Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File:                     _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier:          FNaVwHN1lCsM/26S/KBTEOkRVX56Xf3l03MeWD5gj7c=
Subject key identifier:   BC:1C:A3:F4:21:F8:6D:04:54:9F:C7:65:80:90:71:1F:38:90:17:69
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer:       /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial:       018F874AA78924F472ABA150C2694F695A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: +o9oMq1wforzwuFo0+QmAKt5NH8xixLadszWXmJMgPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a7:89:24:f4:72:ab:a1:50:c2:69:4f:69:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=bc1ca3f421f86d04549fc7658090711f38901769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:58:06:d7:d0:7b:c9:5c:31:f3:f8:1b:6d:
                    ba:08:5a:5a:03:f6:96:bf:b3:6e:81:84:e0:7a:98:
                    0a:b3:70:cc:99:31:fa:05:59:b8:a8:43:93:46:8a:
                    d9:d3:fa:0a:e9:24:c3:98:fe:37:9a:5e:31:9b:56:
                    72:53:a5:24:dc:d5:82:3b:f4:db:f4:53:7c:33:3c:
                    75:db:ea:b4:8d:b3:5c:83:69:76:4a:dd:c1:0d:fa:
                    db:32:3f:33:25:44:cc:59:40:2f:2f:b7:c2:ac:be:
                    21:0f:f3:5a:bb:74:a2:11:5f:d8:70:08:b9:c5:b4:
                    35:4e:ec:2e:f8:b8:85:38:2c:f8:88:df:32:1c:3e:
                    46:26:f3:ad:d1:4c:94:90:b4:2e:ab:8d:f2:db:97:
                    ff:c9:2a:59:61:36:3c:a3:81:b7:76:8a:74:ec:81:
                    5c:06:9c:5a:68:ea:ac:61:9b:a5:87:d0:cb:91:65:
                    b3:c4:7d:22:e4:b4:59:27:06:66:ff:1f:46:28:32:
                    4b:a3:af:b8:4d:d8:2b:fa:8d:34:f7:17:30:17:7f:
                    b1:ef:11:ed:4e:67:ac:45:64:94:51:81:d3:b0:e5:
                    0b:13:80:68:a5:4d:03:fa:1b:d2:d1:bf:95:95:0a:
                    6c:72:ca:4c:a9:35:1a:c9:1c:59:5c:0a:a6:ac:a9:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1C:A3:F4:21:F8:6D:04:54:9F:C7:65:80:90:71:1F:38:90:17:69
            X509v3 Authority Key Identifier:
                keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:6e:77:8f:fd:25:aa:ec:b0:26:41:5a:73:f5:41:87:3a:
         32:ef:25:a5:a5:42:68:c9:aa:16:07:5f:1a:e2:b1:71:87:1e:
         98:6f:4a:71:97:6c:74:ec:83:25:dd:f5:c2:79:7a:72:07:55:
         eb:4e:b1:16:6e:c3:ec:24:48:b3:80:23:b6:27:42:61:71:42:
         c7:e3:99:14:25:96:0c:c0:d1:4f:a3:c3:9b:84:06:79:7f:db:
         92:ec:f5:ef:6d:8c:2e:5e:e1:a3:82:bb:ba:fc:4b:5a:b9:f0:
         98:24:3a:17:89:dd:2b:4f:2f:40:dd:4d:0b:3b:46:38:e7:2b:
         f2:fe:ed:f8:ab:8a:a2:b8:86:e3:3a:a7:a8:7f:8b:71:70:f3:
         78:53:14:68:df:1b:7c:3a:38:d6:33:f6:81:4e:df:2f:dd:01:
         77:17:7a:0e:bc:44:24:b7:1b:7c:71:93:9c:04:35:9b:e8:39:
         71:b3:c9:63:50:9a:f4:6b:22:27:41:57:50:0b:8c:17:ab:95:
         22:5d:dd:06:88:66:94:4d:4b:cd:95:56:be:cd:24:30:91:17:
         90:26:1d:65:b4:e2:eb:a6:d7:c8:6c:60:87:7f:bb:ee:f0:0d:
         2d:57:5d:99:b4:60:2d:16:2b:43:5f:e2:46:6b:51:2f:34:bc:
         0d:1a:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:02:16 2024 by rpki-client on console-fra.rpki-client.org