Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File:                     nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier:          UDYTOxAG7anPPqYLAhe2K9zfNHUfUxXwQQrR0F9+SFk=
Subject key identifier:   31:44:FB:AE:9F:6B:03:63:57:41:CD:4A:7E:BA:46:A9:AB:89:A7:E9
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer:       /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial:       018F87B6CD799A1B185AAC0C552BCF13DBB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 18:00:55 +0000
Manifest this update:     Fri 17 May 2024 18:00:55 +0000
Manifest next update:     Sat 18 May 2024 18:00:55 +0000
Files and hashes:         1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: 6EuwnTeIlWY7DK6IoL+tZtZ6oL17cv+ve2TBYX7wyw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cd:79:9a:1b:18:5a:ac:0c:55:2b:cf:13:db:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
        Validity
            Not Before: May 17 18:00:55 2024 GMT
            Not After : May 18 18:00:55 2024 GMT
        Subject: CN=3144fbae9f6b03635741cd4a7eba46a9ab89a7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:4a:4f:0f:bd:38:02:e2:b6:c9:a9:19:51:
                    5c:57:18:d1:55:cd:25:d8:22:eb:f3:d5:97:c8:9e:
                    b7:7e:7d:5f:3b:e4:4f:c9:a0:fe:41:db:de:48:4e:
                    7e:01:1e:4b:30:4f:ef:88:0e:b0:dc:ee:24:7b:3a:
                    8d:3d:2c:a4:4b:64:ae:f0:f4:6b:ee:dd:68:28:bd:
                    90:09:5e:ca:68:58:0f:6c:be:80:31:e1:21:43:04:
                    3d:60:ae:66:52:a3:5f:cc:e1:a4:a3:19:1e:21:66:
                    c4:4e:61:5e:9b:20:6c:9b:da:e5:2a:f8:fa:2a:de:
                    a2:a7:0f:da:74:80:88:75:36:cf:60:7d:98:4a:cd:
                    b0:8d:03:1c:3c:5e:7b:fc:f7:d7:59:32:98:6d:81:
                    3c:f5:03:cb:b7:c1:93:b6:83:41:78:58:a1:df:b2:
                    d3:d3:50:6c:a9:78:61:12:7d:da:3a:fa:c2:0e:7a:
                    c9:9c:2c:d8:fb:c6:d1:29:0c:42:05:fb:ec:32:81:
                    60:73:7d:2d:b4:96:d4:c9:83:0a:7f:5c:e2:96:bf:
                    6a:8c:71:d2:20:6c:82:d0:62:92:63:d7:bd:71:34:
                    41:25:73:e6:6a:f0:a7:20:47:5b:4f:92:b2:66:cf:
                    fe:a5:20:09:c5:12:66:a0:f8:1b:15:a9:94:3e:c7:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:44:FB:AE:9F:6B:03:63:57:41:CD:4A:7E:BA:46:A9:AB:89:A7:E9
            X509v3 Authority Key Identifier:
                keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:11:7b:2c:d8:f3:2b:c2:c9:9c:cc:27:c2:56:c2:36:28:
         98:d7:9f:a8:2e:55:b1:e2:98:b1:05:93:a4:59:c6:b5:c4:f0:
         24:d0:4e:9e:72:c7:c5:6c:72:b5:8d:7a:a2:22:74:f1:28:8b:
         4b:2f:99:a4:19:62:45:ba:df:82:d3:f1:d7:1f:db:6a:9f:f1:
         02:42:76:c1:9b:b8:e8:c5:d1:1b:cf:f5:a4:f4:5f:e0:fc:0a:
         76:88:2d:8c:35:c8:40:6c:97:9a:f0:e4:50:65:c7:45:fc:38:
         6a:d2:03:95:9f:62:09:19:47:a5:a8:e1:d8:01:2d:ca:5c:a4:
         0f:09:76:74:5c:6f:48:6b:b8:68:b6:09:7b:e0:8e:88:27:9b:
         08:06:47:11:b1:e3:a6:9b:5b:90:b4:de:12:ea:80:f4:74:70:
         cc:1d:84:bc:30:8f:66:0e:9b:51:eb:92:17:85:3a:49:ca:11:
         ec:1b:4d:d8:7e:38:ae:e5:b2:77:0f:b7:37:85:eb:19:4f:06:
         d9:86:08:28:55:c0:7f:d9:5f:a2:d2:98:e2:79:16:3d:d6:66:
         4a:3e:4b:a8:01:05:cb:0a:ed:33:b3:91:be:ff:cf:80:00:e1:
         c8:31:9d:ed:68:6c:d0:52:57:5a:37:8e:3e:89:d1:ff:5f:d1:
         82:fb:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:21:07 2024 by rpki-client on console-fra.rpki-client.org