Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft
File:                     NSfzoow8WhVFLOxPVswmno6tnXI.mft (raw, json)
Hash identifier:          bY4ARpJ66KhNEtSAAUIpK9UCT5QC97Tjl1UtOv2uP6M=
Subject key identifier:   ED:71:73:F3:C3:AE:26:5F:39:92:48:E6:A1:8E:57:81:D1:E7:8A:03
Authority key identifier: 35:27:F3:A2:8C:3C:5A:15:45:2C:EC:4F:56:CC:26:9E:8E:AD:9D:72
Certificate issuer:       /CN=3527f3a28c3c5a15452cec4f56cc269e8ead9d72
Certificate serial:       018F87482EFCEC77AE6A12C18663B3E39337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NSfzoow8WhVFLOxPVswmno6tnXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:00:05 +0000
Manifest this update:     Fri 17 May 2024 16:00:05 +0000
Manifest next update:     Sat 18 May 2024 16:00:05 +0000
Files and hashes:         1: NSfzoow8WhVFLOxPVswmno6tnXI.crl (hash: CFujwHaV0QYJ6fUclDscMCTIQ2CLS20wfbmwiYIEgDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NSfzoow8WhVFLOxPVswmno6tnXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:2e:fc:ec:77:ae:6a:12:c1:86:63:b3:e3:93:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3527f3a28c3c5a15452cec4f56cc269e8ead9d72
        Validity
            Not Before: May 17 16:00:05 2024 GMT
            Not After : May 18 16:00:05 2024 GMT
        Subject: CN=ed7173f3c3ae265f399248e6a18e5781d1e78a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:a2:ed:87:b9:89:a7:ad:8f:2f:ea:d3:31:
                    5b:45:68:66:f8:92:37:44:d0:c8:e4:8e:b1:4f:bf:
                    dd:e1:5c:45:e8:df:00:a0:06:b4:c1:3a:89:29:e8:
                    a9:a5:6a:f3:36:cb:16:3b:4a:07:5c:41:6d:90:b6:
                    f6:96:2e:0f:23:ef:b7:84:29:39:b1:1c:ce:0f:ca:
                    49:04:be:a2:07:63:5f:1f:81:ce:88:19:bc:a3:49:
                    11:1f:92:38:ab:d6:9a:7e:bc:57:97:3c:87:31:0d:
                    ee:08:8c:f0:39:f6:3f:f8:34:34:44:96:60:d1:3d:
                    82:a1:d6:77:7d:2a:3d:10:ee:dc:9d:8d:0d:43:fb:
                    97:e5:11:29:00:1a:f0:6a:f0:cc:76:75:b7:67:52:
                    68:ab:e7:fb:ba:39:35:d9:0f:d0:66:d4:98:4b:40:
                    1b:79:74:94:13:33:da:ef:93:c9:37:6e:c3:83:fe:
                    5c:7e:41:6d:f5:4f:de:46:03:14:01:ae:8c:92:b1:
                    8a:f7:db:01:a4:b3:c3:6a:64:d4:eb:d7:12:8e:ed:
                    99:73:08:c9:a2:22:a8:ec:c4:7c:ce:97:dd:be:fa:
                    4a:ac:c0:08:f9:80:d3:1e:1b:41:d5:92:f8:f3:81:
                    bb:23:aa:82:f0:e5:46:0c:cf:46:eb:c6:ea:19:91:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:73:F3:C3:AE:26:5F:39:92:48:E6:A1:8E:57:81:D1:E7:8A:03
            X509v3 Authority Key Identifier:
                keyid:35:27:F3:A2:8C:3C:5A:15:45:2C:EC:4F:56:CC:26:9E:8E:AD:9D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSfzoow8WhVFLOxPVswmno6tnXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/943903-bee9-4dd7-84c2-a48fec1fcb70/1/NSfzoow8WhVFLOxPVswmno6tnXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:61:a7:4d:42:79:70:86:98:c4:c3:55:06:a1:d6:b1:c5:
         1b:95:ee:ab:2d:6c:0f:42:44:b9:41:03:10:20:7f:62:0e:ba:
         ab:e7:95:0f:ab:8a:f9:dd:4b:ef:9c:1f:36:b8:ea:05:76:8c:
         30:8e:bc:16:50:be:05:f0:13:f2:df:29:ca:2d:1d:c0:f6:a5:
         c5:6d:c9:4e:c2:c9:a2:5a:02:88:b4:2a:74:4c:58:f3:28:8b:
         ca:26:0d:08:23:44:25:da:bf:8c:b7:2c:27:f3:86:5c:31:f8:
         5c:14:0b:ec:9f:2f:d9:7a:6f:38:9d:76:b1:3c:f2:6a:7c:88:
         23:df:b7:a6:18:a9:4e:1b:fa:83:92:3e:3e:c1:b8:5d:72:d8:
         d7:31:49:ec:52:a1:d2:3e:01:8d:c8:e4:d6:23:c3:8a:10:58:
         52:0b:b6:68:6d:04:8d:f0:c7:c0:bd:44:a5:21:c8:14:a3:7c:
         e6:e9:e5:37:c0:45:05:00:0b:b0:23:a9:a3:ba:ce:ea:b4:ef:
         9c:1b:ef:53:dc:ae:6f:7f:89:e9:f2:7a:cf:21:b7:43:66:a5:
         47:97:24:36:6e:8f:d9:c6:58:2c:8b:f5:42:04:17:0d:72:f0:
         96:d4:a1:73:5a:52:5a:00:15:2f:cd:7f:b6:45:3e:3c:d2:eb:
         47:99:d9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:40 2024 by rpki-client on console-fra.rpki-client.org