Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File:                     nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier:          gp6rWieTGjHK8jz94M9wmpeB1ivF7qqizHAptMFO7Qw=
Subject key identifier:   D5:86:62:BA:01:CC:A8:FA:E9:EA:BF:71:41:C4:76:DE:3C:66:EA:CF
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer:       /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial:       018F88248A6DF1DA8DE3929BD1CAC62A6D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number:          08D0
Signing time:             Fri 17 May 2024 20:00:47 +0000
Manifest this update:     Fri 17 May 2024 20:00:47 +0000
Manifest next update:     Sat 18 May 2024 20:00:47 +0000
Files and hashes:         1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: /hkEMiMOj6qTTeFElOQ7JVhixopAv+IuO1WSzQB859M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8a:6d:f1:da:8d:e3:92:9b:d1:ca:c6:2a:6d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
        Validity
            Not Before: May 17 20:00:47 2024 GMT
            Not After : May 18 20:00:47 2024 GMT
        Subject: CN=d58662ba01cca8fae9eabf7141c476de3c66eacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:0b:b5:cd:e1:d6:a4:0b:33:c7:eb:f6:1f:
                    ff:41:10:cb:af:c0:1c:4c:2f:42:83:a5:9a:f8:5b:
                    b9:0a:11:a6:ac:4e:8d:d7:83:16:3a:47:69:45:f7:
                    94:cc:3c:3d:34:06:83:70:81:5b:b4:0f:f3:47:9e:
                    2a:85:26:1d:1f:10:41:87:55:bc:03:82:6e:27:aa:
                    d2:49:44:61:2d:fb:a8:f4:34:8b:d9:2a:52:9e:cc:
                    91:31:93:98:cc:76:19:3d:49:9e:10:0f:38:ec:52:
                    06:a4:3b:f6:7a:72:89:97:5f:ab:93:09:c8:8a:f9:
                    27:87:a2:db:7c:7b:5f:6c:fd:c3:8e:7b:45:f0:14:
                    bb:78:c9:44:c7:61:72:1d:ac:6c:41:bf:5b:6f:79:
                    ef:1b:7b:3d:c3:f3:ad:0c:c5:5c:65:66:d0:c9:d6:
                    1e:06:77:cb:a6:c7:9c:7c:de:3e:10:fb:64:93:40:
                    2d:3b:2e:10:a2:44:3d:61:25:c4:c5:f0:32:3f:65:
                    a1:70:e8:45:5d:da:07:d2:b3:98:68:8f:e0:ca:24:
                    ca:da:5b:7d:7d:c1:d5:b8:50:32:b6:3f:bf:bb:d2:
                    99:cc:96:09:c8:16:4b:4e:a9:62:4e:6f:4b:c7:ce:
                    17:56:38:8c:83:ee:b2:74:39:00:c3:8a:48:8a:ed:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:62:BA:01:CC:A8:FA:E9:EA:BF:71:41:C4:76:DE:3C:66:EA:CF
            X509v3 Authority Key Identifier:
                keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:93:cd:c8:4f:58:bd:43:a1:67:6d:58:78:df:87:9e:f0:4f:
         2e:d3:c9:38:df:66:41:92:13:0e:a4:2f:d3:cf:68:98:0a:b8:
         00:90:9b:d8:ed:9b:2e:f4:25:a8:99:9a:fc:31:ab:ef:01:63:
         ee:b3:f8:e4:fa:c3:96:15:be:f9:39:28:b5:5d:d3:b1:6a:e7:
         1b:d2:5c:7d:b6:61:10:f3:c3:2f:2d:5a:df:0a:a2:89:52:c1:
         a2:5a:ae:2c:27:ec:e2:d3:a2:10:2f:a3:b4:44:c1:cf:e1:6c:
         90:da:b1:64:9c:eb:f7:3d:70:ab:42:05:bc:fe:cf:74:8c:d5:
         1f:0c:30:2d:8b:06:63:06:bd:46:6c:84:3a:56:85:e4:90:b3:
         30:db:77:6f:e7:1f:fe:92:94:7c:b9:a8:d2:bb:81:fb:e0:66:
         8d:0d:33:cd:e2:b2:4f:3d:57:53:2b:be:21:fa:a2:0f:e8:ef:
         1b:33:87:b1:50:13:3b:96:78:5f:d8:96:a3:c7:cb:89:05:24:
         ad:39:20:01:34:f9:68:d6:4b:9a:c9:db:33:6c:80:b4:bd:17:
         d1:8e:fe:a0:8b:24:5d:8b:05:ac:dd:ba:4a:dc:0a:04:c3:d7:
         32:6b:f2:98:eb:06:c2:4a:30:6e:44:65:6d:42:b1:83:70:be:
         d2:80:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:45 2024 by rpki-client on console-fra.rpki-client.org