Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File:                     NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier:          M3Gk3oeaETYYl83cVhcaaiS6GjKAfZfhe3py5VPus8E=
Subject key identifier:   CD:41:FC:C2:C7:A7:22:B3:BB:FC:27:43:38:41:7A:A5:7B:FF:A8:31
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer:       /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial:       018F874AB855A3FD172603728E92049F3EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number:          07B9
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: jXdbiEVV7Pr4CmVgbsmPJSH8nM1s9aVwFlm8XY/JnoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b8:55:a3:fd:17:26:03:72:8e:92:04:9f:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=cd41fcc2c7a722b3bbfc274338417aa57bffa831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:ed:85:78:45:db:50:79:af:2a:93:6d:87:
                    ad:d5:aa:a4:c8:4e:fa:9d:66:df:b7:06:fa:a1:82:
                    b0:ae:d2:66:68:f8:34:25:05:5d:7d:58:4c:65:b8:
                    55:11:99:fd:5b:1e:f2:c0:9a:c1:c7:1b:2b:33:f7:
                    00:5f:e4:c8:c7:95:33:23:52:42:6e:c5:17:e6:0d:
                    ed:b0:01:a8:1b:14:55:ab:8c:d9:04:a7:80:17:81:
                    e0:b1:4b:49:8d:c1:b0:27:6e:0a:4d:59:98:94:4b:
                    7c:89:fa:4e:59:ca:34:90:d3:40:77:41:62:c5:28:
                    f9:c5:b7:6b:d7:cf:66:61:b2:5b:c3:d1:90:69:c9:
                    ef:d2:2d:13:85:04:85:ac:1f:de:1a:3f:5f:f2:2b:
                    96:d0:9b:29:01:dc:45:27:f0:ab:86:84:8c:6c:fe:
                    f3:44:1b:12:06:26:f4:69:7c:55:78:97:81:ef:95:
                    f6:a4:78:e9:2f:5c:64:b1:9c:4c:b2:d2:45:c1:73:
                    52:ed:aa:0a:4a:85:2b:f5:1a:da:50:6a:3d:27:82:
                    6d:43:dd:31:3a:a0:96:aa:80:c1:c2:06:77:af:63:
                    11:e5:d3:53:47:4c:04:4f:7b:e3:ad:4f:cc:fa:27:
                    3e:69:bb:94:42:23:7e:d0:f5:09:ec:15:84:d2:98:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:41:FC:C2:C7:A7:22:B3:BB:FC:27:43:38:41:7A:A5:7B:FF:A8:31
            X509v3 Authority Key Identifier:
                keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:91:d1:8a:9e:5f:11:6e:8c:ad:29:55:8c:d3:32:90:57:
         37:f9:08:5e:1d:7a:c6:af:38:7a:6a:9d:f9:da:fe:ab:88:e4:
         c3:1b:5b:f6:da:2f:1a:97:a4:64:e4:22:68:65:c8:c9:7c:23:
         9f:73:69:77:2b:4b:ef:cb:54:ab:5a:e4:44:79:92:84:92:f5:
         1f:de:80:93:b8:74:ff:90:90:c9:dc:9d:7a:c9:2d:c4:c2:00:
         d0:e7:71:de:83:17:91:3a:6a:98:ce:f5:a5:c4:e4:f7:1b:87:
         75:2c:39:8b:ae:ea:7c:9f:1e:b8:34:6e:d8:dd:55:36:5a:be:
         68:fe:60:10:3b:6d:36:fc:cd:27:a7:c7:9f:24:05:22:60:fd:
         de:ef:43:d7:12:bc:c3:fe:8a:53:12:96:02:5a:73:b1:fb:69:
         da:09:a8:b4:01:a7:75:cc:f4:8b:d6:64:b4:0b:bc:2f:03:ce:
         d7:10:8f:fe:0c:48:bb:84:a0:0b:ab:8a:dd:b9:33:0d:4d:54:
         da:40:75:c0:5d:6c:f1:75:5f:7e:37:fd:83:c3:ce:23:b9:20:
         e5:7b:d8:e7:da:e3:da:ae:e0:6a:a4:37:8a:51:ef:45:ec:5c:
         1a:84:3b:2d:41:d7:d3:2a:02:60:61:5e:b7:af:9f:5b:ce:16:
         31:3a:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:37 2024 by rpki-client on console-fra.rpki-client.org