Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File:                     Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier:          NnNfDbNlFBgrOC3AJ1BUUNUUc0btNSoDG8R2sIZjMws=
Subject key identifier:   0A:C1:1E:8D:F3:D3:79:08:26:43:33:EC:9D:7E:27:66:BA:61:B2:50
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer:       /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial:       018F87B6B6F57852DE0B2B76F35DFCCC49D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number:          04BF
Signing time:             Fri 17 May 2024 18:00:49 +0000
Manifest this update:     Fri 17 May 2024 18:00:49 +0000
Manifest next update:     Sat 18 May 2024 18:00:49 +0000
Files and hashes:         1: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: RLLSFx2E9zHTISiBuJhXBOkIMSFkdVikaRD/IztEJ7k=)
                          2: gpppUrsMj1LPNJjZDG6ZXPC5ysY.roa (hash: LwbRF4oG4KdLd1d+bf75ZEDSGvaelW+s094F2tLFtRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b6:f5:78:52:de:0b:2b:76:f3:5d:fc:cc:49:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
        Validity
            Not Before: May 17 18:00:49 2024 GMT
            Not After : May 18 18:00:49 2024 GMT
        Subject: CN=0ac11e8df3d37908264333ec9d7e2766ba61b250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:29:8c:64:e8:bb:70:d4:0a:a5:0e:20:37:
                    9b:1d:e2:bd:9e:b1:8c:0b:3a:6a:6b:ab:20:fd:97:
                    cf:17:57:71:94:2a:33:11:1b:b0:bb:8e:29:6b:1f:
                    50:3b:6f:52:e8:a9:53:08:d8:6e:92:28:3e:cc:f3:
                    d7:db:cf:6f:67:62:eb:a6:a8:1a:7c:96:cb:3d:93:
                    50:82:69:ce:83:92:3b:3c:18:d4:74:d9:54:23:2d:
                    3e:a7:09:c0:31:15:95:fc:e8:54:85:1e:6c:7a:6b:
                    66:ec:91:e0:87:d0:9c:dc:2a:c9:5d:d5:19:79:24:
                    26:d4:dd:8b:2a:67:a4:2f:08:99:d6:20:00:c0:36:
                    9e:57:cb:a0:b2:75:06:2d:1b:99:6a:d3:eb:9e:3b:
                    80:05:1e:e6:b5:d9:61:6a:22:ec:2c:8c:34:47:8c:
                    32:8c:ab:d8:1d:e4:ee:b3:68:ca:84:42:71:06:89:
                    33:1c:de:bd:87:5c:de:0b:2f:4d:88:07:d5:ec:12:
                    50:6e:a8:84:af:8e:1f:f6:60:a6:dc:9b:4d:81:f1:
                    35:8b:e4:3b:55:93:25:05:34:8a:28:d7:93:72:44:
                    1a:23:2a:02:16:cb:c8:fb:67:d6:a5:d3:18:db:a7:
                    51:a9:ed:01:f3:50:06:1f:9e:0d:27:77:c3:1a:8c:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:1E:8D:F3:D3:79:08:26:43:33:EC:9D:7E:27:66:BA:61:B2:50
            X509v3 Authority Key Identifier:
                keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:a4:60:f2:6a:e3:a7:1c:aa:5c:8d:71:62:91:46:51:e1:
         e8:36:6a:00:af:71:34:7d:46:9c:d4:a6:c6:28:ac:f1:77:51:
         c6:b2:ea:54:05:c6:6d:85:56:9a:3d:de:36:9f:1a:2f:48:78:
         8d:bb:b7:3a:5d:16:16:43:bb:20:80:21:51:86:f7:d2:fd:55:
         92:48:d9:59:71:68:0e:b6:23:47:66:57:0e:79:e2:ac:4c:60:
         ea:ac:9c:ba:ea:04:ee:94:a9:5c:9e:38:bb:c5:75:56:6c:d2:
         81:ce:1f:9f:89:95:9e:2c:38:3c:d9:0b:9e:48:e1:37:a8:c6:
         55:62:74:57:2e:67:e3:1a:90:c5:0b:23:27:2d:af:b1:b0:d9:
         43:a9:62:3d:83:fb:92:e7:49:19:12:2a:4d:96:f2:26:74:8f:
         16:a7:7e:3b:f7:3c:04:59:73:78:42:bb:7c:49:c0:3a:19:77:
         b3:64:ae:97:f2:c9:38:5a:25:fc:c8:a2:c6:e7:b5:46:62:a4:
         67:6a:30:e8:99:de:98:7a:08:b9:41:c0:65:43:9d:ee:d3:49:
         42:9e:d8:c1:53:72:82:a2:67:03:4f:56:ab:4c:00:7d:6f:b9:
         bb:80:af:e6:a4:2b:62:1e:65:7d:b6:11:07:3a:22:fe:03:c5:
         65:90:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:31 2024 by rpki-client on console-ams.rpki-client.org