Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft
File:                     Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft (raw, json)
Hash identifier:          d4aggSH1KaiAdCiWVtfzuqth0KoAsmDt5t7L6iUqyrs=
Subject key identifier:   98:A9:2F:3F:4E:47:AE:D3:3F:01:73:5E:FC:C4:CB:95:F3:D8:3D:DC
Authority key identifier: 36:AD:33:8C:80:E1:0C:9F:0E:54:8D:54:33:55:73:2F:4E:45:75:D4
Certificate issuer:       /CN=36ad338c80e10c9f0e548d543355732f4e4575d4
Certificate serial:       018F8748FB598303B2C46793739F4C16B268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:57 +0000
Manifest this update:     Fri 17 May 2024 16:00:57 +0000
Manifest next update:     Sat 18 May 2024 16:00:57 +0000
Files and hashes:         1: Nq0zjIDhDJ8OVI1UM1VzL05FddQ.crl (hash: 7oeZz1AW9rEeTRJK2bjHzELPwiJyEluIqySI/x26CQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fb:59:83:03:b2:c4:67:93:73:9f:4c:16:b2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ad338c80e10c9f0e548d543355732f4e4575d4
        Validity
            Not Before: May 17 16:00:57 2024 GMT
            Not After : May 18 16:00:57 2024 GMT
        Subject: CN=98a92f3f4e47aed33f01735efcc4cb95f3d83ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:82:4c:bb:2a:2c:6e:48:20:89:9c:84:d2:
                    1b:19:94:d6:f2:d2:3b:e9:d7:ff:a2:52:a0:17:6b:
                    be:14:33:81:08:27:43:78:ad:c1:c2:af:55:62:03:
                    b7:de:50:35:1c:f2:c4:79:ba:75:16:83:27:e4:7a:
                    c2:1a:96:72:7a:73:dc:ca:54:8b:c8:f6:52:eb:e8:
                    cd:c6:6a:f1:6d:1e:49:1b:8a:35:59:7f:85:35:f1:
                    bd:57:49:16:49:82:b5:51:da:6c:18:cf:b0:81:28:
                    9f:b3:6f:fc:05:cb:f8:b4:f4:fc:72:07:af:84:de:
                    a9:1b:30:2d:c2:b3:34:a0:77:d8:56:b9:ef:8e:c0:
                    51:bd:42:ab:eb:03:de:c8:ff:3b:ba:38:71:a1:1a:
                    70:c0:01:22:3f:30:dd:5e:e2:ec:8a:65:62:7c:d7:
                    1a:05:79:2c:24:6d:c8:25:44:9e:05:9b:7e:ec:37:
                    57:1b:6e:ad:be:77:76:55:b1:31:0b:9c:59:ac:d5:
                    18:a5:05:70:4f:53:7a:52:e6:85:fd:45:4f:84:5b:
                    1c:3f:81:0a:2e:ec:9e:e1:a3:07:66:8c:e0:bb:fb:
                    4b:bb:01:ce:bc:5a:1d:df:c5:a2:fe:9d:eb:28:71:
                    d4:32:6b:9c:9b:ed:d8:a7:a9:8e:79:c5:15:ab:23:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A9:2F:3F:4E:47:AE:D3:3F:01:73:5E:FC:C4:CB:95:F3:D8:3D:DC
            X509v3 Authority Key Identifier:
                keyid:36:AD:33:8C:80:E1:0C:9F:0E:54:8D:54:33:55:73:2F:4E:45:75:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:89:4a:fb:cd:84:3b:a2:3e:93:b6:30:6f:46:37:3b:82:
         2d:6f:1f:a9:51:fe:8b:77:3d:ee:61:91:96:e7:03:4c:29:e0:
         7c:ae:29:33:d5:65:37:fc:c7:7f:3e:70:49:d5:16:b1:f5:f3:
         71:e0:e8:39:46:54:8a:a2:f1:38:e5:d1:07:71:da:b8:6d:e9:
         b6:15:24:cf:06:e9:cc:b8:19:fe:b6:51:13:02:1d:91:86:9d:
         49:25:d8:33:e2:b6:5c:b2:13:35:7e:09:0b:0d:00:57:15:44:
         40:26:e3:34:11:ee:cb:c5:b6:90:33:e9:e9:20:c6:59:95:78:
         ce:0d:41:04:08:aa:45:da:c2:c9:53:fd:92:16:21:4e:ce:e0:
         3f:55:6b:45:79:f6:44:42:b3:8b:3e:60:95:8f:f2:66:dd:c7:
         96:a5:9e:b1:b9:e9:de:c8:d5:4e:45:b4:00:a8:83:4b:59:16:
         d6:d1:42:44:f6:5f:d0:73:11:2e:c9:81:df:4b:1e:49:3b:f4:
         65:03:89:bf:a2:2f:ee:2d:53:98:3c:aa:78:60:6f:4c:b6:04:
         88:99:1d:79:c5:97:ec:b5:ef:2e:d4:af:95:a8:e5:ac:f3:09:
         9b:1b:22:2a:c3:39:f0:a5:29:17:f7:65:9d:25:3d:69:2e:56:
         27:b6:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:46 2024 by rpki-client on console-fra.rpki-client.org