Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File:                     nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier:          xMCINr7LbWD76OMAptpJ5XatpAwTc+WtQPwi9zKylyA=
Subject key identifier:   E3:24:42:F7:74:02:78:5C:5F:4F:BD:59:16:C9:37:21:82:F8:E2:25
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer:       /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial:       018F8749B1EDD935D1EAEA74A522E7B1EDE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number:          0276
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: tMrLZM15h+jV4phKAveOVrHMeHbE7cN6ACk1pykZbIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b1:ed:d9:35:d1:ea:ea:74:a5:22:e7:b1:ed:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=e32442f77402785c5f4fbd5916c9372182f8e225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:2b:8d:73:6d:5f:59:12:c2:46:ad:61:ba:
                    92:a0:e6:fc:48:43:cd:a9:27:a3:fe:46:a7:eb:5b:
                    5a:f0:52:4d:fe:a5:4c:87:fa:d0:3f:61:d2:ef:fd:
                    08:60:6f:4d:47:5e:47:82:9e:53:35:9b:5e:57:cc:
                    10:5b:9c:2a:b4:80:1b:64:62:e6:0d:04:10:43:24:
                    5f:63:42:22:20:c9:87:c1:33:d8:a6:75:3c:03:2e:
                    e6:94:a1:61:3e:1f:2e:c2:ba:25:b1:a2:15:2c:a4:
                    f7:53:71:4c:1c:05:ee:c8:40:32:78:94:27:84:10:
                    94:5b:46:35:f7:fc:7f:b3:fe:c6:02:78:d2:30:ba:
                    69:ba:a9:d8:6d:75:27:f3:57:fe:f0:d1:ce:e6:41:
                    28:4c:30:12:ee:f6:42:45:5e:47:41:15:5b:80:29:
                    b5:93:43:80:be:59:58:4c:bf:b0:2e:b4:4c:2f:dd:
                    16:29:a0:cc:f3:a8:f8:ef:e6:2d:49:43:c3:23:87:
                    11:1d:7c:eb:53:32:3b:6e:00:b1:01:45:e6:fd:a5:
                    d5:ac:b2:c3:2a:9f:20:a6:f4:2f:59:f0:82:3b:e4:
                    b6:01:6e:3b:a8:10:40:9b:e7:ec:8e:b7:c3:2a:5f:
                    1b:19:70:0b:40:9d:99:1e:78:4d:8a:80:eb:6f:c9:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:42:F7:74:02:78:5C:5F:4F:BD:59:16:C9:37:21:82:F8:E2:25
            X509v3 Authority Key Identifier:
                keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:70:c7:0b:da:d1:37:3f:97:db:ad:06:0a:ca:d6:f9:55:50:
         e2:67:e7:56:6f:33:40:31:6e:c8:ac:e7:83:51:21:b8:80:75:
         e7:ae:ab:93:cc:13:3a:de:ac:04:3f:06:3a:2e:c7:67:3a:8c:
         1c:3d:df:d8:cb:19:f9:f6:fa:53:a6:bf:58:12:af:19:f0:96:
         cd:3e:02:ab:13:3f:f3:6f:a3:5b:22:d3:02:13:7f:65:57:2c:
         7a:b5:a7:76:1c:f4:24:dd:63:04:52:2a:4e:d9:00:e9:cb:4a:
         b5:a0:0b:fa:b8:5b:13:cc:8d:60:a6:36:ae:f8:68:75:f6:bc:
         52:62:ee:7b:44:d0:16:66:17:8a:71:a9:c4:05:b1:09:ed:d1:
         dd:bd:e0:ce:9e:9d:13:0b:4b:ea:aa:b4:58:9f:3b:bd:c7:a4:
         e2:06:02:b9:a8:c6:91:6b:ff:fd:0c:bb:81:b9:49:ea:1e:c2:
         aa:9f:4b:1f:a3:39:11:4b:b7:01:23:97:40:69:00:f5:a7:6f:
         a5:46:5f:ec:41:12:84:e3:b7:cd:83:be:f3:6b:34:d1:43:2a:
         ec:4c:ef:26:17:25:17:87:10:7b:3b:00:d8:24:4f:eb:82:ae:
         ce:61:a1:8c:08:f3:74:75:c6:e3:b0:27:90:d3:ea:5f:5e:e7:
         4c:5e:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:26 2024 by rpki-client on console-ams.rpki-client.org