Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File:                     n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier:          ynKUjYSZqCwb0MwV0HI1EmYLYWixFyEE/W2N+4shXKY=
Subject key identifier:   CC:C1:C8:15:F2:62:41:D2:0E:0B:9D:54:F5:78:4F:CF:78:72:8A:9E
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer:       /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial:       018F882455CA0B69EB21CAC38ACF8968FE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number:          1146
Signing time:             Fri 17 May 2024 20:00:33 +0000
Manifest this update:     Fri 17 May 2024 20:00:33 +0000
Manifest next update:     Sat 18 May 2024 20:00:33 +0000
Files and hashes:         1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: +iR/JY4sMhacpfBdtmELYzqsElovRXMm8jkFVahUbxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:55:ca:0b:69:eb:21:ca:c3:8a:cf:89:68:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
        Validity
            Not Before: May 17 20:00:33 2024 GMT
            Not After : May 18 20:00:33 2024 GMT
        Subject: CN=ccc1c815f26241d20e0b9d54f5784fcf78728a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:45:2b:07:13:32:74:ef:cc:62:bf:2e:84:
                    95:b4:34:39:93:a5:f5:f7:68:0a:08:e5:2d:53:b7:
                    10:1b:16:81:02:e9:5e:28:0b:b7:6d:12:16:ca:9b:
                    7f:25:bc:e8:1f:43:10:84:91:d8:51:b8:e7:c3:4f:
                    52:59:07:da:2f:e1:3f:34:5e:a1:2b:d2:e0:46:87:
                    e1:f3:59:e9:e8:1c:d7:dd:fd:d0:cb:75:cd:a6:7f:
                    eb:dc:cf:ca:82:16:0b:ad:e5:45:0e:a1:ce:41:f7:
                    d9:66:88:0f:81:ef:56:3a:b2:3c:d8:50:ec:d4:05:
                    03:97:36:a9:97:c7:36:a2:0e:f6:02:87:de:4c:1b:
                    f2:99:7a:26:cd:48:63:a2:f3:f1:37:03:a1:7d:9d:
                    59:37:65:96:46:b5:48:7a:6e:35:05:74:7d:cb:b8:
                    1c:8b:de:d8:0b:e2:50:69:1c:58:94:71:6c:2c:8b:
                    87:21:d1:82:c2:08:f5:dd:51:96:5c:00:9a:ec:9b:
                    94:48:4b:ce:13:31:ee:3c:11:56:39:46:d7:98:ca:
                    2a:ce:bb:57:87:54:fe:1a:cf:43:81:e2:a3:8d:0c:
                    2a:43:3b:a4:c6:0e:da:18:f4:af:5d:ec:cd:6e:ac:
                    83:25:5d:70:db:ac:f6:56:13:0a:d2:6f:fd:da:00:
                    12:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C1:C8:15:F2:62:41:D2:0E:0B:9D:54:F5:78:4F:CF:78:72:8A:9E
            X509v3 Authority Key Identifier:
                keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ed:c6:64:4a:1d:d0:df:c5:cc:1b:60:9e:22:bd:d1:c6:d6:
         6d:94:47:aa:14:33:48:07:a7:06:af:e7:27:99:30:6b:45:4f:
         b8:48:92:75:bf:7a:af:5a:dc:70:3c:f4:0e:02:6a:ff:4b:67:
         cd:c7:be:ce:a2:35:37:54:ee:d3:e1:63:9f:2e:b3:e9:06:a6:
         c4:38:2d:0f:b9:6a:79:14:7a:75:9f:b8:01:e2:48:f1:d6:d4:
         0f:11:74:05:35:73:d8:72:16:b2:38:fe:97:d2:36:93:2b:09:
         41:cb:d9:14:6f:e6:49:47:f7:7e:f2:81:c6:8c:84:16:53:9e:
         c0:7b:c3:44:74:e1:b8:b9:1b:55:29:76:a1:98:e4:8b:8f:25:
         03:41:db:a4:ab:f0:a2:67:41:66:fc:5e:b5:02:fb:88:bb:cb:
         71:8f:0a:48:b2:b1:f3:d6:4d:29:45:83:fc:aa:a4:1a:ba:9f:
         ad:56:dd:58:11:95:f6:68:02:86:fe:00:9f:bd:ff:a3:58:d9:
         b1:dd:8b:1d:60:53:7f:3e:76:99:2a:2b:b5:a1:3a:71:0e:fd:
         c9:ba:e9:cb:e4:66:ea:c3:38:2e:76:7a:82:3e:a1:05:5f:7f:
         07:26:54:1a:57:f0:57:c9:9e:b9:9f:d1:40:32:9e:02:00:90:
         d8:cd:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:47 2024 by rpki-client on console-ams.rpki-client.org