Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File:                     nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier:          aWxQkUWFfPFC1SLu1LsmQJPVyBzzMJlKkwjes19kNP8=
Subject key identifier:   D0:1F:33:92:23:22:D4:6C:76:80:09:10:1B:63:89:E1:86:FB:DC:C9
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer:       /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial:       018F4B6C68F2C55B0F4F6CAD66E2166A1905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number:          1161
Signing time:             Mon 06 May 2024 01:02:26 +0000
Manifest this update:     Mon 06 May 2024 01:02:26 +0000
Manifest next update:     Tue 07 May 2024 01:02:26 +0000
Files and hashes:         1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: 0smyzJ7vVeWw6/iUvHzq1Fttc06cYz0m3vnc9eO+0zs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:68:f2:c5:5b:0f:4f:6c:ad:66:e2:16:6a:19:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
        Validity
            Not Before: May  6 01:02:26 2024 GMT
            Not After : May  7 01:02:26 2024 GMT
        Subject: CN=d01f33922322d46c768009101b6389e186fbdcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:fb:a5:4c:54:71:df:81:94:7e:a6:5b:84:
                    85:d2:74:fe:5c:6d:a5:26:a3:5f:82:7c:4a:7d:73:
                    42:3d:13:1f:aa:b1:f0:21:9c:15:bf:88:b6:81:53:
                    e2:c8:96:0f:29:40:72:d6:a5:90:3d:e8:38:2e:de:
                    e9:4c:c0:14:1a:87:e2:61:0c:77:23:a2:d4:c1:f1:
                    2c:4b:37:c0:de:d3:05:e7:33:ec:9b:16:79:1b:59:
                    a2:e3:9b:6c:ec:78:f9:7e:37:c6:1b:4e:ae:61:d0:
                    de:89:5b:98:94:e7:9d:d9:84:b7:17:48:e8:b8:27:
                    bd:3a:ca:6c:df:64:82:e9:81:f3:17:fe:07:9e:4c:
                    8b:ae:c5:ee:8b:34:84:39:38:a3:7c:cd:43:d4:18:
                    90:46:85:18:32:51:37:e8:00:5f:7e:25:37:ca:45:
                    b3:e0:22:92:61:09:bc:28:51:91:a6:d6:fd:ad:53:
                    36:42:03:73:90:ef:17:33:e6:bf:42:e6:42:2d:bb:
                    a9:2d:a8:5f:d3:2a:f6:a4:2b:b3:90:46:1e:b4:56:
                    01:d5:22:e7:e1:04:76:c8:fc:db:54:db:59:62:94:
                    57:de:2d:ec:cc:2a:06:97:91:47:e1:0f:d2:05:07:
                    6f:53:84:91:6b:68:c9:78:99:8e:e3:f8:67:06:88:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:33:92:23:22:D4:6C:76:80:09:10:1B:63:89:E1:86:FB:DC:C9
            X509v3 Authority Key Identifier:
                keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:89:d0:49:23:b6:61:b2:f7:ed:31:b6:0e:81:ef:ea:fa:df:
         f2:26:32:ac:82:f6:98:8f:a5:bf:d9:38:36:44:47:d9:41:90:
         d2:00:cf:69:1b:08:8a:15:a3:14:d0:e2:fd:85:9e:0d:45:51:
         57:7e:3f:be:0a:5e:45:b5:3b:c3:db:4f:46:6d:28:c2:07:19:
         af:40:88:f1:da:07:01:97:30:b0:37:d9:18:c2:c5:5e:d6:4f:
         2b:60:5c:eb:4c:9b:44:bb:ef:44:9e:5b:b9:20:c0:d3:01:8d:
         5e:42:83:c0:6d:82:6c:0e:f0:04:26:7c:7b:ca:a8:88:6b:24:
         a0:8b:df:36:6c:14:5a:e9:ff:c9:0b:b4:65:2d:ba:77:9b:f9:
         b0:af:fe:c2:0b:38:b7:73:c2:3e:db:18:18:5a:d5:5b:16:d5:
         13:ff:4a:29:25:74:4f:d6:38:62:0f:29:ce:c3:0e:11:b6:7d:
         24:9a:29:e3:fb:78:c2:a4:6a:a7:bb:0c:dd:f5:cf:a2:fd:12:
         c0:57:f7:7c:00:db:5b:9e:6b:62:89:21:c8:0b:20:bf:4d:a1:
         a2:e0:87:8a:33:86:ae:0d:7b:cc:27:4a:fc:73:1f:14:f4:bb:
         92:99:93:c6:ae:be:d7:53:0f:b6:c5:9e:7a:6d:cf:58:dd:29:
         b4:08:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:52:57 2024 by rpki-client on console-ams.rpki-client.org