Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File:                     NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier:          c0CVj0lzyZ+n2e4qAe4Jl1omzOhcUK1lqS1rtGU5ptw=
Subject key identifier:   70:7E:00:A5:93:40:10:E6:4D:CD:7E:ED:32:0A:40:A1:B6:22:B6:B7
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer:       /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial:       018F87490E9148FE5778DB4AE8F98ABE4C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 2MniHHxM72lNFDWrQmh+Vesa3jE/M9nl8reRtQAnE+I=)
                          2: bYBKhHCiSSIGPSMNDFik3XLy-lc.roa (hash: g+9eARrDhRmaqVfaFZR7sJETELT8hoFeLucPvGkveP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0e:91:48:fe:57:78:db:4a:e8:f9:8a:be:4c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=707e00a5934010e64dcd7eed320a40a1b622b6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:1a:cf:34:70:11:a8:cb:f1:55:e7:f3:80:
                    20:4a:37:2d:76:df:29:f0:b8:c8:6c:bf:7f:5f:24:
                    18:50:fc:07:af:92:30:60:a6:73:c4:33:df:72:61:
                    79:28:a8:b9:f1:19:d1:46:24:4c:c5:77:5c:68:1c:
                    28:b3:07:c7:83:fc:3e:02:01:5b:fa:b0:4d:30:11:
                    3b:40:30:04:fe:db:7b:9f:22:82:b6:fc:e6:71:9b:
                    0f:d5:0c:dd:72:af:05:c1:e7:a3:4e:7d:d0:86:d3:
                    2d:7b:cd:df:c0:50:b3:f9:1b:5a:87:66:bd:c2:28:
                    b1:15:0a:39:84:3a:e0:24:3a:dc:75:83:f5:9c:1b:
                    19:4b:17:15:79:4d:7a:bb:5b:fc:b2:b2:b1:fe:c4:
                    5b:d8:70:5c:1d:b9:3c:f1:98:f7:7f:d4:e3:4f:85:
                    ed:07:07:74:21:9a:a8:66:50:4c:16:38:05:85:b6:
                    22:5e:ca:22:e5:89:20:80:ae:77:9e:6f:91:7c:e2:
                    a7:9e:d7:81:35:76:a5:5f:c8:92:ef:38:bc:5d:1f:
                    e8:63:ca:31:33:f4:74:33:1d:ae:1c:48:32:96:47:
                    d9:c9:49:51:b4:91:12:d2:9c:80:be:69:52:29:82:
                    6d:22:4a:4a:a6:ad:92:be:24:9d:65:4c:db:f1:ee:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:00:A5:93:40:10:E6:4D:CD:7E:ED:32:0A:40:A1:B6:22:B6:B7
            X509v3 Authority Key Identifier:
                keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9d:92:77:b7:56:a5:68:f8:f6:48:21:8a:d8:10:b4:75:05:
         86:6b:0c:80:e7:a7:4b:77:02:aa:cb:b6:d1:26:67:61:d5:95:
         00:34:f3:67:44:9b:9a:0c:cf:29:6e:78:7b:74:32:aa:db:4a:
         84:1c:d7:aa:a4:eb:2d:cd:e3:a1:a7:36:c4:5c:21:c5:54:cb:
         43:40:59:52:4c:e0:48:4b:06:00:6f:af:75:27:5c:c9:58:95:
         22:c7:c4:0b:ea:b2:38:84:f0:f4:c8:d3:38:61:d0:76:1e:bb:
         02:4a:5f:7e:e6:d3:05:5f:4a:9c:52:61:22:ee:fb:cf:f6:b4:
         9d:44:71:4e:7f:45:6a:0d:47:57:07:ed:a3:91:a4:a6:be:ab:
         1d:46:2e:65:78:f1:ff:50:3a:ab:2b:0e:26:be:dc:f5:6f:02:
         df:31:93:2e:97:41:05:a3:69:56:de:fb:9a:e6:a8:42:9b:81:
         d0:77:a1:73:e6:d6:0d:a6:b9:04:d5:d4:b8:2f:5f:68:4a:a3:
         92:a1:46:57:67:8f:8a:a8:af:59:c2:ba:74:32:84:7e:e4:5e:
         2a:66:2b:8f:97:04:02:f1:97:7b:53:e2:9d:dc:27:d5:ca:bb:
         31:9a:9c:e9:76:2a:94:9b:b7:94:f2:6c:96:65:4a:9d:8c:58:
         58:50:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:58 2024 by rpki-client on console-ams.rpki-client.org