Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File:                     N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier:          iyagGqB2qP5GYnYh2bTFLz/Y4DZPUg1t/ph0bWNM0Qo=
Subject key identifier:   30:AC:BF:38:D0:60:A0:5E:05:73:D3:C9:0C:FA:E1:6D:21:FF:FA:6F
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer:       /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial:       01901E902DE912DEF16DEA78BA98565F3F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number:          0DAA
Signing time:             Sun 16 Jun 2024 01:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:23 +0000
Files and hashes:         1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: KFxperatRHFBvFXA65W4ctNK5Hr6RjXPBwhUNU5+d5U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:2d:e9:12:de:f1:6d:ea:78:ba:98:56:5f:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
        Validity
            Not Before: Jun 16 01:01:23 2024 GMT
            Not After : Jun 17 01:01:23 2024 GMT
        Subject: CN=30acbf38d060a05e0573d3c90cfae16d21fffa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:d1:9b:f5:7d:d9:a0:0a:b3:c4:9a:6a:ae:
                    ea:5a:03:65:91:66:4a:cf:80:0a:4f:7e:80:94:b8:
                    cb:77:01:5f:7c:a5:6d:51:df:88:ee:0a:85:45:31:
                    ef:05:d7:4e:69:0a:3e:f8:4e:67:d6:b1:ff:da:e3:
                    bf:10:6d:e1:ae:6e:d1:69:7e:9f:d6:ab:27:1c:9f:
                    e3:75:d2:5e:2f:61:f6:37:49:61:b1:bf:d2:c8:59:
                    2f:3a:ce:08:4d:62:95:06:2b:00:fa:ba:09:b3:ab:
                    4e:51:5e:51:39:80:7d:42:ab:43:b4:7e:e5:4b:4e:
                    63:47:36:b1:e6:d4:7b:83:d6:ca:6a:cf:f5:da:7e:
                    29:68:89:dd:25:4a:9b:ed:aa:1a:ee:90:ce:d4:02:
                    01:9b:c0:88:f0:4d:ce:f1:9b:d5:eb:b6:07:ba:d3:
                    59:58:50:3a:43:51:5f:bd:fd:48:bd:19:67:02:86:
                    37:42:a4:ad:54:f6:5b:5c:5c:7f:2a:f2:9d:e2:61:
                    58:41:a0:78:8b:b0:ac:9e:ec:41:ab:32:cd:83:b0:
                    a9:5a:80:f2:05:d0:1a:af:54:97:b9:5e:d8:2b:95:
                    94:34:37:b5:61:75:5b:fe:68:0d:8f:0b:77:2a:04:
                    7f:3e:5e:eb:fb:26:06:bf:73:49:e3:07:e3:18:f3:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:BF:38:D0:60:A0:5E:05:73:D3:C9:0C:FA:E1:6D:21:FF:FA:6F
            X509v3 Authority Key Identifier:
                keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:13:a1:e9:ff:61:f2:bd:e7:62:f0:88:21:32:8c:e2:5d:
         7e:02:4d:a3:a6:28:f1:d2:d9:91:aa:a2:f6:50:5d:48:0b:1d:
         91:4d:16:3b:b4:5c:c8:06:98:94:18:68:c7:1d:db:43:9b:e1:
         02:dc:9b:47:5c:f2:14:56:8e:15:05:d5:1f:87:df:f6:03:34:
         77:00:55:af:1e:4d:70:ea:f8:73:45:84:d8:81:52:a4:38:7a:
         dd:4b:6c:99:51:cb:5e:21:8a:ca:83:52:72:cb:5e:5c:fc:7c:
         5f:39:24:af:41:7f:92:99:08:a6:52:c1:40:27:bd:fe:71:67:
         34:21:96:85:d6:b6:a5:04:05:5e:3d:51:47:ed:fa:eb:b1:23:
         f3:37:c0:02:bd:20:bc:1e:9e:84:44:1b:23:ef:bd:e8:5e:b5:
         6c:5f:ab:91:e7:db:f5:b0:6b:8f:9a:be:78:b6:4a:50:46:92:
         26:4e:30:99:d2:25:86:cc:c7:59:d0:7b:a1:7c:41:73:b4:8c:
         54:fb:85:b7:8e:89:48:d9:55:d8:3d:4e:93:16:0a:fb:eb:fc:
         6a:fe:df:8e:e0:96:76:d9:2f:67:b8:a2:27:bf:15:de:bd:da:
         e1:df:9e:e4:26:53:0e:2f:28:6a:ed:ec:01:59:54:57:e2:09:
         1f:ee:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:29 2024 by rpki-client on console-fra.rpki-client.org