Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3f7d59-041d-42e5-b73e-8fed1f2c6d3c/1/nZIKc34peMbb4ziYJjwbol6qPJE.mft
File:                     nZIKc34peMbb4ziYJjwbol6qPJE.mft (raw, json)
Hash identifier:          ukLYUkq8vmy6EwCAFdlyiocx6bRtHZOa1pAOdnZ9bAA=
Subject key identifier:   49:8E:87:65:53:B7:BA:EE:AC:AF:38:A3:5D:4E:07:D8:CF:D3:7E:4E
Authority key identifier: 9D:92:0A:73:7E:29:78:C6:DB:E3:38:98:26:3C:1B:A2:5E:AA:3C:91
Certificate issuer:       /CN=9d920a737e2978c6dbe33898263c1ba25eaa3c91
Certificate serial:       018F874AAEF0F27AC4D7DE4FC84D0ED4AAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nZIKc34peMbb4ziYJjwbol6qPJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3f7d59-041d-42e5-b73e-8fed1f2c6d3c/1/nZIKc34peMbb4ziYJjwbol6qPJE.mft
Manifest number:          10EA
Signing time:             Fri 17 May 2024 16:02:49 +0000
Manifest this update:     Fri 17 May 2024 16:02:49 +0000
Manifest next update:     Sat 18 May 2024 16:02:49 +0000
Files and hashes:         1: nZIKc34peMbb4ziYJjwbol6qPJE.crl (hash: XFf3ZOYLjuR7B6DyalHpblSqpvOifeO0DG3NNNyjn3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3f7d59-041d-42e5-b73e-8fed1f2c6d3c/1/nZIKc34peMbb4ziYJjwbol6qPJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3f7d59-041d-42e5-b73e-8fed1f2c6d3c/1/nZIKc34peMbb4ziYJjwbol6qPJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nZIKc34peMbb4ziYJjwbol6qPJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ae:f0:f2:7a:c4:d7:de:4f:c8:4d:0e:d4:aa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d920a737e2978c6dbe33898263c1ba25eaa3c91
        Validity
            Not Before: May 17 16:02:49 2024 GMT
            Not After : May 18 16:02:49 2024 GMT
        Subject: CN=498e876553b7baeeacaf38a35d4e07d8cfd37e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:ee:55:e4:f9:54:26:e9:3c:5b:fb:a0:4e:
                    18:12:df:0f:2a:69:41:ee:b2:e0:49:cf:cb:de:40:
                    ea:85:30:97:7d:e2:ff:9e:e2:01:3e:ee:81:32:81:
                    c9:71:e3:ea:d6:76:6f:9f:06:08:54:d9:ac:4e:95:
                    6e:e8:25:40:4f:a0:93:4c:79:2f:3d:c0:fc:42:56:
                    c5:97:90:12:c1:67:d5:c7:44:d3:12:84:fc:96:64:
                    3e:4c:cd:5e:ae:36:47:19:bb:73:47:62:9b:24:af:
                    b4:50:fe:0b:8d:25:a4:fb:c1:ed:65:f1:88:d6:b3:
                    bc:82:51:fa:a8:5c:83:a3:aa:8a:b3:23:32:a3:ea:
                    27:b9:3a:03:c0:3e:0d:ff:a8:26:b8:63:b6:bb:00:
                    8e:04:99:57:c6:51:94:2d:b1:35:93:80:56:63:70:
                    f9:e0:83:e7:e6:7c:27:42:e7:c6:35:fe:42:6d:d9:
                    16:cb:c9:e9:19:37:83:5f:5c:ab:f5:19:b3:ac:81:
                    a5:10:c1:7c:04:ad:95:75:e1:25:d6:18:59:60:f5:
                    a7:e2:56:4e:6a:8c:34:9d:0f:c2:9b:53:75:43:da:
                    8e:23:76:37:1f:f0:3f:1b:50:47:71:70:05:1e:0c:
                    0b:5b:a7:14:0c:20:b7:3c:07:39:57:e7:f5:45:7e:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:87:65:53:B7:BA:EE:AC:AF:38:A3:5D:4E:07:D8:CF:D3:7E:4E
            X509v3 Authority Key Identifier:
                keyid:9D:92:0A:73:7E:29:78:C6:DB:E3:38:98:26:3C:1B:A2:5E:AA:3C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZIKc34peMbb4ziYJjwbol6qPJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3f7d59-041d-42e5-b73e-8fed1f2c6d3c/1/nZIKc34peMbb4ziYJjwbol6qPJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3f7d59-041d-42e5-b73e-8fed1f2c6d3c/1/nZIKc34peMbb4ziYJjwbol6qPJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:20:8b:a7:ba:5d:b7:4c:d6:b9:78:17:2a:79:37:93:1c:bd:
         4b:5d:55:9b:be:58:73:82:1d:54:40:cc:3f:f1:9e:c5:95:35:
         77:2b:da:42:ae:23:92:e5:da:fa:03:81:88:2f:7e:b7:f9:12:
         c4:35:96:21:b3:6b:38:ef:5a:1f:8b:72:9c:25:58:d8:16:93:
         23:71:c9:d9:4d:be:72:9b:0f:89:50:fe:62:73:ea:97:f6:b9:
         7b:3f:88:27:be:38:7d:ff:71:84:ac:88:4f:e7:9d:61:0c:ae:
         d6:6d:2f:d7:10:58:44:6a:1d:18:b6:1e:9f:55:80:63:65:4b:
         ca:42:bd:20:83:3c:de:57:9c:8c:f2:45:df:70:c3:be:00:6b:
         ec:03:16:b9:ec:42:1b:ad:91:25:22:e3:95:87:f2:6c:a0:7d:
         88:9f:79:65:fe:06:3d:6b:70:1b:09:42:ca:d1:d8:03:69:34:
         db:50:88:ca:c3:4f:7f:a3:39:75:f0:f3:95:74:19:39:ed:96:
         84:c8:7e:0e:58:23:fa:77:97:b3:f1:13:e9:ab:92:69:8e:d2:
         fe:43:8f:d2:26:0f:b9:64:76:ae:98:3d:9d:f8:eb:3f:fc:35:
         75:e3:d8:26:59:23:64:8d:de:86:88:77:0b:f0:93:b3:3e:c7:
         1d:b7:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:48 2024 by rpki-client on console-fra.rpki-client.org