Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File:                     nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier:          PlhBZsZyPKaWafg8zNiAFeIuuNeLXOJoH4TVBVQ9Ukk=
Subject key identifier:   9F:19:8D:7D:A6:3D:52:C3:FD:2B:94:39:C2:49:DB:0B:A4:CC:22:C1
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer:       /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial:       018F874988501405BA157694332CACBA02E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number:          04D3
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: DxKfucb8csddAYzd1spcLIO/KWlGOSslsZ8q7Nc/gK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:88:50:14:05:ba:15:76:94:33:2c:ac:ba:02:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=9f198d7da63d52c3fd2b9439c249db0ba4cc22c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:62:6b:07:3e:cc:c6:3f:d4:9e:18:07:0e:
                    3c:e8:5e:fc:c7:df:6a:38:88:fb:32:58:3b:89:da:
                    65:1c:84:c1:86:24:3e:df:27:dc:9d:9c:36:42:ac:
                    6a:8a:11:01:a5:56:b2:40:a0:3c:cb:b1:09:b3:59:
                    01:e3:a0:6e:03:00:16:7a:2e:d1:b4:db:43:45:4f:
                    95:68:af:a1:7d:b4:99:0d:b8:dc:09:64:b0:83:3e:
                    ee:33:25:3e:5c:59:d1:8d:9d:c1:1a:87:45:3c:f7:
                    89:36:0c:4d:75:33:4c:1e:fc:5c:09:eb:c1:41:2c:
                    86:50:15:2b:14:58:b2:dc:3a:a8:0b:f4:14:1a:1b:
                    da:10:69:1f:4e:1a:8c:c9:30:41:b5:a7:1d:ce:9b:
                    4b:e5:4f:cb:92:f9:b4:4e:c1:b7:f3:6c:08:6a:66:
                    96:07:2b:68:fc:3f:1e:8f:0c:ca:3a:b3:7e:80:27:
                    10:60:22:be:4b:33:0f:80:d4:3a:e7:ab:84:fb:4f:
                    12:8a:33:bf:8e:11:85:0c:0b:61:a5:e3:55:ac:d6:
                    96:10:80:5d:5e:3e:c3:4e:74:fc:6f:e3:a6:6a:55:
                    27:19:59:59:a6:b0:2f:af:66:09:c2:53:3d:9d:6e:
                    d1:be:43:98:68:f4:55:fc:f5:f8:11:b7:df:0d:4b:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:8D:7D:A6:3D:52:C3:FD:2B:94:39:C2:49:DB:0B:A4:CC:22:C1
            X509v3 Authority Key Identifier:
                keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:13:e0:95:14:5d:1b:09:a5:2a:6a:1b:13:37:7d:76:67:
         80:3e:5e:9d:f0:94:17:bd:c0:39:11:ef:24:1b:9d:3a:62:c0:
         ce:ab:06:3a:09:96:af:85:8b:ba:97:7f:f8:1b:57:d6:bf:df:
         97:b7:63:89:9f:63:c4:b6:6e:0c:24:64:89:3a:93:e9:0c:2a:
         90:99:f4:a7:9a:76:b2:e9:f1:a9:5a:43:f3:db:a2:2c:3b:3d:
         2a:be:81:0f:2b:00:42:42:c1:5f:3c:d4:37:5a:9d:19:a4:82:
         99:0a:c1:0f:6a:d7:c4:70:74:53:97:3a:3b:12:f0:ca:f6:d2:
         cc:a5:ed:39:e1:d1:23:9a:b8:f6:94:22:ad:99:52:5b:84:f3:
         f3:f8:ad:03:ac:2a:95:d4:b7:d4:19:94:90:a4:21:49:4d:4f:
         80:06:ff:62:0e:1b:c9:ef:62:a5:2b:1f:d6:fb:87:4e:5c:4b:
         64:84:ae:1f:cc:ce:67:3a:b7:b8:05:ce:92:d9:38:20:f6:d0:
         b0:d2:e2:52:10:e1:8f:a8:9f:a7:ce:1a:ef:54:90:6d:9d:8d:
         c6:6f:07:48:46:5f:a0:45:e4:d4:a6:ec:da:1a:2d:48:f3:18:
         74:bb:89:75:02:ad:fa:c5:16:1f:53:0e:b6:c9:32:41:8d:a5:
         08:a7:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:57 2024 by rpki-client on console-ams.rpki-client.org