Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File:                     NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier:          caIzQlmISrjeiUojsxlr0yCkKcHoPKNq6VueH9y2vjE=
Subject key identifier:   94:41:3A:68:AA:E8:28:E5:FE:66:C6:D4:E6:A4:03:C4:8D:1C:96:0C
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer:       /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial:       018F885B1D8BC0BD7FE94932664CE3FB3EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 21:00:23 +0000
Manifest this update:     Fri 17 May 2024 21:00:23 +0000
Manifest next update:     Sat 18 May 2024 21:00:23 +0000
Files and hashes:         1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: esH30ayPXNgw6DU6bIqgcQyfw28TZhmagHjiorNEKVg=)
                          2: dcrIXQSLmm0rcmf0y_VawM_t2xo.roa (hash: KDjW6P3WG5rF2ZFySrLa8guqjb00+dxtEQpI9HtPDFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1d:8b:c0:bd:7f:e9:49:32:66:4c:e3:fb:3e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
        Validity
            Not Before: May 17 21:00:23 2024 GMT
            Not After : May 18 21:00:23 2024 GMT
        Subject: CN=94413a68aae828e5fe66c6d4e6a403c48d1c960c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:8d:7e:4b:b1:bd:63:0d:f7:63:48:4e:2d:
                    72:a6:63:4f:18:80:90:24:1c:49:57:99:be:9e:31:
                    81:36:a7:5d:bc:a3:38:43:9e:c8:54:79:c5:2d:3e:
                    34:b3:c5:09:9c:67:49:57:75:48:82:d6:a3:d5:67:
                    34:37:09:2a:62:9a:e1:7c:78:a8:09:77:5c:55:d7:
                    3e:af:2f:09:ca:ef:6f:e7:8f:be:a6:11:b2:32:2c:
                    ad:78:81:7a:a2:26:e5:a3:ad:c2:6b:1f:eb:9c:44:
                    91:7d:0d:04:13:06:cb:b1:6d:39:3a:6e:3c:5e:64:
                    2e:1b:60:d3:3e:0b:26:77:d9:a7:ef:36:48:a2:3d:
                    44:e5:0a:f2:40:26:24:b1:f3:27:49:86:12:29:2b:
                    5f:a0:1e:d1:dc:e6:74:ec:6e:7d:36:36:b6:2e:15:
                    22:c5:ee:8f:8e:2d:fb:27:7a:6e:02:f5:fe:17:f1:
                    f6:f4:31:65:b5:54:dd:d7:53:fb:2c:48:76:55:8e:
                    ed:d2:d4:ea:a2:83:6b:ac:0a:b3:bb:ab:a6:44:d5:
                    46:bf:26:71:5f:64:24:a4:1b:36:e3:bb:40:6c:1f:
                    15:27:65:a9:34:63:27:a1:9d:65:db:fe:59:67:95:
                    a6:a2:f9:37:d5:b0:32:1c:09:bf:a2:2c:fb:2c:0f:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:41:3A:68:AA:E8:28:E5:FE:66:C6:D4:E6:A4:03:C4:8D:1C:96:0C
            X509v3 Authority Key Identifier:
                keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:47:b2:85:2f:d9:dd:ab:c1:e4:9a:c9:6a:66:7e:2f:14:6b:
         58:a4:32:08:66:74:61:3b:55:5e:ef:c4:08:79:d1:43:7f:06:
         cf:e1:60:0b:e7:75:9c:15:56:63:e7:cc:d2:b7:c5:e2:34:ed:
         fc:fe:fc:df:fa:94:21:a5:ed:c4:6e:4f:4f:30:dc:70:58:a2:
         44:93:dd:88:8e:0a:9e:e5:d6:17:aa:7d:cf:e8:b5:5c:6e:70:
         1c:aa:eb:1f:18:76:b3:87:d0:c1:2f:6e:54:f5:8f:a6:aa:2e:
         b3:04:0e:5b:64:ab:9c:61:08:16:b2:f2:de:e8:98:3a:7f:be:
         fe:49:20:98:1f:28:d4:40:d8:54:a5:c8:bf:b3:13:e7:d8:e1:
         30:06:3c:09:3b:df:ec:93:38:fd:a7:1f:7c:1d:29:1b:e5:c7:
         a6:b0:af:8d:03:7a:74:2e:03:43:f5:58:3d:eb:2c:9e:01:2f:
         46:e9:56:16:ba:ec:cf:19:65:8c:e4:c3:00:aa:78:aa:40:d4:
         94:d1:dd:a1:ee:89:87:ce:94:19:fc:ac:80:4f:49:09:1d:41:
         56:68:23:a6:73:fc:4e:55:27:83:4f:48:03:ba:5a:a3:f6:df:
         2f:19:62:42:40:f8:d9:7b:d8:e8:91:8a:d5:fc:c7:0d:8f:e8:
         46:ef:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:52 2024 by rpki-client on console-fra.rpki-client.org