Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          w+n5sBO+6EmoXBEps2MID8W50WF3CUlDOTCyFSDUIzM=
Subject key identifier:   C4:56:91:63:96:13:92:A4:37:2C:14:F6:0E:F3:B5:67:45:B7:F3:44
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       018F86A3F8F86F45B66A242B4E622CC3F4D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          07AA
Signing time:             Fri 17 May 2024 13:00:43 +0000
Manifest this update:     Fri 17 May 2024 13:00:43 +0000
Manifest next update:     Sat 18 May 2024 13:00:43 +0000
Files and hashes:         1: A7TXgb4wuhQaASQaRjj-B-Cgs2w.roa (hash: O1sqUiozPZ90OSxOhoNFn5pm9S5qD1p2YYN0PAWc3yM=)
                          2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: noLLCgAqYHL9FaD1HTIHMNQUHk9YRK3DTRS0XushV2Y=)
                          3: kPq5mHyAwtRZgkVRIU2ztGZn3DU.roa (hash: 3Uj8/Yiw4HIPOzjr6m5kOfTZ0UdyB58yW1QjoqA3oRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:f8:f8:6f:45:b6:6a:24:2b:4e:62:2c:c3:f4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: May 17 13:00:43 2024 GMT
            Not After : May 18 13:00:43 2024 GMT
        Subject: CN=c4569163961392a4372c14f60ef3b56745b7f344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:4f:62:fd:e3:68:38:8a:5c:98:b8:dc:47:
                    3f:2d:e4:de:2c:b9:0b:aa:09:84:56:40:b1:20:ad:
                    57:db:f1:d4:fd:c7:33:1a:62:3e:a3:3d:3b:26:0c:
                    c8:24:65:f6:a4:ff:20:61:2f:9e:4f:ee:e4:8f:ff:
                    4a:4f:fd:c5:1b:fc:9e:0c:1a:04:39:4c:7b:a7:17:
                    f0:36:c9:e6:6f:09:1e:1d:b8:d7:e0:b8:3a:13:f1:
                    5f:7e:df:e3:2c:3e:58:2c:b2:b3:0e:eb:cb:ea:75:
                    81:55:a8:6f:cb:22:53:75:a2:b1:ef:79:ab:8a:fe:
                    23:9f:cf:a5:ed:58:92:e1:93:ed:d3:f8:eb:ed:fc:
                    df:50:ab:5b:52:39:ef:45:2b:93:de:54:4d:7f:d2:
                    ca:d5:59:f0:6d:a4:04:21:1f:77:1c:85:d4:96:a8:
                    4c:98:9a:dd:86:4c:57:57:89:ca:dd:b1:51:b9:26:
                    0d:cb:3c:37:7e:4f:f9:ea:8c:01:03:08:52:0d:88:
                    38:6a:76:f7:1e:13:16:23:1b:35:c2:8a:bb:41:6a:
                    36:f2:8e:92:65:43:43:aa:cd:0b:d3:8a:3e:32:a7:
                    ce:cb:c5:1a:6f:cc:43:00:59:bc:de:15:51:d2:3a:
                    4f:9e:e3:3c:1f:b2:a1:cc:87:b6:b4:11:48:db:b1:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:91:63:96:13:92:A4:37:2C:14:F6:0E:F3:B5:67:45:B7:F3:44
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:67:00:cf:6c:af:1a:7a:47:70:86:f6:1b:20:87:7c:6e:48:
         95:0e:cb:0f:a5:42:8e:24:9c:95:03:56:0a:cc:ba:26:32:e1:
         5d:88:e0:2e:db:94:38:5f:fa:02:c4:47:3f:c3:74:17:33:28:
         52:bd:9b:ab:02:49:ad:e9:1c:24:29:8f:4c:8c:6c:3b:97:e4:
         b9:fc:7d:ab:b8:a4:21:80:8c:de:4f:75:c7:85:3f:c5:00:d8:
         93:ef:dd:99:f7:93:6f:61:f8:f0:16:f9:6f:c2:86:22:a5:f4:
         d0:6e:7b:2e:bc:8f:d0:d5:d5:b2:ad:dc:a8:fd:2a:f9:33:7b:
         60:ac:78:57:b2:83:b4:48:7b:bb:b1:2e:0d:66:89:46:a2:f0:
         c9:12:61:aa:cb:b7:fd:2c:84:0d:82:dc:90:c9:c6:66:e7:79:
         f3:50:51:0b:f1:59:61:1a:65:16:ea:7e:bf:fe:9f:fc:91:f0:
         9b:39:1a:90:9d:3b:54:ab:2b:e4:70:65:40:37:c6:eb:03:c4:
         b4:e5:e0:ed:98:34:ec:54:ed:c4:eb:6a:aa:70:af:24:99:5f:
         5b:ac:06:ea:58:43:c4:eb:3e:74:98:7d:c7:f8:83:47:06:e5:
         ea:f4:aa:47:d5:de:6a:ad:84:52:26:e4:f4:2f:b0:da:01:66:
         ea:ff:00:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go/j4b0W2aiQrTmIsw/TTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll
NzdmMGQwHhcNMjQwNTE3MTMwMDQzWhcNMjQwNTE4MTMwMDQzWjAzMTEwLwYDVQQD
EyhjNDU2OTE2Mzk2MTM5MmE0MzcyYzE0ZjYwZWYzYjU2NzQ1YjdmMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8xPYv3jaDiKXJi43Ec/LeTeLLkL
qgmEVkCxIK1X2/HU/cczGmI+oz07JgzIJGX2pP8gYS+eT+7kj/9KT/3FG/yeDBoE
OUx7pxfwNsnmbwkeHbjX4Lg6E/Ffft/jLD5YLLKzDuvL6nWBVahvyyJTdaKx73mr
iv4jn8+l7ViS4ZPt0/jr7fzfUKtbUjnvRSuT3lRNf9LK1VnwbaQEIR93HIXUlqhM
mJrdhkxXV4nK3bFRuSYNyzw3fk/56owBAwhSDYg4anb3HhMWIxs1woq7QWo28o6S
ZUNDqs0L04o+MqfOy8Uab8xDAFm83hVR0jpPnuM8H7KhzIe2tBFI27FbAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRWkWOWE5KkNywU9g7ztWdFt/NEMB8GA1UdIwQY
MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt
ZmEzZTA5MDFmMjQwLzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw
LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2cAz2yv
GnpHcIb2GyCHfG5IlQ7LD6VCjiSclQNWCsy6JjLhXYjgLtuUOF/6AsRHP8N0FzMo
Ur2bqwJJrekcJCmPTIxsO5fkufx9q7ikIYCM3k91x4U/xQDYk+/dmfeTb2H48Bb5
b8KGIqX00G57LryP0NXVsq3cqP0q+TN7YKx4V7KDtEh7u7EuDWaJRqLwyRJhqsu3
/SyEDYLckMnGZud581BRC/FZYRplFup+v/6f/JHwmzkakJ07VKsr5HBlQDfG6wPE
tOXg7Zg07FTtxOtqqnCvJJlfW6wG6lhDxOs+dJh9x/iDRwbl6vSqR9Xeaq2EUibk
9C+w2gFm6v8A6A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:44:51 2024 by rpki-client on console-ams.rpki-client.org