Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File:                     N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier:          CMEDyGZdtrW/ZRiqWTHbrwwRy2WYRW2CZcNtMw4Vd+M=
Subject key identifier:   C1:84:CF:E6:94:E1:0B:6F:8A:B5:E4:62:B7:18:97:6C:F0:F3:0F:F1
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer:       /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial:       018F87490C0EF8E02087E3272BD2F9E49525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number:          0822
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: uV6E02wlsBiEc9kKs86B35XsEyIhcunclqGHSGap528=)
                          2: OHRe_ZoNHRZdxjg3K1HCM-QxEpQ.roa (hash: jX5k2ciVze6L9BzctsbIJtfKOZnx1A46RyyCkwuDDNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0c:0e:f8:e0:20:87:e3:27:2b:d2:f9:e4:95:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=c184cfe694e10b6f8ab5e462b718976cf0f30ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:5b:05:2e:9a:7c:f5:7e:43:09:a8:f0:f8:
                    f3:87:b0:4a:2e:71:5e:13:bf:71:35:c4:37:3a:c1:
                    fe:d0:7d:c3:9a:65:40:b3:fe:d8:22:85:02:8a:cc:
                    0a:35:84:4a:36:d8:a6:34:55:23:82:78:29:30:39:
                    cd:cb:ff:eb:a9:85:b2:86:f9:4d:23:9a:7a:3d:c0:
                    68:a3:33:43:5e:93:45:00:c5:76:04:2b:e6:d7:b0:
                    7b:b3:80:13:25:6d:c8:2c:44:f7:ec:b8:d6:54:a3:
                    8d:60:4b:3e:7a:22:40:dd:48:3a:60:c2:d7:ad:a5:
                    e8:9f:6d:e4:90:f0:92:dd:cb:f1:2c:1e:8e:7c:c6:
                    0a:cf:6d:31:48:c0:62:23:f4:55:0f:21:b0:4e:32:
                    a5:bd:2d:c5:1d:33:42:99:3a:b1:f0:2d:47:06:a3:
                    26:7b:31:94:69:40:13:66:e4:73:1b:9c:a8:5e:ed:
                    0a:a4:7b:0a:59:3b:8b:6c:c9:3d:51:58:68:4e:a9:
                    e2:89:2d:87:af:ed:f0:2e:b8:69:85:d7:7c:bb:be:
                    e6:10:a0:f2:0c:87:e7:d1:e5:e4:d3:f9:42:00:9b:
                    aa:24:e6:79:87:a5:c6:2e:af:38:d8:3e:ec:47:1d:
                    4d:d9:92:c2:09:85:99:df:4b:06:f0:1e:08:6a:17:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:CF:E6:94:E1:0B:6F:8A:B5:E4:62:B7:18:97:6C:F0:F3:0F:F1
            X509v3 Authority Key Identifier:
                keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:e9:47:72:79:43:4b:88:51:35:e3:8e:f2:c4:44:eb:33:
         68:92:05:e0:61:1a:d9:8b:97:96:9c:fe:1c:c4:ac:c7:d3:16:
         01:7a:64:71:fa:32:ae:d0:db:17:8c:f1:30:31:0a:f9:ea:c2:
         7b:7a:47:af:27:e1:ae:48:3e:83:ee:c6:93:35:46:ed:64:63:
         bd:4d:8f:64:ab:91:18:3a:d5:b5:8a:1c:b1:72:18:02:ab:c5:
         cf:64:bf:9d:ae:5b:66:40:56:3e:b3:6a:7a:58:00:b1:09:f1:
         e9:cf:50:89:d3:43:f2:1c:69:bd:70:42:16:c9:ea:b8:4c:98:
         c5:b3:85:9b:72:d4:a5:0e:5a:d0:2f:4e:42:2b:5e:29:a5:9f:
         f3:1d:68:86:f8:bf:bf:1f:be:f7:da:81:c0:2c:83:54:46:0d:
         5e:7c:94:62:ca:1d:0a:2f:fa:82:d0:0f:21:11:13:81:45:a0:
         69:fe:1e:9a:ec:30:fd:a7:2b:58:65:f9:d9:1d:9d:e0:92:ec:
         cf:89:f7:8c:3a:91:92:f8:74:d4:8f:80:cb:5d:e0:a2:ee:08:
         80:d5:04:31:79:82:9b:0e:f7:d9:8c:c1:14:15:60:c6:d2:8c:
         48:db:59:41:4f:8b:1b:d4:92:b3:1f:db:7c:47:4e:f2:a7:5f:
         4f:95:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:48 2024 by rpki-client on console-ams.rpki-client.org