:
                    c6:e4:8b:9c:90:8b:0a:af:d9:71:b6:5a:f9:d5:6e:
                    11:ec:a4:8d:3c:9b:02:36:24:34:3b:93:80:69:9e:
                    c8:44:5e:23:d5:86:b5:fb:7f:e3:47:fa:bc:ac:62:
                    8c:90:c8:2a:fe:78:95:5e:3a:bb:41:7f:09:a3:a5:
                    c1:19:01:68:e3:52:4a:c3:a9:0d:83:0f:98:41:a2:
                    9b:89:32:96:f3:3c:eb:cd:ff:69:92:22:cb:3a:98:
                    61:03:bd:a7:16:a9:40:1e:85:98:6b:8b:91:02:01:
                    8f:35:b8:c6:ff:1c:8f:0a:3a:d0:16:43:f0:7c:78:
                    d8:df:86:49:92:01:dd:b3:7a:9e:35:1c:ff:af:44:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:05:76:A5:EB:9F:98:AC:1E:3F:DA:5A:FB:63:17:9E:5D:96:95
            X509v3 Authority Key Identifier:
                keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:16:2c:d9:fe:4b:aa:71:f2:75:86:35:d7:e4:c8:47:9d:
         01:8b:ae:15:2b:52:78:f3:15:ab:d1:ca:4e:6a:e3:cd:9d:28:
         6a:2c:19:11:73:07:eb:2a:68:fe:04:94:b3:88:bb:78:8f:a3:
         72:4a:f8:30:b4:39:ef:39:04:53:8d:6f:c0:6c:2e:c2:60:7b:
         c9:8a:59:08:1c:0e:ee:42:6e:bc:37:81:05:58:ec:c0:85:9d:
         a4:f1:46:2e:99:c4:e7:49:ba:e8:4f:a6:94:22:66:ae:97:6d:
         aa:23:cd:3b:26:15:f0:61:4b:c3:cb:18:7c:3b:55:81:17:e7:
         b2:1d:a0:86:0b:c6:ce:42:16:fd:56:d1:25:fe:fd:6d:b1:45:
         cb:f6:1e:ad:7e:d2:16:44:e7:f3:d4:c0:32:96:8f:2a:09:f2:
         df:ca:77:b0:1c:d6:5b:34:20:1b:bd:9e:07:af:40:78:11:2e:
         80:a0:9e:33:da:9d:ec:83:f8:65:c8:ba:01:4d:72:9e:c6:09:
         5f:3f:45:89:95:be:a1:ac:27:98:8b:dc:ee:3c:e6:c2:ff:39:
         71:20:43:1b:1e:42:ac:5f:89:fd:76:52:35:f9:57:8c:75:10:
         19:15:9b:13:a3:60:43:08:fa:a3:53:8f:e6:e9:d0:b8:dc:ae:
         b0:55:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:01 2024 by rpki-client on console-ams.rpki-client.org