Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
File:                     NuBUKH2-dgYtF3DYPGoWAADbDX0.mft (raw, json)
Hash identifier:          MFgGFfWVzoYTeYf8MXbpxiszx5XdLjO4CDwBPocLOcU=
Subject key identifier:   F4:79:EF:46:F1:B3:07:BB:78:22:72:15:85:BA:B0:87:00:65:6E:B5
Authority key identifier: 36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
Certificate issuer:       /CN=36e054287dbe76062d1770d83c6a160000db0d7d
Certificate serial:       018F8748AADC2EA16175F854738FABBC7DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
Manifest number:          0124
Signing time:             Fri 17 May 2024 16:00:37 +0000
Manifest this update:     Fri 17 May 2024 16:00:37 +0000
Manifest next update:     Sat 18 May 2024 16:00:37 +0000
Files and hashes:         1: NuBUKH2-dgYtF3DYPGoWAADbDX0.crl (hash: RvSAJ5cjh22OtOlU3H1mNaNINRWM/LZcGMSeprQ7Giw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:aa:dc:2e:a1:61:75:f8:54:73:8f:ab:bc:7d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e054287dbe76062d1770d83c6a160000db0d7d
        Validity
            Not Before: May 17 16:00:37 2024 GMT
            Not After : May 18 16:00:37 2024 GMT
        Subject: CN=f479ef46f1b307bb7822721585bab08700656eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:c9:14:63:1b:4d:1f:3c:98:e6:46:b6:5d:
                    5a:99:f6:97:1d:64:9c:39:a6:d6:fd:95:8c:01:cc:
                    9e:fe:cf:9e:ed:5a:97:12:d8:49:ef:a0:b6:86:0d:
                    0b:c0:08:a1:db:5a:6a:db:66:99:74:b7:f0:95:3a:
                    d1:77:e5:5a:20:a1:20:92:26:39:c5:3e:4f:06:a3:
                    68:24:88:bd:5a:aa:5d:a4:c0:62:dc:52:95:6c:2e:
                    d9:6c:c0:8f:77:01:bb:bc:ea:e9:8a:0d:13:02:26:
                    19:1c:db:aa:f4:77:0b:03:96:af:d2:c3:17:ca:44:
                    de:a7:ef:fc:a2:18:f5:64:eb:3e:a0:79:2c:69:34:
                    4f:9c:52:8a:b4:88:92:cb:11:36:47:52:83:a2:f8:
                    bf:37:d9:23:24:ff:4f:8a:29:74:40:d9:00:17:2f:
                    38:c2:af:ab:ac:b8:f4:f2:1e:26:b5:ed:b8:c1:44:
                    24:a8:b6:4b:f1:c5:57:1e:6d:08:d9:76:1d:db:52:
                    8a:77:12:c8:b7:22:be:27:56:ff:be:9e:09:cd:44:
                    9e:cf:76:ff:f6:ea:80:be:3a:c3:65:7b:fb:55:0b:
                    c8:2c:ea:6d:88:69:a6:da:c1:fd:c3:db:c0:c1:b5:
                    fd:ef:fa:10:59:6c:d0:93:3f:95:e6:d9:9d:63:94:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:79:EF:46:F1:B3:07:BB:78:22:72:15:85:BA:B0:87:00:65:6E:B5
            X509v3 Authority Key Identifier:
                keyid:36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9e:3a:cd:ed:e1:e1:08:09:3f:10:4e:54:08:7a:4f:be:e4:
