Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
File:                     nwDOElva92YyktO-I2S_ZFyGtqY.mft (raw, json)
Hash identifier:          WXK2vZJd+DvW8D6h9cHesZlRlNJyITx+ITpmB/GMYlg=
Subject key identifier:   B7:E6:AC:1D:D7:0A:B4:A0:AC:E3:71:9A:64:21:18:E3:16:5F:77:A0
Authority key identifier: 9F:00:CE:12:5B:DA:F7:66:32:92:D3:BE:23:64:BF:64:5C:86:B6:A6
Certificate issuer:       /CN=9f00ce125bdaf7663292d3be2364bf645c86b6a6
Certificate serial:       01909EA9C870EED693BDDBFFFC17131E11E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
Manifest number:          08F3
Signing time:             Wed 10 Jul 2024 22:00:45 +0000
Manifest this update:     Wed 10 Jul 2024 22:00:45 +0000
Manifest next update:     Thu 11 Jul 2024 22:00:45 +0000
Files and hashes:         1: nwDOElva92YyktO-I2S_ZFyGtqY.crl (hash: Byszp9WwHHznq4PI8VQu8YYoZBw8Q3r1UHMYuMXXumM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Jul 2024 20:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9e:a9:c8:70:ee:d6:93:bd:db:ff:fc:17:13:1e:11:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f00ce125bdaf7663292d3be2364bf645c86b6a6
        Validity
            Not Before: Jul 10 22:00:45 2024 GMT
            Not After : Jul 11 22:00:45 2024 GMT
        Subject: CN=b7e6ac1dd70ab4a0ace3719a642118e3165f77a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:b6:5b:24:6e:61:75:d7:fd:53:81:fb:78:
                    ed:fd:c3:8f:6f:d4:45:8e:68:fa:f3:03:60:9d:cf:
                    a3:56:40:16:cb:ac:16:0a:5f:81:8c:f7:bb:69:43:
                    a8:e7:2e:28:e8:79:fa:6f:36:4a:a6:3f:2a:d2:31:
                    d2:67:11:b7:05:3f:97:6c:49:6c:9b:2f:bb:66:c1:
                    54:70:73:ad:0f:b7:17:cd:7d:ff:17:7b:35:5b:7b:
                    8b:b1:bb:ba:36:09:6c:f6:d0:f3:85:ae:f5:7d:98:
                    7c:2b:6d:31:4b:51:47:d4:f2:a9:10:d4:c5:33:46:
                    25:79:fd:e9:03:da:dd:3c:03:99:86:03:e2:a5:47:
                    82:fd:26:9c:88:c1:34:bd:e0:b3:03:3e:e0:86:80:
                    f8:3c:0d:5c:30:4f:2f:46:b3:6a:bc:ea:97:0d:19:
                    24:b1:bd:ee:c5:0d:b0:f6:20:89:01:36:53:a8:68:
                    69:0e:12:ff:43:44:ae:cd:21:1d:0d:2d:9f:e6:77:
                    a6:b4:81:2e:0f:e4:f8:ca:21:e1:e9:63:1d:a3:8b:
                    7c:cf:53:cc:b3:1a:24:a3:e6:be:50:d6:56:6b:3f:
                    0f:95:1a:93:ca:e5:b3:cf:7c:61:b1:e1:fa:6c:8d:
                    2c:95:10:11:10:ae:d6:cf:dc:44:58:bf:d7:71:e2:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:AC:1D:D7:0A:B4:A0:AC:E3:71:9A:64:21:18:E3:16:5F:77:A0
            X509v3 Authority Key Identifier:
                keyid:9F:00:CE:12:5B:DA:F7:66:32:92:D3:BE:23:64:BF:64:5C:86:B6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:97:b3:77:27:3b:42:35:d0:6c:c4:7b:32:5f:a8:f4:2c:c1:
         c2:87:99:52:50:f6:c6:cc:60:66:be:58:ab:6e:ed:6f:30:2d:
         74:a1:da:fc:8a:ba:71:10:3f:3e:60:a1:46:80:9a:79:4f:ba:
         9d:6f:7a:c6:87:0e:d7:e7:6f:fa:ad:44:13:70:92:00:a5:f9:
         be:59:1e:7f:b0:70:52:2d:e4:f1:50:ce:22:55:86:01:7d:21:
         22:35:58:e1:59:45:d4:9a:97:50:cb:4b:95:54:39:e2:77:b0:
         32:fc:58:a6:43:92:17:6a:f6:b2:1e:c8:fe:22:99:64:5a:c2:
         25:26:49:02:1f:7f:b8:cd:e1:e7:97:31:1e:1e:12:5f:79:78:
         2f:47:7e:c5:87:c6:3b:63:d8:ad:24:02:60:d1:78:0f:06:8c:
         f2:08:72:c2:42:04:c0:9e:58:b6:8c:f5:8e:01:76:77:bc:89:
         e6:e2:c4:f6:b2:4e:b5:21:6d:33:c9:c7:d1:fa:87:62:e4:db:
         26:30:95:29:60:9b:7e:b8:36:85:38:91:c2:7e:b4:71:9f:eb:
         e3:ca:0c:e0:ce:ff:94:68:15:8d:c6:0b:b2:8d:5a:ca:18:24:
         a1:47:46:97:90:3f:d3:48:a3:71:7b:de:5a:67:55:5f:48:a5:
         82:52:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 06:02:57 2024 by rpki-client on console.sobornost.net