Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.mft
File:                     N8P6I-SwCEN8lDXqfMWaI85pAmM.mft (raw, json)
Hash identifier:          g2eTTPm4s/nFRWL/yzNohSiDP1tGJLMrfK8S6gfF/0g=
Subject key identifier:   B7:72:08:CE:25:D5:0D:DB:61:C8:06:B7:B2:10:84:83:11:F4:3A:F5
Authority key identifier: 37:C3:FA:23:E4:B0:08:43:7C:94:35:EA:7C:C5:9A:23:CE:69:02:63
Certificate issuer:       /CN=37c3fa23e4b008437c9435ea7cc59a23ce690263
Certificate serial:       018F86DA4CF59BEABE7ADAA5B6D68CE28A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8P6I-SwCEN8lDXqfMWaI85pAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.mft
Manifest number:          7E
Signing time:             Fri 17 May 2024 14:00:04 +0000
Manifest this update:     Fri 17 May 2024 14:00:04 +0000
Manifest next update:     Sat 18 May 2024 14:00:04 +0000
Files and hashes:         1: N8P6I-SwCEN8lDXqfMWaI85pAmM.crl (hash: W3XBQByZ3MrA4Dv1rV8kKnXPu4WstESO+S2YNVSycbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8P6I-SwCEN8lDXqfMWaI85pAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:4c:f5:9b:ea:be:7a:da:a5:b6:d6:8c:e2:8a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37c3fa23e4b008437c9435ea7cc59a23ce690263
        Validity
            Not Before: May 17 14:00:04 2024 GMT
            Not After : May 18 14:00:04 2024 GMT
        Subject: CN=b77208ce25d50ddb61c806b7b210848311f43af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:1a:7c:fa:67:42:27:f5:65:85:ae:4b:90:
                    a1:55:5a:0c:09:45:b9:10:28:83:40:c0:74:57:6f:
                    43:d3:34:a7:6e:d2:4c:34:6f:52:55:7f:2b:2e:fa:
                    7a:39:25:d8:1a:bf:e9:23:18:5b:7a:24:91:7c:59:
                    86:82:3c:cb:5d:66:ed:a1:9f:c8:15:b3:28:b2:84:
                    00:28:40:79:7c:6c:01:e3:70:d1:b9:c1:56:ae:24:
                    4a:81:76:49:18:16:e0:ff:40:b4:af:a4:d1:3c:4d:
                    a8:3a:79:1f:6a:8b:9d:1c:f2:d8:c5:ec:80:f0:b3:
                    7e:0a:8f:38:a0:3e:9c:06:f9:84:ea:1c:55:f5:52:
                    ae:56:b4:f7:19:09:12:cd:b1:1b:27:2f:8a:ea:a8:
                    17:5f:8c:98:54:ad:4f:5a:88:96:31:a6:22:38:49:
                    81:9b:49:c7:2a:51:40:77:a6:16:36:61:b5:ac:52:
                    7f:e7:b5:a2:db:a3:3b:db:c6:70:27:e5:3e:90:1a:
                    b4:ab:7d:40:74:bf:a7:cf:8b:66:01:c0:7b:bf:74:
                    63:78:23:34:33:c1:94:b4:60:97:d1:ff:5f:b0:6f:
                    ca:87:56:fc:d9:23:bb:dd:9a:84:9a:dc:f6:3f:82:
                    93:95:d8:b6:d5:63:15:5c:d0:f0:d5:f8:b6:25:ad:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:72:08:CE:25:D5:0D:DB:61:C8:06:B7:B2:10:84:83:11:F4:3A:F5
            X509v3 Authority Key Identifier:
                keyid:37:C3:FA:23:E4:B0:08:43:7C:94:35:EA:7C:C5:9A:23:CE:69:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8P6I-SwCEN8lDXqfMWaI85pAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:e2:aa:54:4b:a2:e3:6b:ba:dd:67:1e:3b:ed:b1:8d:84:
         87:50:ff:81:35:d0:8d:1a:c8:27:df:d6:d4:5f:9f:e7:16:3d:
         57:82:99:36:d3:a5:df:98:87:c7:28:55:13:ae:a2:2d:05:9e:
         54:a0:69:58:e9:79:48:90:0f:2e:38:1e:d5:38:44:9f:07:03:
         d1:b6:ce:3e:c5:78:86:34:17:47:2f:7c:a2:35:50:06:8f:e5:
         e4:44:21:26:24:6c:48:53:6f:da:27:23:dc:48:30:5d:2b:4a:
         6c:93:38:56:39:91:e4:3c:a8:8b:29:20:90:ac:95:c7:25:2b:
         20:ad:9f:50:95:fa:58:be:f5:6d:2a:4a:25:f8:34:bb:6b:36:
         da:82:3a:f2:e0:43:de:42:86:f1:cc:c1:a7:97:dd:b4:1a:b8:
         75:37:76:d4:59:8d:82:9c:48:42:46:48:9b:63:bd:0e:6d:cf:
         9e:d6:d7:1c:4f:a5:6d:16:82:5a:d6:e7:49:3e:01:1e:22:62:
         9d:64:0e:1c:7a:ac:08:32:a3:99:72:1b:5a:de:f3:99:91:bd:
         66:e4:bf:f4:bf:63:99:8c:ba:a3:a2:db:0e:08:07:de:cc:08:
         69:1e:20:56:20:05:04:be:dc:a5:84:3c:b1:c2:d5:e1:17:1c:
         e4:21:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:56 2024 by rpki-client on console-ams.rpki-client.org