Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
File:                     nWz2idSa8woXuBDn8nWHL9kW2Fg.mft (raw, json)
Hash identifier:          XFf+iixTsQhmJypP1bVdbq4p72shR0/yc14uYV3iuQA=
Subject key identifier:   54:07:E5:6A:A7:7C:ED:16:0C:BA:C0:2A:34:9D:BB:3B:98:B1:4E:A1
Authority key identifier: 9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58
Certificate issuer:       /CN=9d6cf689d49af30a17b810e7f275872fd916d858
Certificate serial:       018F87ED66539A816425AD1A168D9EE3C89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
Manifest number:          0EBB
Signing time:             Fri 17 May 2024 19:00:33 +0000
Manifest this update:     Fri 17 May 2024 19:00:33 +0000
Manifest next update:     Sat 18 May 2024 19:00:33 +0000
Files and hashes:         1: nWz2idSa8woXuBDn8nWHL9kW2Fg.crl (hash: 8bWmesa1kVHbAYT4fgC8a7j6mDfL076dIejIV5HcMMA=)
                          2: znLYZSL3YAQNdkfHzNbWKOUbkh0.roa (hash: P7CNuC8WCM8tvTHHiMT2A6wFA7wqdSAvJX07I3mTRwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:66:53:9a:81:64:25:ad:1a:16:8d:9e:e3:c8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6cf689d49af30a17b810e7f275872fd916d858
        Validity
            Not Before: May 17 19:00:33 2024 GMT
            Not After : May 18 19:00:33 2024 GMT
        Subject: CN=5407e56aa77ced160cbac02a349dbb3b98b14ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:02:1d:b7:0d:56:b3:b3:b3:67:49:86:e4:
                    25:2a:65:21:33:f5:92:a4:59:cc:4e:71:f9:54:d3:
                    09:23:41:94:b7:2c:e7:17:83:8f:32:89:be:99:9d:
                    c7:5f:49:d7:e0:20:9d:a4:02:ec:9b:82:7c:4d:fe:
                    6e:7b:78:62:4b:0c:33:dc:a0:0c:02:29:44:f6:eb:
                    c4:a2:6c:4d:e8:bc:8c:9c:2f:d0:69:19:25:65:3a:
                    13:1b:67:28:00:06:86:de:45:47:a3:66:3c:dd:ee:
                    cf:b7:ff:f8:f0:d5:19:c1:8c:0a:a5:e8:3f:69:84:
                    53:28:72:9c:cc:50:5d:33:30:2e:54:dc:a9:2e:86:
                    59:cc:0d:89:b8:36:66:3b:e4:b7:46:f3:6b:e2:23:
                    9a:8e:f1:43:f3:6d:44:2e:cd:cd:51:7b:1b:2b:a3:
                    fe:eb:38:7f:c7:7b:cb:fa:b2:ae:3c:c5:9e:c5:ff:
                    c4:76:90:7f:ac:c6:07:be:b5:4a:9a:ed:f8:f3:73:
                    7e:d4:db:e3:0b:8b:11:45:e6:ff:9b:c2:95:fd:66:
                    c7:26:9d:41:af:d1:4c:c4:5c:4b:84:c4:bb:5c:23:
                    c9:0a:a6:f9:a3:62:52:88:e8:13:10:cf:96:51:33:
                    fa:ba:26:95:4c:09:c4:fd:e0:71:94:a4:0a:8b:80:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:E5:6A:A7:7C:ED:16:0C:BA:C0:2A:34:9D:BB:3B:98:B1:4E:A1
            X509v3 Authority Key Identifier:
