Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File:                     nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier:          CrNwz7fGkKMXz2MeySYyB9+B8CcenFkDu6m1C5h6YFc=
Subject key identifier:   CF:A5:92:B4:4C:1A:85:27:1B:BA:81:87:EB:AA:60:AB:CC:5A:6E:8D
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer:       /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial:       0193568A1C8AB2B3B63A841E9814CD94B53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number:          046F
Signing time:             Sat 23 Nov 2024 01:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:51 +0000
Files and hashes:         1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: wvd3rwTcQ0fog2nfgWKhNpeaJLHAZmHOo+s1vou+hfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1c:8a:b2:b3:b6:3a:84:1e:98:14:cd:94:b5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
        Validity
            Not Before: Nov 23 01:01:51 2024 GMT
            Not After : Nov 24 01:01:51 2024 GMT
        Subject: CN=cfa592b44c1a85271bba8187ebaa60abcc5a6e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:88:24:e7:97:47:05:29:7d:a9:72:0e:ec:
                    99:30:e3:af:34:19:a8:21:0d:a3:ff:c2:71:1c:71:
                    9f:cb:90:88:4f:d4:06:fa:df:7b:87:ca:ce:44:e9:
                    76:06:8a:da:83:70:07:e4:7c:3a:3e:33:81:2b:3a:
                    ec:9e:c7:eb:df:4d:02:74:ef:22:46:b3:ff:11:51:
                    71:9e:27:ef:1f:d3:23:a8:59:f9:93:97:59:b8:70:
                    77:ac:95:65:3f:59:1d:8c:d0:0d:41:39:92:ad:7c:
                    56:0b:9d:a4:39:d1:11:69:43:94:6c:f2:2e:d1:1b:
                    b9:9c:4b:d8:79:e6:a7:27:a9:fa:d2:06:74:3f:21:
                    1b:1f:45:30:8d:85:17:28:2f:e6:f2:28:06:1f:59:
                    86:94:28:f4:26:a0:a7:b5:68:18:61:c6:cf:01:a9:
                    63:17:ee:15:43:cc:a1:fe:9b:1e:15:c3:9d:c7:38:
                    e2:75:34:39:8d:06:fa:bf:9a:99:54:31:59:05:08:
                    2f:5c:63:81:dd:f1:ba:ca:d9:a1:9a:a3:73:6f:2c:
                    ac:9d:a9:a1:e4:83:42:26:0f:89:6d:dc:84:10:0d:
                    ec:4b:fd:bc:96:95:c5:c8:11:ce:45:6e:45:de:4d:
                    89:3d:1e:44:1a:77:7d:c4:ad:a5:4b:ba:4d:18:b9:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:92:B4:4C:1A:85:27:1B:BA:81:87:EB:AA:60:AB:CC:5A:6E:8D
            X509v3 Authority Key Identifier:
                keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:45:0f:ef:98:58:9b:a0:61:da:53:ff:09:78:cd:80:f7:
         af:3b:0f:71:03:34:c3:61:d6:35:9d:90:94:83:2f:b5:23:67:
         3f:68:4d:c7:cb:2e:1e:25:58:8d:f9:76:3b:36:90:e7:57:4b:
         53:ed:ed:ca:1f:1b:8b:1e:d8:f2:e0:1c:01:37:71:52:b4:64:
         45:de:ce:b8:36:f7:48:8a:0f:76:bf:3d:34:9d:67:99:c1:a4:
         c7:81:b4:c3:02:83:2c:7c:2c:18:f1:d4:09:44:51:9e:37:7f:
         f4:a6:7e:70:bf:ca:ef:76:51:cd:63:ba:2b:13:08:82:24:c3:
         91:1f:8c:25:16:a7:c8:ff:f8:ee:0e:17:6e:c2:37:17:a5:fc:
         04:02:db:d9:40:79:89:38:0a:0e:b8:5e:a2:a2:af:fc:46:e1:
         0f:8a:a4:49:84:f3:1d:18:9f:45:ec:a0:d5:86:fd:33:3b:8b:
         18:96:a3:d4:27:c5:53:c4:e4:0d:6c:36:00:3d:e5:c7:da:46:
         3e:8b:e5:c4:3a:5b:ad:f4:56:b0:f4:a9:28:e9:2c:a4:d3:78:
         71:f1:b9:a0:d7:c4:a2:db:03:9d:6f:f2:99:91:41:5a:8a:26:
         6f:e0:ed:79:21:4e:c9:4a:06:49:b9:77:5f:83:27:b0:49:14:
         f6:ef:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:15 2024 by rpki-client on console-ams.rpki-client.org