Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File:                     nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier:          lGEn+zfY3z0yYprH1hS6Rg8oqlGOFLYlQjvKxeSa/KU=
Subject key identifier:   E9:CF:D6:6F:2A:96:A0:47:B3:5E:A5:70:DE:7D:32:65:D5:93:EF:0E
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer:       /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial:       018F87ED13CFE57A6D352ACF2F9D422407FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 19:00:11 +0000
Manifest this update:     Fri 17 May 2024 19:00:11 +0000
Manifest next update:     Sat 18 May 2024 19:00:11 +0000
Files and hashes:         1: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: OdSUN02ZpVmX+oi7xamPjcHmzMMw9F9QWmp2nLqkTHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:13:cf:e5:7a:6d:35:2a:cf:2f:9d:42:24:07:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
        Validity
            Not Before: May 17 19:00:11 2024 GMT
            Not After : May 18 19:00:11 2024 GMT
        Subject: CN=e9cfd66f2a96a047b35ea570de7d3265d593ef0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:2b:28:22:57:3f:43:af:12:cb:47:c1:62:
                    80:06:8e:11:5a:ec:10:45:10:3e:12:15:f4:b1:16:
                    84:c8:40:52:3c:f6:cd:0b:39:36:54:09:23:72:b4:
                    42:81:e5:91:12:34:a5:06:cf:01:30:be:f4:07:e2:
                    82:9c:75:da:09:42:f3:ba:4e:19:04:3f:5f:41:60:
                    d2:08:ba:c0:be:c9:8a:3d:76:20:a2:71:1b:6f:8f:
                    9b:a1:f4:c5:21:29:15:a0:7a:e8:d8:1e:5d:c0:1c:
                    73:83:5a:14:a6:eb:e3:76:af:f1:95:3e:b6:9f:d1:
                    11:4c:90:a9:2a:86:e5:47:de:32:8a:3a:ee:5b:2c:
                    9a:e4:c6:aa:e9:2c:c8:8f:10:5c:fc:93:84:ed:a4:
                    38:87:6d:0f:c8:2e:ff:ad:9b:9b:a1:26:d9:c3:05:
                    e6:30:ab:7c:aa:b2:9b:57:ea:d6:b6:55:31:00:72:
                    55:a2:f0:a3:24:44:66:c9:13:40:48:bb:2e:df:9c:
                    0c:16:65:a6:25:5d:4c:28:19:13:ac:1f:08:dd:63:
                    68:02:c7:6f:41:40:22:f7:eb:04:8a:57:62:bd:46:
                    5b:b5:57:e4:c4:d8:cb:5c:53:7d:a1:bd:9e:8b:29:
                    c5:0d:be:2e:4b:01:c4:7a:67:dc:72:5a:25:24:c2:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:D6:6F:2A:96:A0:47:B3:5E:A5:70:DE:7D:32:65:D5:93:EF:0E
            X509v3 Authority Key Identifier:
                keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:46:61:e9:c9:37:05:80:ba:b3:11:10:ae:01:57:80:e6:c9:
         89:8f:98:28:b5:23:00:a9:6a:1a:e9:02:e8:6d:86:43:00:3e:
         75:78:81:68:0b:9b:d5:a2:21:e7:04:e3:11:f0:c5:96:d3:aa:
         c0:bd:59:6d:a8:e0:7a:c5:d6:22:93:f7:11:53:95:0c:39:c9:
         07:34:13:56:35:74:ff:6b:09:21:e7:89:4b:78:bd:3f:8c:67:
         6e:ca:47:72:92:a9:46:25:f9:a8:1f:ae:da:64:70:63:85:57:
         8d:5b:3e:82:a5:1b:39:c4:78:27:ff:a0:7e:1f:e0:f1:df:51:
         39:6b:ac:d2:23:aa:75:ad:48:ce:c2:8b:3f:1e:a0:d5:63:74:
         d6:a8:c2:41:b8:0c:ae:d3:1f:1c:fe:9e:57:c8:8a:0f:90:b7:
         39:41:65:c1:e1:c9:63:aa:a9:27:10:3f:92:81:e9:25:5d:82:
         ca:d4:cb:69:f2:7f:8d:01:03:bf:d9:ae:99:40:7d:44:2a:01:
         02:de:ed:32:cc:26:79:c1:98:b8:5f:f3:3c:96:ac:62:e4:1d:
         e0:f8:1f:96:36:dc:6f:df:02:a1:c8:87:7e:c1:3b:da:20:c1:
         73:30:dd:0f:a1:b1:c8:74:a7:f8:b4:2a:d9:8d:31:6e:32:ad:
         6c:97:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:54 2024 by rpki-client on console-fra.rpki-client.org