                keyid:9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:db:a4:a4:2e:36:1e:d0:a0:f4:96:85:31:ad:e5:97:36:a2:
         54:e3:f1:33:b0:47:d3:7a:27:c8:f0:01:53:03:86:19:be:d9:
         a6:df:32:a8:8c:17:55:d3:ef:9d:14:37:b2:79:aa:3a:1f:7c:
         1a:d2:bc:37:72:ae:0c:e8:ea:14:d9:f4:88:cc:d2:ef:ab:e9:
         b1:7c:2a:4e:a5:a2:25:d8:01:91:5a:5c:ff:7c:f5:98:75:72:
         a4:72:cf:b6:1e:de:df:be:7d:6a:06:23:a5:c2:c3:34:fb:06:
         60:c2:f1:c6:db:2f:e6:c3:1e:49:61:82:c4:f5:a4:39:8f:ae:
         6c:7b:7c:00:47:fe:99:1d:38:1d:1a:92:3c:99:f9:b7:69:12:
         7a:13:1c:e1:f6:6b:23:e1:3c:25:5e:b9:08:f9:70:02:81:87:
         b7:bb:8c:f6:53:17:11:f8:85:ba:b2:81:f6:0d:88:0b:82:df:
         f6:ea:bd:ed:1e:44:ae:d7:35:b9:e6:88:fb:86:c4:b2:66:52:
         2f:a5:a9:91:8a:82:36:b1:34:b2:c3:1f:2a:74:6a:2e:a8:d6:
         85:d3:74:76:01:45:3e:f5:dc:73:f7:5f:e0:32:ae:ff:2a:d1:
         87:ce:ac:bf:9f:a4:e1:f5:e2:1b:a5:90:77:08:1f:89:18:73:
         c8:b5:bf:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7WZTmoFkJa0aFo2e48ifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmNmNjg5ZDQ5YWYzMGExN2I4MTBlN2YyNzU4NzJmZDkx
NmQ4NTgwHhcNMjQwNTE3MTkwMDMzWhcNMjQwNTE4MTkwMDMzWjAzMTEwLwYDVQQD
Eyg1NDA3ZTU2YWE3N2NlZDE2MGNiYWMwMmEzNDlkYmIzYjk4YjE0ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10CHbcNVrOzs2dJhuQlKmUhM/WS
pFnMTnH5VNMJI0GUtyznF4OPMom+mZ3HX0nX4CCdpALsm4J8Tf5ue3hiSwwz3KAM
AilE9uvEomxN6LyMnC/QaRklZToTG2coAAaG3kVHo2Y83e7Pt//48NUZwYwKpeg/
aYRTKHKczFBdMzAuVNypLoZZzA2JuDZmO+S3RvNr4iOajvFD821ELs3NUXsbK6P+
6zh/x3vL+rKuPMWexf/EdpB/rMYHvrVKmu3483N+1NvjC4sRReb/m8KV/WbHJp1B
r9FMxFxLhMS7XCPJCqb5o2JSiOgTEM+WUTP6uiaVTAnE/eBxlKQKi4AVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQH5WqnfO0WDLrAKjSduzuYsU6hMB8GA1UdIwQY
MBaAFJ1s9onUmvMKF7gQ5/J1hy/ZFthYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld6MmlkU2E4d29YdUJEbjhuV0hMOWtXMkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NDgzNTktZWI2ZC00NWY3LWI1Y2It
NGZkMzgxYjA3ZjdkLzEvbld6MmlkU2E4d29YdUJEbjhuV0hMOWtXMkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NDgzNTktZWI2ZC00NWY3LWI1Y2ItNGZkMzgxYjA3Zjdk
LzEvbld6MmlkU2E4d29YdUJEbjhuV0hMOWtXMkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9ukpC42
HtCg9JaFMa3llzaiVOPxM7BH03onyPABUwOGGb7Zpt8yqIwXVdPvnRQ3snmqOh98
GtK8N3KuDOjqFNn0iMzS76vpsXwqTqWiJdgBkVpc/3z1mHVypHLPth7e3759agYj
pcLDNPsGYMLxxtsv5sMeSWGCxPWkOY+ubHt8AEf+mR04HRqSPJn5t2kSehMc4fZr
I+E8JV65CPlwAoGHt7uM9lMXEfiFurKB9g2IC4Lf9uq97R5Ertc1ueaI+4bEsmZS
L6WpkYqCNrE0ssMfKnRqLqjWhdN0dgFFPvXcc/df4DKu/yrRh86sv5+k4fXiG6WQ
dwgfiRhzyLW/Zw==
-----END CERTIFICATE-----
Generated at Fri May 17 23:59:38 2024 by rpki-client on console-ams.rpki-client.org