Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File:                     npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier:          Xl6KEBsoqM3NFWiZ6T6VqGVy4RkVUkxhtfHXPtf+jj8=
Subject key identifier:   F5:E8:26:92:46:D7:29:CB:74:70:B2:C6:B3:9E:DE:49:32:D3:F2:D8
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer:       /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial:       018F8824990061FAC2215DEA1550B6E7F182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number:          0D60
Signing time:             Fri 17 May 2024 20:00:50 +0000
Manifest this update:     Fri 17 May 2024 20:00:50 +0000
Manifest next update:     Sat 18 May 2024 20:00:50 +0000
Files and hashes:         1: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: ajJzgdmtSqW7VsmDRE8HbRSDp5fTFsJqgmX47nSoxdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:99:00:61:fa:c2:21:5d:ea:15:50:b6:e7:f1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
        Validity
            Not Before: May 17 20:00:50 2024 GMT
            Not After : May 18 20:00:50 2024 GMT
        Subject: CN=f5e8269246d729cb7470b2c6b39ede4932d3f2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:24:12:6a:66:f2:91:e0:90:59:cb:0f:7e:
                    95:f7:66:b7:53:e5:8c:84:b7:fc:d4:f0:55:3e:e0:
                    33:10:81:cd:cb:b8:34:18:f5:b1:7e:05:88:f2:0c:
                    c2:b5:dd:a4:88:4c:0b:78:0b:76:c2:82:33:a2:ec:
                    40:c8:40:e0:6b:7e:e2:9c:69:f9:24:fc:5b:b3:42:
                    e1:2f:6c:24:f6:ee:6c:c2:c7:a5:43:ae:34:a4:0e:
                    99:97:54:89:8a:ef:95:7e:1f:43:a1:a6:14:78:cf:
                    7c:8d:c3:58:2d:3c:12:7c:6c:ef:50:4a:fe:a2:74:
                    a9:9b:b9:fd:cb:35:8f:e1:9d:bf:25:cc:f5:94:49:
                    66:fe:c6:ff:03:b3:74:a0:83:e3:0a:b6:85:98:9c:
                    58:a8:b2:2d:52:4c:8e:67:5f:95:b0:44:6a:a6:1d:
                    3b:9e:e6:84:93:bb:ab:d8:f0:d1:bb:5a:01:98:ca:
                    ec:dc:8d:f7:c1:b9:d7:35:bd:65:fa:23:83:7d:1e:
                    a9:3a:68:e1:cf:d0:f4:01:a8:6b:30:a5:a5:d6:2d:
                    5d:6c:4b:30:fa:ab:21:9d:f3:ab:eb:ae:ec:1e:ab:
                    fe:4e:b2:85:8d:bf:8d:c0:3c:f3:32:d6:7a:02:3f:
                    85:9f:1f:0a:25:7e:85:be:a0:af:97:25:7b:81:5e:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:26:92:46:D7:29:CB:74:70:B2:C6:B3:9E:DE:49:32:D3:F2:D8
            X509v3 Authority Key Identifier:
                keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:a8:1b:2f:9f:f1:f4:52:ec:2a:22:14:fa:71:5e:cd:6a:
         36:86:9b:92:3e:a7:dd:01:15:da:58:bb:dd:a2:4c:6c:78:40:
         ee:0a:66:66:b2:9e:8e:74:c7:a3:6b:a7:16:ad:6a:fc:a1:e8:
         ff:60:24:01:c3:e5:6d:88:50:d2:9f:27:3d:e8:61:dd:02:d2:
         eb:85:77:f0:3f:31:66:af:ff:43:df:8b:1a:c3:55:84:13:fe:
         f8:8f:a6:a9:b4:4a:5c:3d:d0:6c:66:05:df:2d:e2:3c:ef:d8:
         2e:d7:bc:1c:f2:d3:81:20:06:13:93:9c:1d:08:55:03:cb:11:
         b3:a1:8c:18:f8:92:31:c1:da:cc:74:4d:46:41:ad:da:c9:52:
         12:d9:e6:30:fc:94:76:03:d1:f7:9b:4a:dc:7a:bf:fe:4b:72:
         64:1b:4d:b3:0e:e8:22:8a:f2:a9:2e:30:db:91:8e:34:25:88:
         1e:db:35:0e:9f:26:c9:42:9d:3c:a9:e1:2b:71:e5:f2:99:93:
         5a:42:a0:4f:c0:24:9b:20:a9:1d:cc:73:5d:72:23:e0:aa:52:
         13:ed:d6:c3:d4:cf:db:84:ac:cb:ab:c9:93:91:29:95:b2:84:
         b5:36:d4:27:9f:90:91:f7:ea:80:a3:b5:81:96:c5:8e:42:b3:
         a7:22:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:09:00 2024 by rpki-client on console-fra.rpki-client.org