Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          vXHdeMsMuBNz3Nv/5ye9X+QhgyYIIW5evGnjjapkdiI=
Subject key identifier:   5B:B4:CE:12:33:B4:D3:2B:75:5D:BE:D6:72:94:07:E6:75:59:9F:F2
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       7614A3CD3F65E41ABF9195623A2A66AA65FCA521
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          D4
Signing time:             Fri 22 Nov 2024 00:07:11 +0000
Manifest this update:     Fri 22 Nov 2024 00:02:11 +0000
Manifest next update:     Sat 23 Nov 2024 02:09:11 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: /iORH5ZpL0kB1mBUFQknpZTgvUKTemjNXvTcoKbs5jY=)

Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:a3:cd:3f:65:e4:1a:bf:91:95:62:3a:2a:66:aa:65:fc:a5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Nov 22 00:02:11 2024 GMT
            Not After : Nov 23 02:09:11 2024 GMT
        Subject: CN=5BB4CE1233B4D32B755DBED6729407E675599FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:79:90:50:93:36:5f:a0:a2:8d:b2:cf:4c:
                    e8:1c:2b:44:75:fa:37:51:e4:d2:e4:9f:cd:9b:0c:
                    26:8c:c1:1f:30:fb:47:01:8b:4f:8d:a3:a5:04:d1:
                    65:19:73:53:25:d6:49:30:36:9a:c6:a7:26:38:5f:
                    9d:7b:b0:51:65:ec:b3:21:b1:5b:4f:88:0b:9b:2f:
                    59:00:71:65:d0:08:28:e6:8c:14:30:00:7b:c2:0d:
                    06:58:4c:11:ae:ba:f3:91:1d:49:33:cc:59:ff:ba:
                    24:19:87:72:b9:49:c6:54:84:9f:68:5c:bf:52:8e:
                    90:b5:cb:10:f2:08:4a:55:58:7d:64:f1:0c:b4:5c:
                    c1:2b:bb:c9:db:a4:a0:53:b2:ee:17:d3:24:e0:2c:
                    29:29:77:e6:9f:a8:8c:2b:f2:16:97:17:cc:f9:65:
                    ac:5c:7a:25:3c:fb:fc:26:52:86:66:99:14:18:27:
                    1b:2e:d6:42:76:79:51:ba:8d:5f:03:06:d3:9f:f1:
                    70:cf:25:e6:9f:d1:c6:6a:3f:30:61:4b:c6:4e:f2:
                    47:02:da:ee:15:fe:43:64:f1:bc:92:d9:59:ec:33:
                    e2:ff:86:e3:70:25:6c:48:f1:6e:65:e3:92:40:90:
                    e1:9d:5d:c3:7f:db:4e:a9:1e:7d:57:57:f6:92:83:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:CE:12:33:B4:D3:2B:75:5D:BE:D6:72:94:07:E6:75:59:9F:F2
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a8:40:74:d1:00:61:8a:d5:c5:ba:49:bd:10:4a:4b:77:76:
         df:44:e1:6b:f2:3b:d3:6b:3a:37:28:a2:cd:47:dc:a7:eb:be:
         1c:74:88:da:08:47:71:aa:d5:37:05:e9:7e:20:9a:86:63:d6:
         34:ac:7b:88:6e:39:3d:bf:b5:0f:7a:0c:23:85:76:6e:d7:81:
         9f:0a:c4:d9:72:27:26:a5:cc:59:84:44:ec:22:42:50:15:bd:
         55:b6:37:fd:9e:a7:84:40:38:76:fc:69:da:35:c4:fd:33:87:
         7a:70:36:1f:9b:53:d7:b7:60:1a:43:62:1c:f0:63:96:f4:7f:
         37:2c:c2:89:02:c6:3b:dd:48:b5:b3:bc:0f:f0:0f:3b:56:7e:
         af:80:c1:89:f0:ee:b2:9e:9d:35:23:75:b1:6c:09:d5:01:96:
         3f:77:cd:21:1a:89:52:6c:92:3f:25:54:01:a3:12:62:ee:4d:
         63:09:dd:27:6e:63:34:81:16:d1:03:c3:78:bd:b7:7f:ba:b0:
         fc:c4:85:98:0b:e2:93:4e:17:1b:bd:80:e3:ef:d2:0d:17:f5:
         5b:a8:da:54:c6:42:ac:f5:b9:5c:cb:c6:bc:25:41:50:52:4a:
         a9:07:d8:26:e5:d0:a9:4f:cc:6a:21:82:8d:7a:65:1c:57:6c:
         a8:1c:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:00 2024 by rpki-client on console-fra.rpki-client.org