Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
File:                     nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json)
Hash identifier:          M1nCuu6UkmPccGScEzLRW9O530e03ncInUX+a+VDJbA=
Subject key identifier:   B0:82:43:B3:5E:76:6A:AC:15:FB:13:96:A1:C2:D5:B1:FB:74:5A:D9
Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
Certificate issuer:       /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Certificate serial:       01901DEC66C89E1520BC5FA423F3E7F3D323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 22:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:30 +0000
Files and hashes:         1: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: Zw8DX5KMieGSkaYiksKHrsH+19UR3PmSvq1VZHEm6ow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:66:c8:9e:15:20:bc:5f:a4:23:f3:e7:f3:d3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
        Validity
            Not Before: Jun 15 22:02:30 2024 GMT
            Not After : Jun 16 22:02:30 2024 GMT
        Subject: CN=b08243b35e766aac15fb1396a1c2d5b1fb745ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:03:65:d7:32:b9:37:19:33:07:86:51:1a:
                    61:af:57:cb:f0:4e:9b:5e:10:4e:af:a1:c4:c2:71:
                    b7:15:30:a5:62:8e:9a:9b:c7:7c:2e:9d:68:6a:41:
                    21:f0:16:4c:3b:f4:51:c2:e5:ca:d6:d2:97:db:e2:
                    01:1e:a2:1a:ce:f7:7e:f6:80:2f:4b:e6:30:85:a7:
                    5a:fd:c2:a9:9e:e9:cb:d8:e3:08:7c:4b:f3:f7:90:
                    de:28:88:05:40:56:9c:0f:3e:bb:bd:3b:d7:a9:b2:
                    5b:0e:6e:b4:27:9b:47:55:7f:69:8c:c2:87:99:d2:
                    ce:ec:f0:6a:1f:9c:8d:38:b7:b6:b8:5a:41:c6:ec:
                    e5:be:85:5d:5b:36:4b:42:b9:22:41:dd:42:47:75:
                    aa:f3:8d:91:63:81:b6:20:eb:74:95:9b:2e:39:5a:
                    cb:f7:6c:1d:b4:4b:87:54:af:fd:a9:cf:70:37:de:
                    9a:87:25:14:9c:af:dd:2a:68:b9:f7:0c:34:12:8e:
                    44:af:21:4e:3b:b4:a1:6c:ab:d5:62:77:1b:8d:76:
                    22:e4:0c:3e:60:d8:90:59:91:02:73:c3:5f:e0:86:
                    ec:84:73:e6:41:f3:ad:b3:56:2e:d1:dc:77:3e:7f:
                    23:5f:a2:10:00:10:5c:98:b9:79:0a:ab:cc:30:54:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:43:B3:5E:76:6A:AC:15:FB:13:96:A1:C2:D5:B1:FB:74:5A:D9
            X509v3 Authority Key Identifier:
                keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:5d:2b:02:e0:1a:75:50:93:fb:52:c1:54:ed:d0:22:e5:
         56:67:e5:35:cf:09:91:93:cf:14:40:d0:0a:dd:d3:f4:9d:7d:
         e0:c8:e6:95:05:ba:77:26:f2:af:cf:6f:45:f3:b5:18:c7:38:
         20:32:0a:51:c4:ef:62:35:ee:be:ad:b3:2c:65:ae:db:3b:b7:
         ee:bb:ca:a1:f6:76:0e:02:96:b5:39:81:a2:f0:b9:5e:c6:39:
         35:07:1c:11:ef:a7:a1:0a:1d:08:9d:fd:d3:70:ec:96:bc:8d:
         d7:f8:2f:9e:35:5a:a1:09:cc:7f:20:fb:ff:5a:f9:4d:9d:2a:
         4c:02:83:35:ef:a7:6f:5a:03:08:db:ae:fb:3b:e4:8a:be:95:
         94:69:47:56:7b:3f:99:9c:64:95:c4:db:1c:56:56:b6:be:93:
         b5:72:d9:91:30:01:d3:23:59:68:24:44:ab:b5:3c:ab:b6:ee:
         86:8d:14:c3:46:2a:2f:e2:2b:12:94:1f:44:18:4a:0e:7a:6a:
         27:0c:0a:82:e5:ad:c8:e2:71:52:4e:3f:70:ce:a4:6c:5f:50:
         b2:24:02:3d:5c:37:ad:c6:f6:b5:35:bd:8b:16:88:04:a7:6d:
         3b:8b:cd:2d:7e:95:38:74:8c:c8:36:52:1d:a0:f3:bf:bb:22:
         fb:86:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:23 2024 by rpki-client on console-fra.rpki-client.org