Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File:                     sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier:          xNyu3mv8rfjIEq6+Z8be44GcOzcu59Hn6dxt0dxXO+M=
Subject key identifier:   7F:3C:9A:02:4D:6A:07:29:47:81:7A:6D:1A:CE:57:3F:04:A9:86:9D
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer:       /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial:       018F882473FB7DE5131653C1D187B6E54A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number:          0537
Signing time:             Fri 17 May 2024 20:00:41 +0000
Manifest this update:     Fri 17 May 2024 20:00:41 +0000
Manifest next update:     Sat 18 May 2024 20:00:41 +0000
Files and hashes:         1: Y3cqm_SKUVIKboDdk96dj-yn9H4.roa (hash: uaXFFykwCZYmndOr2yOXAhu7tu1dDU2+8VDY+HcItis=)
                          2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: khpe8408WJne/nBaJ7pabQhGkmQaNaHCTR4ChCTa+RA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:73:fb:7d:e5:13:16:53:c1:d1:87:b6:e5:4a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
        Validity
            Not Before: May 17 20:00:41 2024 GMT
            Not After : May 18 20:00:41 2024 GMT
        Subject: CN=7f3c9a024d6a072947817a6d1ace573f04a9869d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:f7:94:bc:ac:15:03:4f:91:6b:92:15:20:
                    f8:7a:e8:cc:ef:40:a8:cb:a2:36:c3:67:6b:68:0b:
                    e5:c8:d5:0e:12:cc:fe:9e:ea:aa:af:83:ef:88:d4:
                    21:d0:74:38:21:d4:d6:f3:16:02:aa:ef:43:0c:71:
                    06:52:76:26:93:d4:c7:c2:db:32:0f:98:67:5c:d4:
                    51:be:62:d9:02:37:ef:3e:58:68:51:0c:7d:71:34:
                    3c:46:dd:78:f6:b7:e7:5e:02:da:3e:23:59:aa:9e:
                    c6:65:e8:56:60:1e:8f:42:b5:05:a3:4a:2c:cf:05:
                    75:be:cc:37:94:a8:03:ee:c9:66:fb:90:d8:6a:00:
                    4d:98:58:d9:e8:6c:bb:60:e9:80:73:cb:86:7b:88:
                    2c:36:ae:f1:f2:92:f9:f4:0d:6f:96:51:b4:e1:03:
                    a9:bb:f3:02:db:69:35:19:a3:e2:dc:70:a5:97:d1:
                    64:b9:d2:68:85:ee:36:2e:86:aa:1f:b9:f1:76:19:
                    11:dc:64:50:7b:d0:e5:af:5d:0f:f5:e5:8e:91:98:
                    ac:0b:ac:a0:d7:f8:43:6f:67:fd:e6:0f:fb:b3:0b:
                    de:b8:52:77:e4:32:f4:7d:a7:b6:e4:9a:85:f4:f4:
                    7d:01:46:9d:73:73:48:d4:06:fb:06:0a:94:9d:91:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:9A:02:4D:6A:07:29:47:81:7A:6D:1A:CE:57:3F:04:A9:86:9D
            X509v3 Authority Key Identifier:
                keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:0a:ea:bc:7f:d9:70:4d:5e:06:70:ea:c5:14:2a:55:d1:
         55:0a:1b:e9:e1:e6:26:1c:5f:76:22:07:96:44:1c:bb:05:74:
         90:65:44:fb:ea:69:1f:96:59:e7:36:de:44:ff:32:04:63:36:
         40:23:19:f7:a7:31:58:f6:eb:cb:ac:f1:1f:38:90:7b:03:0a:
         14:fb:5a:14:72:76:be:57:30:66:18:8f:65:31:36:1e:89:ea:
         95:b1:67:1c:40:a5:53:db:36:88:13:c1:53:0c:0c:07:49:7b:
         29:a5:64:25:78:90:10:6e:d5:d9:5c:c0:77:3e:fa:80:bf:cf:
         0a:e1:44:35:87:57:3f:e0:f1:85:f5:0c:9a:47:85:14:28:c3:
         fb:f2:28:f9:88:20:79:59:0c:6d:43:cf:18:d5:75:43:79:59:
         15:3c:19:78:89:c0:26:9d:bc:aa:64:07:23:2f:1b:cc:25:b8:
         8e:df:85:70:ef:17:af:91:e0:cd:ec:41:b6:9b:89:0a:2b:57:
         65:72:ed:f0:f1:d9:79:1d:9b:1c:d7:29:b6:a1:04:36:50:cf:
         66:86:98:b5:ed:9d:2f:25:c1:31:40:77:78:37:4e:8d:9f:3e:
         68:e4:f7:68:aa:23:ee:e5:4b:4c:57:5c:3d:5b:77:1d:c6:3b:
         83:f1:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:14 2024 by rpki-client on console-ams.rpki-client.org