Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File:                     Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier:          fiHxmhgy8p89nFzEOZAOpo4/9J/hRVYiR6+yfa2uy7w=
Subject key identifier:   2A:19:D4:42:26:FB:71:98:D8:46:95:F7:B6:CF:61:47:C2:95:04:CA
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer:       /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial:       01901DEAB510689D2A38935E0D925FB8837E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number:          0859
Signing time:             Sat 15 Jun 2024 22:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:39 +0000
Files and hashes:         1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: qvoopcGE71bueB/ni7NXzlWY0E7hq6YW+NGu4meGUTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:b5:10:68:9d:2a:38:93:5e:0d:92:5f:b8:83:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
        Validity
            Not Before: Jun 15 22:00:39 2024 GMT
            Not After : Jun 16 22:00:39 2024 GMT
        Subject: CN=2a19d44226fb7198d84695f7b6cf6147c29504ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:11:4b:5f:71:e6:d5:f3:bc:49:5a:a5:46:
                    2d:e6:bb:b3:f8:b5:e3:c0:ea:89:9c:78:f7:b1:2e:
                    ae:ea:5c:6b:05:ae:30:29:c1:7d:52:0a:38:50:1e:
                    ad:b2:16:ee:e0:22:e3:b9:65:c4:6f:7a:fb:f6:f0:
                    59:36:d3:8d:f8:05:91:26:5c:9b:61:b4:a9:97:55:
                    c8:0f:3d:c2:ae:ae:b6:82:a8:68:3f:9f:2a:21:90:
                    5a:c5:73:da:46:a6:28:17:d7:45:76:d4:7b:4e:21:
                    34:32:fd:33:04:5d:39:1c:9a:44:80:fb:c3:8a:66:
                    11:69:af:d4:1f:86:be:50:86:e9:3b:cb:0a:f7:9d:
                    b0:2f:86:4e:4a:33:79:f2:b2:d5:57:65:14:9c:8c:
                    7a:77:12:0a:a4:3c:be:0e:84:f3:d8:d9:0b:0f:67:
                    b7:14:e0:37:b6:b1:78:2a:b3:cc:da:39:fa:ab:2e:
                    1c:3f:31:60:60:e8:2e:46:c0:31:89:2d:db:02:33:
                    2a:02:04:7a:e6:41:d2:e7:ff:1e:3a:29:16:07:f2:
                    e7:34:37:74:ac:17:8b:2e:a9:3e:37:ab:c9:11:ba:
                    6b:53:db:6b:bf:33:39:09:1f:d3:9f:cc:86:9f:55:
                    ef:02:9e:33:c0:b4:e2:c8:84:f7:01:18:34:6f:c0:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:D4:42:26:FB:71:98:D8:46:95:F7:B6:CF:61:47:C2:95:04:CA
            X509v3 Authority Key Identifier:
                keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:96:2a:d3:82:a5:75:31:0a:00:77:35:66:56:42:89:01:
         3d:43:59:45:d8:10:b4:d7:94:27:b5:a8:c4:7b:3a:a2:19:a7:
         03:45:3b:3b:97:b5:9e:65:e5:fb:b0:b6:a4:9d:8d:ab:e2:e3:
         24:86:b8:96:46:8b:b8:0d:fb:90:08:84:79:c0:08:8b:ea:97:
         72:fc:e3:81:68:d7:d2:2f:35:42:31:b2:1d:9e:7c:25:f5:9c:
         75:0e:50:ac:60:f2:9c:bc:06:7f:81:75:df:0f:7d:b3:4a:d5:
         a1:3e:12:5b:f8:55:12:4d:84:f6:bf:9a:38:49:9a:34:c7:b5:
         bf:d6:54:ce:f4:57:94:28:96:9e:ae:77:ad:8e:ef:25:91:83:
         01:ea:7e:3a:55:5f:2b:2d:89:13:68:f0:e5:3a:68:2e:14:93:
         23:d6:0e:36:a2:e9:75:d0:6c:f3:58:72:4d:ec:a7:10:3b:ae:
         75:1e:d6:64:90:6f:2e:db:5d:eb:0a:a8:e9:f0:b6:4a:74:c3:
         36:40:97:f0:2f:5d:aa:46:a1:72:73:e4:e2:a2:60:6f:6d:cf:
         a5:5d:93:4d:a9:cd:91:3a:54:49:93:c9:08:0e:78:a9:96:45:
         a3:60:ba:8e:d0:38:0f:1c:1c:6b:7c:d0:c7:38:da:1c:88:ed:
         1e:38:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:18:04 2024 by rpki-client on console-ams.rpki-client.org