Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
File:                     MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json)
Hash identifier:          Uy1U4/4e+4T9bVO4nrUOwGce82W9jzUh/hWqqNDtlnU=
Subject key identifier:   F3:B4:A2:86:CB:E2:9D:D8:DA:FF:EC:F9:95:CD:C1:4E:68:6D:9E:56
Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
Certificate issuer:       /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Certificate serial:       018F87499F95E30E6E5CB2DCD4A3C3BC1320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
Manifest number:          0B96
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: WK7bWfe93X4oT0vs6bwOHpnTMKVzKV/xS8+VqHZ+wUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9f:95:e3:0e:6e:5c:b2:dc:d4:a3:c3:bc:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=f3b4a286cbe29dd8daffecf995cdc14e686d9e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:85:6d:e7:cf:ca:cf:af:bf:62:ec:42:9a:
                    cf:10:56:69:58:56:58:66:eb:30:0b:71:a6:c7:fc:
                    49:40:74:29:72:c3:d8:2d:4b:55:50:e2:de:e4:a3:
                    bc:bf:8b:f7:3e:c1:5c:40:38:fc:b0:2c:27:9b:67:
                    8c:65:16:b6:43:65:38:b1:ca:70:d8:89:b2:1b:dc:
                    f0:b7:09:34:1f:4e:5c:6b:32:bb:1b:01:b2:4e:56:
                    69:44:77:a7:37:86:9c:32:7c:63:09:f6:6b:fa:07:
                    b0:5f:7f:0f:68:1d:0c:a8:11:34:3e:fc:fc:11:97:
                    86:68:1e:89:e5:74:cd:15:25:93:14:8e:d0:d0:ff:
                    3d:9f:36:d1:f2:4f:b5:77:18:38:41:7d:e0:c6:9a:
                    78:6b:2a:6f:1b:5d:77:ba:2c:fd:91:e6:4b:40:84:
                    88:90:d8:dc:ea:4e:89:d3:3f:27:ef:71:90:89:66:
                    78:6b:df:a6:f2:55:d7:23:b2:7a:e9:07:b3:13:39:
                    e8:8a:9c:00:7f:e7:e4:76:6c:ee:f8:17:24:ac:57:
                    a9:40:f0:6b:83:3b:56:3b:33:bb:d1:20:56:4f:25:
                    00:70:1e:b8:09:bd:7b:d1:17:6d:4c:38:3d:7d:73:
                    bd:47:0b:84:5e:c0:17:b3:b4:7f:28:e8:02:a6:4e:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B4:A2:86:CB:E2:9D:D8:DA:FF:EC:F9:95:CD:C1:4E:68:6D:9E:56
            X509v3 Authority Key Identifier:
                keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:69:76:f8:9e:b5:f1:39:53:fb:0d:a3:f2:a3:1b:8d:af:
         73:e3:38:79:73:67:39:ec:c4:3d:d8:62:39:9e:f9:6c:d5:36:
         cc:e4:7b:5e:75:cc:bd:29:c8:9c:44:a4:8c:4b:2d:04:b5:69:
         e7:34:89:fa:a3:f2:93:a1:72:a7:4d:bb:5f:c3:83:a7:78:56:
         63:36:e6:3a:8c:c4:58:a1:85:e1:c2:89:a7:23:a1:be:af:89:
         9f:bc:d8:35:a2:dd:5f:78:85:98:85:13:c9:ec:80:a6:22:1e:
         e5:cc:60:8d:b4:5d:9e:cc:e7:5c:1e:89:44:bd:bf:86:d1:68:
         fe:75:83:1b:97:14:b5:6a:31:50:1a:e8:ce:fc:9a:be:7a:e9:
         6b:29:30:5b:4a:95:47:74:6c:16:6d:54:b7:ab:24:10:a8:fe:
         db:55:8b:92:c9:2b:f2:2d:74:54:99:10:1a:92:91:55:c9:b2:
         d1:38:57:9d:37:e5:2d:31:4e:90:f6:91:16:96:05:58:07:76:
         28:ae:22:35:63:2b:90:2a:cb:88:54:cd:8a:9e:77:6a:dd:05:
         c2:7f:e5:4a:bc:6c:a0:0c:dd:05:c5:7f:3a:9c:07:85:71:1a:
         cd:05:bf:45:17:97:91:b7:11:bc:4c:82:d3:80:d8:e7:96:82:
         32:54:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:47 2024 by rpki-client on console-ams.rpki-client.org