Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
File:                     NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json)
Hash identifier:          PCu9l3+V0Aryg7LKK65dSXMt7vIhOZW8eMmyoZbVRhY=
Subject key identifier:   3B:5C:81:9A:45:8B:90:2C:7C:4E:86:20:AF:02:93:22:83:A2:57:4C
Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
Certificate issuer:       /CN=347915388578e61d886849a21d70ba075149c1a1
Certificate serial:       018F874A6932CED8F72A666F2D86707B9C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
Manifest number:          0704
Signing time:             Fri 17 May 2024 16:02:31 +0000
Manifest this update:     Fri 17 May 2024 16:02:31 +0000
Manifest next update:     Sat 18 May 2024 16:02:31 +0000
Files and hashes:         1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: 3EdrFyOUdE5XEcfVtP5dVycu4DG4aubhQSgIKIHKdow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:69:32:ce:d8:f7:2a:66:6f:2d:86:70:7b:9c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347915388578e61d886849a21d70ba075149c1a1
        Validity
            Not Before: May 17 16:02:31 2024 GMT
            Not After : May 18 16:02:31 2024 GMT
        Subject: CN=3b5c819a458b902c7c4e8620af02932283a2574c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:07:b0:14:76:03:7d:e4:32:75:1c:cd:80:
                    f7:14:f1:01:0a:56:f7:ff:11:f4:d7:d9:5d:70:b1:
                    af:99:08:84:d3:7b:2b:f2:a0:ef:6f:80:92:b4:d7:
                    9f:59:5c:0e:f9:f3:32:20:95:cb:84:e7:c6:b8:bb:
                    45:fb:17:08:b3:5b:e6:25:2e:88:9a:b0:84:ab:c6:
                    b5:58:21:6a:d6:03:4e:43:a1:26:d7:0c:2d:42:0d:
                    33:09:aa:ca:37:8e:13:4f:0d:f9:c2:f9:bc:7e:9f:
                    5d:f8:b8:78:51:5d:fe:9e:1e:eb:1b:a8:91:5d:17:
                    2b:51:2a:2c:08:3a:69:5f:7b:6d:8a:6e:c1:33:4a:
                    36:48:ff:51:cc:ec:a1:8d:74:0a:5c:ff:83:5d:6d:
                    ae:8b:c8:78:4d:52:7b:c0:e1:fd:d0:d2:05:c0:50:
                    72:73:6a:44:f6:ad:59:45:83:75:ee:b7:4d:0a:37:
                    19:4d:ab:48:e3:af:02:3a:25:4b:5e:e0:44:d8:7c:
                    9a:22:ed:f0:eb:d1:35:db:10:d6:5c:20:3b:23:1b:
                    95:d0:8b:05:9b:45:15:b2:75:98:78:ba:3e:e2:c9:
                    81:c7:6f:8d:a5:ef:a0:d1:e5:9c:fb:a1:fc:b4:24:
                    65:ab:55:5f:06:8e:89:d7:b7:38:5a:9b:02:db:46:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5C:81:9A:45:8B:90:2C:7C:4E:86:20:AF:02:93:22:83:A2:57:4C
            X509v3 Authority Key Identifier:
                keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:76:a8:25:d8:fb:b5:e5:8c:d7:8d:30:0f:6e:b2:da:7c:
         39:21:29:cb:76:da:b4:22:33:4c:d5:6d:dc:60:f5:2e:d8:81:
         4f:8f:9d:39:02:91:87:18:8f:89:87:4b:30:e2:4b:fd:38:34:
         57:d2:5e:a2:4c:e6:91:41:92:46:15:50:77:95:01:e1:69:67:
         0d:fd:b9:40:5c:5f:66:4c:21:b7:c0:41:42:fd:40:9e:89:1b:
         63:99:0a:25:32:b8:29:91:ba:e8:ed:77:b3:c4:49:b7:a9:73:
         d6:c4:6a:95:6c:5c:f6:ef:c7:e3:0f:d6:3c:35:30:3e:9f:80:
         b6:1a:53:5b:e8:31:cf:45:c2:8f:2f:ee:06:2e:3a:62:c4:46:
         6c:8f:8d:01:12:4f:85:e0:0e:3e:fc:f4:a5:b5:30:78:72:88:
         bb:c6:50:6f:36:98:cc:1a:53:34:3d:5d:a6:61:6d:27:2e:28:
         cb:66:bd:2e:9d:c9:bc:35:30:2d:72:b2:75:0e:23:1b:21:d1:
         46:3f:37:65:8c:17:0e:41:fb:ac:0e:89:1b:1d:6b:7b:37:40:
         90:47:61:8e:58:07:98:21:54:1b:b5:52:1d:2c:23:b9:19:f2:
         28:d1:93:45:90:8a:ec:cd:89:80:a6:30:81:5f:45:4d:04:10:
         26:a1:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:59:57 2024 by rpki-client on console-ams.rpki-client.org