Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
File:                     NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft (raw, json)
Hash identifier:          7JmnYO+WY2npz3Z+FinaxbrhLIE4QjGcW4NShwdQpJw=
Subject key identifier:   88:C1:46:99:E6:6D:4B:78:DA:25:C6:E4:2C:03:D4:E3:4D:9D:18:41
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Certificate issuer:       /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial:       0193549B6375BD5E37532F0E21D5D81D82FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
Manifest number:          137A
Signing time:             Fri 22 Nov 2024 16:01:29 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:29 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:29 +0000
Files and hashes:         1: 0-KJ0bqLfGrRwN3JSnMOhF6K7wI.roa (hash: E0Kj+W6esVMqIKCGcUkEMei4ErKpGpaFSbg9mRjnHwc=)
                          2: 49aTmhDYzXLAyR12gVzi2I8mLLQ.roa (hash: H18UXwiiAGRCmHT4O0Suosn3A2Lo64+OBbO6WiJzT7A=)
                          3: 9jcxPazIo4nuJLzwGEzWMI2OInA.roa (hash: M8oGMIEuUrsT2GxfCTSE96wGnnJ7EGlJ/RFRqjPPIpo=)
                          4: KVTelATikecHl2EjnoTqXX-_CG0.roa (hash: 9QnvkFLkbi1WJoXsSbQSvvnAzwt2wfdurqbPqy+mNgg=)
                          5: NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl (hash: L7+jxHrPHYGlyUop/cGIMUfLeyaRVRU/ucWhOAHlXm8=)
                          6: _Mn4U7Wn6sS8CKOMDurkaBPUhOg.roa (hash: pnrZp/3win1GEugEIE2pI0xFb1lkkaQ5DcLCeq8On1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:63:75:bd:5e:37:53:2f:0e:21:d5:d8:1d:82:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
        Validity
            Not Before: Nov 22 16:01:29 2024 GMT
            Not After : Nov 23 16:01:29 2024 GMT
        Subject: CN=88c14699e66d4b78da25c6e42c03d4e34d9d1841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:f0:8a:9d:7d:c1:1d:fd:e2:8c:da:11:41:
                    aa:36:0d:c1:3a:ec:38:01:20:64:52:22:90:66:ce:
                    17:15:3f:86:85:bc:c9:a7:a2:73:68:3e:f9:9f:2a:
                    c1:e2:05:eb:d5:0b:ca:58:fb:a3:13:71:73:f1:53:
                    28:01:c0:78:87:4b:10:15:5e:97:8e:cc:27:0f:29:
                    33:1b:a8:ac:40:65:f4:b5:42:c6:9f:ec:f4:e4:36:
                    c6:f2:40:a7:62:4a:89:7f:91:7e:4d:31:b6:b9:a1:
                    93:f3:ae:1f:3c:4a:d3:d1:43:6a:fb:77:69:14:3e:
                    41:41:de:31:5a:f7:73:ec:de:65:36:b4:c8:27:e5:
                    c0:c1:c0:86:d9:78:07:99:26:85:2a:e0:93:80:f8:
                    84:22:c9:34:9c:f1:3b:55:52:66:b4:1a:7f:72:5e:
                    22:06:2c:9b:a1:f6:64:19:75:11:85:40:5d:a9:6c:
                    ca:73:cc:47:81:da:d9:35:20:bd:3a:ef:27:31:8b:
                    8f:f2:1f:9a:15:90:01:6f:ef:b9:61:af:02:c9:ba:
                    4f:1e:2f:6f:17:80:bb:d3:66:60:21:80:f2:d7:4c:
                    4a:2e:99:65:d8:fc:0b:e0:25:fb:aa:b7:cf:e3:77:
                    52:f3:01:58:cb:81:2f:60:d9:f2:da:7a:c4:16:95:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C1:46:99:E6:6D:4B:78:DA:25:C6:E4:2C:03:D4:E3:4D:9D:18:41
            X509v3 Authority Key Identifier:
                keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:49:ea:e7:48:d7:b1:12:03:4d:5b:09:80:01:48:04:7e:
         06:7d:44:e8:28:aa:d6:a1:3b:2d:44:44:27:88:03:87:f3:57:
         cb:3f:bd:b0:a4:32:2c:1c:a0:21:69:98:24:d5:44:8d:fc:56:
         33:f1:1f:5c:c4:22:f6:3f:90:49:36:1c:92:32:dd:05:e7:d2:
         3b:d3:4c:ca:8b:c4:aa:b8:ba:de:04:70:a0:b4:b5:84:2d:84:
         c0:1e:bd:7b:be:b4:99:ee:75:58:51:74:ec:45:07:88:44:10:
         bc:73:80:6c:3a:ac:10:86:df:e0:6d:85:c0:f7:e9:9b:60:92:
         cd:1e:26:09:04:42:9c:f7:f4:f8:1e:f9:70:b6:9c:af:3e:03:
         ad:0a:8c:e9:33:5d:9d:86:17:e7:75:34:21:5c:e0:73:0c:5c:
         aa:32:b5:d5:b8:29:c6:a6:25:b2:c6:70:78:9f:bf:73:e9:f8:
         c7:45:15:e6:18:82:81:5b:6f:e3:9b:b2:e2:a3:28:81:46:fe:
         b0:42:01:08:80:df:03:c7:eb:44:a7:1a:1e:21:0b:b6:41:c4:
         2f:c9:fb:97:cc:63:0c:0a:eb:6a:7a:6b:46:16:14:01:97:0e:
         e1:6c:79:45:e7:27:b8:cf:b6:91:e5:c3:d9:05:07:43:81:14:
         20:f2:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:07 2024 by rpki-client on console-fra.rpki-client.org