Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File:                     Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier:          GO1Ly8rS57EcnYQ0li5xFkbM7dmAo/dpBb77ueawmaw=
Subject key identifier:   57:D9:31:84:F0:F4:C6:40:C0:BA:CC:B8:AC:74:81:EB:FC:B7:B7:2F
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer:       /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial:       0190448B1FFDF21BA4132305912C789AE4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number:          086D
Signing time:             Sun 23 Jun 2024 10:01:26 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:26 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:26 +0000
Files and hashes:         1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: j7ydKy6QHZzYf7R/iqyi3AlpNuoNQysWOK1BKGFUZq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:1f:fd:f2:1b:a4:13:23:05:91:2c:78:9a:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
        Validity
            Not Before: Jun 23 10:01:26 2024 GMT
            Not After : Jun 24 10:01:26 2024 GMT
        Subject: CN=57d93184f0f4c640c0baccb8ac7481ebfcb7b72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:d6:e6:05:ef:97:85:9f:16:2e:82:09:a6:
                    8b:ae:ff:2b:fd:0a:e0:da:6e:51:1e:d1:5c:e3:22:
                    82:f2:b0:00:46:88:e5:51:e1:20:e7:40:d0:d3:cb:
                    06:d9:88:43:37:a3:07:1e:d1:bb:93:8f:84:42:b2:
                    7d:8c:b2:86:ea:08:e7:37:5e:44:20:64:f7:08:44:
                    37:77:6a:00:ae:02:85:86:c6:c4:40:9c:55:05:a6:
                    2f:41:fb:bd:83:b3:c5:c3:ae:8e:b3:ea:39:b1:c3:
                    f2:64:dd:e5:22:eb:54:0a:9e:81:de:26:57:e2:d5:
                    82:7c:5c:78:84:9d:7b:76:fe:bd:aa:5e:57:e5:ce:
                    32:54:6e:f5:81:34:38:33:8e:d5:c2:70:7f:e0:d7:
                    09:24:f2:32:02:5e:f0:27:01:9b:0e:e7:03:0c:c6:
                    a6:1e:e6:0e:17:5c:31:36:4a:73:1c:e8:19:db:f7:
                    f9:2d:b8:6c:de:d7:97:8d:33:a8:c2:5d:f9:78:51:
                    d8:0e:a9:17:3b:85:ba:47:2d:66:91:e9:74:97:78:
                    a8:30:79:45:2d:88:8d:2d:91:9d:e5:0b:8c:07:31:
                    2a:73:61:ec:d2:84:b2:3a:e1:72:7b:89:aa:4e:ea:
                    e0:cf:6f:c5:05:bf:5a:07:9c:20:46:6e:1f:04:e5:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:31:84:F0:F4:C6:40:C0:BA:CC:B8:AC:74:81:EB:FC:B7:B7:2F
            X509v3 Authority Key Identifier:
                keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:20:54:9a:d7:92:c2:62:f5:d6:61:49:31:cd:8b:4a:bf:
         19:64:d5:c0:1c:c6:8b:27:c4:cc:b5:0a:0a:55:ab:77:a8:c4:
         20:43:9d:49:03:e0:f0:1a:3e:a9:e1:9b:38:d0:1e:80:04:a1:
         64:f5:8e:dc:8b:bf:bf:a3:99:1f:cc:f9:33:b0:47:85:aa:01:
         fe:bd:08:18:e6:d1:9b:21:74:77:7d:be:82:6e:95:72:ef:5f:
         d1:ec:1b:61:a7:42:f9:93:79:e0:6f:aa:75:05:99:e2:e6:75:
         9c:f9:6a:0f:ce:d0:f4:89:da:31:6c:6a:68:5c:14:0d:02:d4:
         11:ec:9d:0d:48:9a:7b:4e:91:ed:54:bc:23:42:42:0d:e5:fd:
         c4:62:7f:d4:ad:e1:5e:2a:fb:fc:7b:5a:3a:74:b5:88:cc:29:
         97:f2:8a:a1:76:4b:2b:94:61:29:e1:0d:a4:ec:26:5d:3b:0b:
         1a:1f:ce:46:1a:c6:c9:1d:33:83:7f:59:e8:8f:20:1e:33:1a:
         db:0a:a3:92:e6:9f:eb:43:b1:a1:f4:6e:c9:3d:5e:11:d1:3e:
         f9:ca:93:51:d4:c6:02:c0:13:d9:14:0a:4a:b6:af:8b:2d:4c:
         5f:b8:ad:1c:91:94:2c:07:3d:cb:46:de:3c:18:71:ed:3c:43:
         83:e1:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:06:59 2024 by rpki-client on console-ams.rpki-client.org