Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft
File:                     ns8AG5m6mj3MAEcyY4H63quRjfQ.mft (raw, json)
Hash identifier:          JWyyvQjbX7ma6z6r85xAJzM9IN5RpvEJhW+0CNdmiiY=
Subject key identifier:   BD:D0:FF:38:20:FC:3B:A7:B4:F1:B5:57:4D:BE:A5:9A:DC:A4:28:37
Authority key identifier: 9E:CF:00:1B:99:BA:9A:3D:CC:00:47:32:63:81:FA:DE:AB:91:8D:F4
Certificate issuer:       /CN=9ecf001b99ba9a3dcc0047326381fadeab918df4
Certificate serial:       019040AF73B84C0CAE394127A67259DB6862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ns8AG5m6mj3MAEcyY4H63quRjfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft
Manifest number:          0291
Signing time:             Sat 22 Jun 2024 16:02:38 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:38 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:38 +0000
Files and hashes:         1: ns8AG5m6mj3MAEcyY4H63quRjfQ.crl (hash: 9uIUt8jvSjy+LPAAlZ8NgzrSr9dWvvxAEXjSUmb90mI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ns8AG5m6mj3MAEcyY4H63quRjfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:73:b8:4c:0c:ae:39:41:27:a6:72:59:db:68:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ecf001b99ba9a3dcc0047326381fadeab918df4
        Validity
            Not Before: Jun 22 16:02:38 2024 GMT
            Not After : Jun 23 16:02:38 2024 GMT
        Subject: CN=bdd0ff3820fc3ba7b4f1b5574dbea59adca42837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:44:06:7d:23:81:33:d4:15:0a:78:02:97:
                    72:fa:23:ba:f9:54:b6:f5:ad:34:32:63:d6:66:e8:
                    2a:e9:3d:f6:96:6f:bd:35:9e:74:c4:0f:65:2b:58:
                    87:eb:18:9e:85:3b:b0:27:e3:ad:1f:07:9c:d0:fe:
                    81:7b:4f:82:2e:26:4c:a8:1e:37:ea:ba:03:0f:06:
                    f0:1f:88:d8:59:81:18:41:43:7e:6e:2b:ad:39:be:
                    35:13:09:98:36:1f:02:f7:80:d2:bd:58:b9:53:91:
                    6d:61:42:65:db:c0:9b:09:f7:8c:e7:22:d7:8b:e3:
                    c7:d5:4f:50:8d:74:da:a1:29:12:10:87:05:e9:61:
                    7d:d5:32:45:b0:cb:b1:a4:b1:d7:29:37:27:93:c7:
                    31:06:3c:1e:17:67:a6:d4:c3:a7:0d:31:0b:62:82:
                    21:8f:3d:bf:07:f3:62:bf:8e:e8:17:1b:6e:e8:7b:
                    c9:00:b3:60:e4:09:28:71:f6:0b:6b:b1:e2:7b:98:
                    3f:c2:15:b3:5b:a6:63:0f:fa:67:d5:72:2d:54:ee:
                    97:6a:c5:2a:b6:35:e2:4b:37:d4:64:ba:1c:bb:8b:
                    e5:dc:3e:74:ef:a0:5c:d4:0c:16:4c:64:55:69:16:
                    25:52:f0:fc:d1:c3:95:8c:0c:5f:0a:ff:b9:71:71:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:FF:38:20:FC:3B:A7:B4:F1:B5:57:4D:BE:A5:9A:DC:A4:28:37
            X509v3 Authority Key Identifier:
                keyid:9E:CF:00:1B:99:BA:9A:3D:CC:00:47:32:63:81:FA:DE:AB:91:8D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ns8AG5m6mj3MAEcyY4H63quRjfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:ac:22:39:39:dc:bc:55:e9:88:88:1a:93:86:8a:0f:7f:
         46:c7:80:a2:21:cb:10:ba:4c:26:e3:1c:6f:cb:12:7c:c9:15:
         58:99:64:8b:68:32:67:6e:05:9f:ce:7c:da:36:c6:41:e1:e4:
         fe:1a:e5:0d:e3:b1:08:30:8b:fc:33:15:ce:88:01:40:32:09:
         f6:7d:2a:d3:4f:61:66:fe:50:e1:74:f3:3c:8d:a8:33:ce:63:
         dc:6a:df:0a:6e:c9:2f:10:3a:b6:b1:36:18:85:f9:1b:b8:d2:
         9e:6c:73:39:ea:be:a2:91:7e:d7:60:87:30:ed:c2:d1:84:69:
         5b:c0:93:9f:75:50:9d:a2:2a:4d:b8:2f:0e:af:36:6f:79:5f:
         cf:8b:12:e0:4a:34:01:6e:61:89:2b:2b:61:0a:ae:8e:b8:f1:
         ef:7d:a0:94:2e:ba:37:14:a2:99:a5:42:2e:75:ae:f1:f0:44:
         8b:55:c2:5b:96:32:ab:70:e8:b3:f1:68:39:e5:b5:c7:3d:c2:
         a8:c7:81:e5:4c:5e:13:b4:9d:4e:b4:35:3d:a4:95:47:c2:6f:
         b4:36:8a:af:14:21:bc:94:24:b4:e3:6f:5a:77:8a:b4:43:f1:
         27:19:1d:5b:35:ab:92:da:a4:cb:88:c6:bf:ec:e6:b5:7f:8c:
         41:21:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:59:53 2024 by rpki-client on console-fra.rpki-client.org