Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File:                     NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier:          1FyTLfJEuS4+hBsyfXxc132IALsWjNn7p//FnLvSt+Y=
Subject key identifier:   2D:7F:51:DB:16:94:76:23:44:CE:26:E6:18:72:EC:25:54:E1:66:50
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer:       /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial:       01901DEABD2821EC33D08DA3D629920B9AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:41 +0000
Files and hashes:         1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: ZXP09HzB0AHysEy++JSUC1q13kG7E8zVRpbz2tNq06k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:bd:28:21:ec:33:d0:8d:a3:d6:29:92:0b:9a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
        Validity
            Not Before: Jun 15 22:00:41 2024 GMT
            Not After : Jun 16 22:00:41 2024 GMT
        Subject: CN=2d7f51db1694762344ce26e61872ec2554e16650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:e7:58:ac:f6:77:6a:19:47:f6:9d:43:6d:
                    56:c2:a7:4d:bd:c6:51:a8:dd:23:61:38:e9:88:19:
                    7c:c2:67:63:ae:9b:64:f6:05:80:6d:48:c9:47:26:
                    5e:49:09:6c:8c:21:d3:c2:d7:22:6d:d5:8d:aa:39:
                    c3:75:a0:8d:3d:ec:59:f3:e2:8d:be:e5:d6:dc:cf:
                    92:45:b3:5f:a5:b6:03:4d:54:23:e7:20:49:d0:46:
                    ca:22:79:76:f2:e5:4e:24:fa:a1:fc:24:1f:a3:70:
                    36:bd:ba:1f:32:61:f5:92:d1:6c:23:cf:2b:19:de:
                    c8:f9:84:63:8e:c7:82:3d:96:be:18:43:94:81:1c:
                    dd:06:a6:07:dc:18:c8:fb:3e:d9:43:b6:e9:79:eb:
                    4f:df:52:6f:8f:aa:1e:cc:f5:78:39:51:c5:af:67:
                    89:50:55:c8:9b:4a:60:4f:5c:bd:8f:bb:41:5f:31:
                    30:92:a6:0e:50:1f:a3:26:d0:ec:61:b9:50:ce:a8:
                    5c:ec:aa:63:52:32:89:0f:35:7f:b4:31:91:20:4c:
                    6b:63:c5:ef:69:30:07:b5:3b:5c:d9:c1:ab:75:1c:
                    54:1f:57:fe:2c:c6:53:59:c9:5b:d6:04:4b:81:32:
                    92:cf:c3:41:06:16:51:c7:cb:4e:c4:a5:d7:16:c9:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7F:51:DB:16:94:76:23:44:CE:26:E6:18:72:EC:25:54:E1:66:50
            X509v3 Authority Key Identifier:
                keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:51:4e:91:32:dd:1b:59:b3:c8:a8:f1:c5:ba:71:c5:b3:
         16:20:30:d8:73:d2:57:45:32:fa:eb:45:7c:ad:80:b8:38:1e:
         f5:1b:39:27:c9:c2:08:30:f3:4f:83:ae:61:17:25:40:7a:c9:
         8f:99:26:c5:78:d0:c2:f3:4c:11:55:81:cc:aa:d8:57:76:8b:
         67:ee:bf:c5:b1:d3:b9:44:5d:e7:4a:56:16:81:86:e8:b8:08:
         36:a1:1d:eb:7e:2c:ca:75:9f:3f:ec:23:d3:36:a8:40:4c:a7:
         4d:24:0b:48:2a:90:43:eb:66:4a:05:00:6d:2c:27:62:8f:58:
         98:d2:ae:3d:89:a8:98:45:0e:26:b7:77:05:c2:70:5c:94:64:
         af:3b:0f:ce:b5:ac:e7:f5:4e:1e:fc:74:3b:cb:2e:af:b8:26:
         48:f0:14:3f:2e:ae:d5:b7:56:58:74:63:ce:0f:91:d9:e3:ba:
         c8:ba:f4:25:75:8e:ee:f6:93:ab:57:f3:70:dd:84:72:69:7b:
         83:34:bd:3a:4a:80:53:3d:b2:7b:01:60:94:b4:90:67:71:63:
         14:54:61:b1:a8:70:de:ba:b2:58:23:1e:9d:e7:d3:88:66:12:
         a1:c7:57:f2:41:e1:68:a2:db:10:5e:8c:4c:9d:83:45:70:3a:
         8b:03:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:56:20 2024 by rpki-client on console-ams.rpki-client.org