Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File:                     NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier:          PLOUncT4SWOymVIVdH6teYmBEjLKec4YBFE2r0puSlQ=
Subject key identifier:   0D:D2:8B:A9:B6:E8:A3:10:CA:6E:30:9F:12:87:45:F2:35:F4:6E:ED
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer:       /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial:       01907540219E328810EDAC7CD5C86EEA1F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number:          06FF
Signing time:             Tue 02 Jul 2024 21:00:55 +0000
Manifest this update:     Tue 02 Jul 2024 21:00:55 +0000
Manifest next update:     Wed 03 Jul 2024 21:00:55 +0000
Files and hashes:         1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: trwkYigMYXKjVZPqPF7CEDz9VqDiX8i8tB8aRyKEBjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:40:21:9e:32:88:10:ed:ac:7c:d5:c8:6e:ea:1f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
        Validity
            Not Before: Jul  2 21:00:55 2024 GMT
            Not After : Jul  3 21:00:55 2024 GMT
        Subject: CN=0dd28ba9b6e8a310ca6e309f128745f235f46eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:55:7b:b2:3b:77:53:18:3f:a1:68:f6:62:
                    cc:39:99:26:8f:68:34:94:33:71:d1:f9:0b:dc:cc:
                    99:fb:03:b3:86:bf:01:cd:35:e5:33:3f:85:3b:76:
                    9a:3a:92:4c:20:1f:67:e3:f4:93:49:a7:e1:46:73:
                    43:a7:55:7b:c3:23:4a:11:fc:02:0d:02:a6:32:23:
                    ee:c6:09:60:71:e2:47:9b:df:05:ae:c9:83:d9:65:
                    7d:31:ca:36:4f:57:ee:04:24:e5:81:bf:a4:01:69:
                    0a:5a:5b:c4:06:b9:d2:95:86:61:a4:2a:e3:e5:b0:
                    18:f9:69:a9:1d:e3:28:31:d4:73:4f:d8:20:2c:c3:
                    90:4b:78:ff:ce:cb:ac:b4:dd:db:48:71:2c:2a:1a:
                    bd:ee:82:bc:de:86:bc:2b:9c:63:5e:53:07:2e:81:
                    27:ed:02:c6:16:3f:36:21:ff:c4:ad:04:74:21:94:
                    b2:c8:32:9f:45:4f:b4:c6:55:0e:82:f2:1b:11:4d:
                    35:dd:5f:59:b6:61:96:6c:4f:b2:34:1d:c2:34:99:
                    08:9e:26:d6:1a:ed:fa:7f:65:2b:4b:03:3f:81:8c:
                    cf:23:80:37:28:8e:eb:90:ee:e9:6b:df:ff:83:11:
                    2b:3f:42:d9:52:c4:2b:93:f8:8f:d7:5c:7e:5a:a2:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D2:8B:A9:B6:E8:A3:10:CA:6E:30:9F:12:87:45:F2:35:F4:6E:ED
            X509v3 Authority Key Identifier:
                keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:61:e6:a8:30:6b:05:19:97:04:3b:ca:ce:75:9b:95:1e:
         8d:9c:9a:d4:94:ac:3d:9b:b9:fb:5b:47:7e:d5:5b:ff:bd:c7:
         76:1f:95:10:71:95:d9:f1:18:14:0f:17:48:2b:39:cb:7f:d7:
         e4:34:18:55:f1:21:ac:df:0e:96:62:84:a0:21:20:47:a9:e4:
         2f:d0:28:14:d8:7d:57:01:c1:8d:90:10:9d:0c:6f:63:a3:da:
         9a:ee:3c:58:4e:cc:e0:72:3b:39:be:3e:54:bf:91:04:53:63:
         aa:48:95:cb:1b:49:c5:1d:6d:72:0f:22:96:66:a7:0a:58:d3:
         f8:ae:5e:a3:49:f8:35:68:94:f2:be:f2:fc:2a:8d:f7:f4:05:
         74:ec:aa:40:e0:6a:b2:13:d6:6c:58:7e:68:73:92:4d:bf:bf:
         61:a1:02:35:46:40:34:5c:8f:b2:19:66:89:1c:4f:02:1b:a8:
         c2:e9:86:8f:7b:0e:ce:9c:99:c4:af:4b:9e:ac:82:ca:e3:11:
         17:b5:76:a7:70:9c:a7:a5:cc:03:b4:98:49:03:84:35:4c:05:
         03:4e:14:03:ee:20:d6:30:49:ee:21:39:66:dd:97:a1:46:fa:
         b0:71:02:49:25:17:8d:ef:bb:59:30:1c:8b:4e:cf:44:17:6b:
         c7:33:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:18:58 2024 by rpki-client on console-fra.rpki-client.org