         15:1c:b2:2b:ba:73:db:dc:1f:73:6c:30:86:25:53:f8:f3:25:
         21:e7:07:b6:9b:52:9f:ea:68:9c:89:0f:64:23:44:fb:23:83:
         e6:fa:17:6c:57:00:e7:79:e3:2a:da:4e:46:6f:0b:39:18:85:
         b1:d9:f4:61:e7:7c:3e:b6:5b:24:a7:27:4e:18:00:c3:5b:66:
         6a:64:c3:ae:ab:e9:40:4b:c0:39:c1:d8:bf:cb:0e:7c:9e:e6:
         1b:fe:24:84:7b:1a:de:57:bd:ef:4e:fa:47:b2:bb:83:9a:31:
         c9:07:f5:87:67:2f:07:ec:74:73:a8:55:1f:8e:a8:80:63:a7:
         e3:b5:ec:5f:e7:f9:ad:d0:70:89:71:10:a3:70:8b:a6:3e:7d:
         69:08:9e:40:1f:46:61:07:83:75:20:75:0f:33:44:32:6d:93:
         c4:9f:47:1b:d0:23:9c:32:0d:04:c8:e3:12:1d:be:3e:3e:f8:
         7c:78:6e:e7:dd:36:1f:3e:fb:d5:37:47:dc:56:dc:fe:3c:8f:
         67:7a:78:5f:95:ae:e0:af:16:c8:88:7c:15:aa:57:3c:82:70:
         a7:9d:7d:66:a6:93:13:6a:c7:8d:96:f9:1f:96:fd:db:9f:86:
         63:79:bb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSKrcLqFhdfhUc4+rvH3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZTA1NDI4N2RiZTc2MDYyZDE3NzBkODNjNmExNjAwMDBk
YjBkN2QwHhcNMjQwNTE3MTYwMDM3WhcNMjQwNTE4MTYwMDM3WjAzMTEwLwYDVQQD
EyhmNDc5ZWY0NmYxYjMwN2JiNzgyMjcyMTU4NWJhYjA4NzAwNjU2ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh/JFGMbTR88mOZGtl1amfaXHWSc
OabW/ZWMAcye/s+e7VqXEthJ76C2hg0LwAih21pq22aZdLfwlTrRd+VaIKEgkiY5
xT5PBqNoJIi9WqpdpMBi3FKVbC7ZbMCPdwG7vOrpig0TAiYZHNuq9HcLA5av0sMX
ykTep+/8ohj1ZOs+oHksaTRPnFKKtIiSyxE2R1KDovi/N9kjJP9Piil0QNkAFy84
wq+rrLj08h4mte24wUQkqLZL8cVXHm0I2XYd21KKdxLItyK+J1b/vp4JzUSez3b/
9uqAvjrDZXv7VQvILOptiGmm2sH9w9vAwbX97/oQWWzQkz+V5tmdY5R0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR570bxswe7eCJyFYW6sIcAZW61MB8GA1UdIwQY
MBaAFDbgVCh9vnYGLRdw2DxqFgAA2w19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVCVUtIMi1kZ1l0RjNEWVBHb1dBQURiRFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hMmI4ZTYtOGQ1NC00MzliLThjZTEt
YzQ5NzRhYzI2NzJlLzEvTnVCVUtIMi1kZ1l0RjNEWVBHb1dBQURiRFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hMmI4ZTYtOGQ1NC00MzliLThjZTEtYzQ5NzRhYzI2NzJl
LzEvTnVCVUtIMi1kZ1l0RjNEWVBHb1dBQURiRFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ46ze3h
4QgJPxBOVAh6T77kFRyyK7pz29wfc2wwhiVT+PMlIecHtptSn+ponIkPZCNE+yOD
5voXbFcA53njKtpORm8LORiFsdn0Yed8PrZbJKcnThgAw1tmamTDrqvpQEvAOcHY
v8sOfJ7mG/4khHsa3le97076R7K7g5oxyQf1h2cvB+x0c6hVH46ogGOn47XsX+f5
rdBwiXEQo3CLpj59aQieQB9GYQeDdSB1DzNEMm2TxJ9HG9AjnDINBMjjEh2+Pj74
fHhu5902Hz771TdH3Fbc/jyPZ3p4X5Wu4K8WyIh8FapXPIJwp519ZqaTE2rHjZb5
H5b925+GY3m7Gw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:58:02 2024 by rpki-client on console-ams.rpki-client.org