Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File:                     NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier:          nsw5U36Ig2HTP2UoYr/JK1dSa6I1EB/H3aEME9kNvaM=
Subject key identifier:   87:AB:E9:38:65:A5:24:68:F1:13:AD:D0:3D:50:75:E5:8B:B5:37:0C
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer:       /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial:       018F874B5679363BC73932C78492D1452BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number:          0B38
Signing time:             Fri 17 May 2024 16:03:32 +0000
Manifest this update:     Fri 17 May 2024 16:03:32 +0000
Manifest next update:     Sat 18 May 2024 16:03:32 +0000
Files and hashes:         1: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: NjtAVsqCsqRlaMSUJKV1PAFJP6mRc4cVsnSsMNoO2zU=)
                          2: oKnRWjz2yMYPZbr3mX-T50yAbQ0.roa (hash: GllpquUEth97YunfIWL8a49YXnK6LE5huBM73xu/osw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:56:79:36:3b:c7:39:32:c7:84:92:d1:45:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
        Validity
            Not Before: May 17 16:03:32 2024 GMT
            Not After : May 18 16:03:32 2024 GMT
        Subject: CN=87abe93865a52468f113add03d5075e58bb5370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:00:5f:64:63:8c:e4:dd:5b:e8:70:61:06:
                    d4:79:26:d6:86:ef:07:47:f1:78:18:3e:ed:f8:bc:
                    7b:55:e1:a0:f4:e7:0c:ba:7e:f6:91:95:4a:db:3f:
                    c0:71:13:f1:01:05:5c:86:41:45:c1:42:68:b6:70:
                    92:67:0c:03:f9:30:32:73:08:b2:2f:f9:b7:51:54:
                    93:5e:30:a7:63:9b:2b:ea:01:09:fd:02:a2:3c:e2:
                    15:54:8b:79:e5:54:1e:09:94:97:00:12:3b:ea:7d:
                    c6:f5:8b:87:19:27:e9:28:d2:ac:33:88:9a:d1:f8:
                    c1:52:8c:fc:a9:56:04:c8:f2:dc:38:ed:3d:ca:31:
                    e7:31:96:20:79:10:65:80:d5:5c:f9:a2:d6:ea:21:
                    53:f6:c5:cd:b5:d5:b2:29:70:35:80:c3:de:bc:5a:
                    1a:5c:24:0e:f5:fe:72:b7:b0:0e:5f:68:a8:6e:bd:
                    db:38:c5:84:e9:07:a5:bb:f6:d4:67:9f:92:cf:9d:
                    f5:bd:4f:ba:3c:66:f6:d1:fb:49:f0:a4:0d:ca:82:
                    3e:5c:0e:2a:6d:60:95:e8:25:60:5a:e6:d5:69:a4:
                    e8:63:90:be:76:9a:b8:03:97:b5:2e:6d:0c:d4:20:
                    02:99:62:85:82:4c:8d:df:5c:e3:3a:e0:ce:20:14:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:E9:38:65:A5:24:68:F1:13:AD:D0:3D:50:75:E5:8B:B5:37:0C
            X509v3 Authority Key Identifier:
                keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:90:81:1d:6d:02:03:58:a7:35:00:3a:86:0b:44:df:96:36:
         7c:11:a9:c5:14:07:36:3c:8d:39:d8:1c:0a:44:c6:f4:b1:4b:
         73:9b:de:e8:f1:68:f4:ff:ac:fc:53:12:46:55:c6:63:d1:78:
         1b:76:c4:39:9b:87:8c:e1:88:90:5d:5d:58:64:dd:d4:a5:3d:
         73:ea:37:d9:0a:77:90:01:eb:cf:1f:7e:d2:ab:b0:2f:42:7b:
         42:8a:24:cc:4b:37:69:a7:4f:86:26:66:5f:0e:6b:79:cb:3a:
         42:59:95:50:52:a2:a9:c8:bc:18:39:35:e7:22:0d:5d:e7:c0:
         92:95:66:a1:58:65:83:1a:1d:49:5f:91:79:31:b9:25:29:2c:
         5a:54:4f:f2:57:99:3c:0e:ec:ce:be:5e:a9:04:25:1d:37:bd:
         dc:d2:2a:32:b6:c3:33:1e:c4:e6:3b:a2:e2:d7:74:2a:63:e3:
         37:a2:90:e5:61:63:b8:27:b9:53:72:bd:dd:9d:65:d4:98:b8:
         72:18:91:1c:fb:8e:b1:fb:40:79:53:f2:65:9e:ec:1e:a5:76:
         33:2b:ea:7e:ea:83:1e:90:18:28:37:21:16:74:ec:b9:45:11:
         ed:bb:f0:d2:54:81:f7:5a:f5:f7:4b:e6:c5:91:06:18:31:8d:
         5d:e6:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:04 2024 by rpki-client on console-fra.rpki-client.org