Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File:                     nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier:          rX8euomvLxYC4qBIyZVFpIXsrrNLMfQoHrfsKuZnhNM=
Subject key identifier:   69:F7:06:6E:14:F5:15:38:F6:55:3B:45:4D:EB:B7:91:16:A5:A3:5C
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer:       /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial:       0196BB92D9E7934E4F52B9C0EAF8972C84EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number:          152E
Signing time:             Sat 10 May 2025 19:01:25 +0000
Manifest this update:     Sat 10 May 2025 19:01:25 +0000
Manifest next update:     Sun 11 May 2025 19:01:25 +0000
Files and hashes:         1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: bYGUFpRh2axSAMXZPt1EiqodyYWEn9d5Af484COInZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:d9:e7:93:4e:4f:52:b9:c0:ea:f8:97:2c:84:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
        Validity
            Not Before: May 10 19:01:25 2025 GMT
            Not After : May 11 19:01:25 2025 GMT
        Subject: CN=69f7066e14f51538f6553b454debb79116a5a35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:09:e6:9f:fe:44:80:76:66:af:24:35:7a:
                    eb:58:1f:02:0e:91:23:a8:20:fd:3b:5f:6c:cc:60:
                    10:74:2f:22:44:b2:12:0f:e3:e4:6a:df:cc:1f:2a:
                    c2:2b:af:b7:97:c2:85:95:9f:a3:ca:50:80:26:33:
                    e3:60:8b:62:81:f2:dc:73:c6:51:56:98:2b:58:d0:
                    35:78:f4:14:27:7e:cb:4b:45:18:ee:27:b1:a6:b1:
                    ea:89:83:96:5a:66:eb:e9:1b:3c:99:63:65:60:69:
                    1d:19:22:bf:52:0e:71:35:58:0c:2e:8e:33:e1:53:
                    fd:96:50:5f:0a:38:92:a9:8c:da:47:e2:e9:7b:aa:
                    e3:41:60:78:81:73:79:43:4d:b9:b9:d4:a9:3d:ee:
                    57:cf:47:88:32:98:39:cf:7f:53:ac:0c:ee:7c:93:
                    36:06:04:07:7f:07:43:76:fa:aa:14:41:a9:9c:f7:
                    ad:96:ed:81:16:95:a1:ff:4b:73:d8:d5:5f:39:cb:
                    a3:38:11:02:40:da:38:6a:8d:49:af:58:59:1c:a3:
                    7f:3a:3b:d1:03:67:ff:04:d7:15:5e:93:3b:98:2d:
                    41:f8:fa:fa:23:08:61:2f:e8:0b:64:5f:8a:43:27:
                    c9:48:77:5a:a1:0c:fb:5c:fa:0a:cf:1a:3d:a2:c3:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F7:06:6E:14:F5:15:38:F6:55:3B:45:4D:EB:B7:91:16:A5:A3:5C
            X509v3 Authority Key Identifier:
                keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:22:32:3d:6e:c0:4e:67:16:52:2d:dc:db:c6:03:fc:30:b6:
         87:25:fd:4f:09:61:2e:d1:70:24:5a:03:4b:7d:e6:b4:27:f9:
         75:6b:dd:7e:1f:b7:21:03:5a:f1:ce:44:cf:79:40:00:51:45:
         48:aa:ae:41:21:bf:0a:af:0c:bc:7c:43:0d:2f:2b:2d:ed:e1:
         43:07:97:b4:66:7f:35:f5:c9:61:d1:b2:c8:41:cc:03:ce:f4:
         ae:da:87:fe:3b:83:fb:e3:f8:e1:69:f2:6e:0f:c6:82:10:0e:
         ba:93:02:20:d2:1a:4a:de:9d:d3:de:97:3e:09:08:78:d2:29:
         d6:46:0d:cb:0b:d3:e4:bc:57:f6:62:3d:c9:76:ef:50:3c:a4:
         6d:10:f4:cb:8f:4f:ba:d7:83:d7:08:0b:85:e5:a8:be:52:cd:
         7d:70:8f:29:3a:9d:21:da:7b:c1:f8:8a:c5:95:94:3e:19:2d:
         97:ec:63:04:bb:29:ef:ed:c3:8a:49:97:c4:fc:eb:8e:75:ff:
         c5:d0:d5:69:b8:70:82:7b:55:ae:16:f9:74:2b:f1:fb:09:5c:
         b0:27:74:b4:fb:8e:51:c1:dd:1d:39:da:2e:f8:63:a4:13:c0:
         ff:66:f4:b8:d4:b1:7f:cf:e5:33:c2:d6:c3:b8:55:3b:03:06:
         06:8d:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:36:29 2025 by rpki-client