Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File:                     nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier:          HXlBvyf8Fgh368jypKkEhxoBGOU4y3bMc/jsFDiAW+c=
Subject key identifier:   D3:AA:7A:4F:8A:FC:88:2E:D7:14:BA:C5:A3:6C:3E:A2:61:3E:EC:7D
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer:       /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial:       018F8938FBCBC258F90D34DCDE9033DA50E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:02:43 +0000
Manifest this update:     Sat 18 May 2024 01:02:43 +0000
Manifest next update:     Sun 19 May 2024 01:02:43 +0000
Files and hashes:         1: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: UMq1xwCGduR5f0hvEahKKyR6rG6yXJeHOXRqIFywq6Q=)
                          2: noOFGAvQjgCp9EdhWzUnNOHOKiE.roa (hash: V2qDfHN4Eknc67zPWHDK//lcJi8ziSuM9sXcupGs1AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:fb:cb:c2:58:f9:0d:34:dc:de:90:33:da:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
        Validity
            Not Before: May 18 01:02:43 2024 GMT
            Not After : May 19 01:02:43 2024 GMT
        Subject: CN=d3aa7a4f8afc882ed714bac5a36c3ea2613eec7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:60:e9:e4:df:b3:05:82:b3:04:4c:5c:30:
                    56:e3:51:d7:fe:ec:67:4f:f2:54:ae:e6:b1:aa:7b:
                    79:b4:21:ed:cd:7a:2b:26:87:0f:a9:4e:17:35:47:
                    9b:6a:27:52:e7:99:f3:cb:0b:b7:c0:c7:2e:d3:de:
                    4e:31:07:ad:f0:11:e5:28:36:49:85:c5:93:56:12:
                    b2:05:9c:2c:aa:24:17:de:4c:79:f5:fc:44:c1:95:
                    1d:8d:66:0e:1d:d2:e6:5b:b6:21:86:56:29:d3:ab:
                    54:96:1b:ec:10:fa:91:60:4f:50:f9:0a:b5:7d:b9:
                    fe:6a:3c:cc:93:cd:d9:97:e3:19:f3:ba:b9:34:7c:
                    c8:1b:c0:49:f4:f9:15:90:38:03:a8:a5:bb:1c:98:
                    2e:11:51:eb:63:b4:9b:a8:32:32:33:13:1d:25:d9:
                    e7:30:66:38:6d:13:83:9e:7c:36:93:a7:2f:48:69:
                    80:c8:b3:2d:34:ab:6a:19:73:b1:da:3d:12:29:11:
                    88:6a:0b:ee:80:c5:7c:b8:0f:a1:aa:98:0b:99:11:
                    b9:55:da:17:1e:3a:ca:0d:78:89:f3:fd:b3:72:66:
                    5c:60:d9:eb:14:21:fb:19:c0:4e:7b:b5:9b:bd:fd:
                    da:79:b0:ae:e4:4f:a9:44:ba:7e:ab:a5:fc:c5:e8:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AA:7A:4F:8A:FC:88:2E:D7:14:BA:C5:A3:6C:3E:A2:61:3E:EC:7D
            X509v3 Authority Key Identifier:
                keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:56:09:d2:eb:6b:05:f6:58:22:03:b3:7b:e3:db:fe:9e:4b:
         9d:58:0f:61:0f:8a:74:34:25:4f:b7:7d:db:47:bd:f3:cb:38:
         63:96:b0:8c:56:37:b3:22:fc:c9:f2:9e:2e:62:f8:2a:03:a7:
         89:bf:d1:45:16:ab:dd:ed:b8:e0:2f:20:8d:a6:47:43:5b:7f:
         1e:fb:d3:bd:81:e8:c2:ab:b9:bf:26:d6:5a:e4:07:32:c7:6e:
         96:9a:c3:6a:1d:68:bc:36:91:b3:10:85:0b:d0:4c:7a:bf:98:
         32:ce:af:22:6a:ce:dc:5a:ed:39:2a:59:a2:8d:2d:24:01:f1:
         1b:82:40:ff:9b:41:cc:6c:37:68:d4:7a:cd:10:3a:dc:1d:d7:
         8a:d6:1d:ab:d8:36:f3:dc:5d:f1:ae:60:f8:89:f5:24:f2:ed:
         5f:4a:2a:66:f5:fd:5a:03:b5:27:74:a9:1c:ee:9c:25:3b:34:
         76:cd:9b:cf:9a:52:4a:38:85:d7:1f:9a:6d:79:2c:58:7a:c6:
         44:af:ff:52:8c:c1:1a:6f:be:5f:66:f1:a1:47:14:2e:60:3f:
         62:23:c1:83:80:23:c0:d8:11:37:25:1a:f4:aa:4d:86:a1:b9:
         80:b3:a4:d0:38:b8:77:08:82:3f:5b:70:9c:5c:a0:13:3c:46:
         fd:26:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:25:46 2024 by rpki-client on console-ams.rpki-client.org