Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          hWe2OmDSDBfcmIanP0YeCOWZrDJg9iuv+JaomOf73aM=
Subject key identifier:   D0:52:53:EE:67:42:40:85:7F:7B:2F:81:6E:08:64:65:A4:5C:43:C2
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       01901C6ACC42A0F86E001D1FF28DDD4CFF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 15:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:19 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: lfGqHOyNYtaSTjD8cxFQimctF7mcOY6FsjH9D0ico94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:cc:42:a0:f8:6e:00:1d:1f:f2:8d:dd:4c:ff:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Jun 15 15:01:19 2024 GMT
            Not After : Jun 16 15:01:19 2024 GMT
        Subject: CN=d05253ee674240857f7b2f816e086465a45c43c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:a5:f5:0e:09:54:fe:2f:50:72:a6:dd:6f:
                    3f:bf:5e:29:58:33:bb:99:71:3b:18:e1:f8:8c:62:
                    2c:10:3e:39:80:58:7f:21:75:77:ae:c3:ab:3d:d7:
                    4c:b5:a5:ea:2d:a4:ac:72:82:5d:d1:50:02:2b:0c:
                    53:87:19:c1:73:b8:81:99:3b:d2:d9:81:7d:a5:1d:
                    b0:31:b2:62:f6:fd:04:c8:8c:0c:29:0b:e5:6c:21:
                    82:82:e7:cf:fa:f8:ca:3a:27:5a:f0:95:94:4c:1d:
                    c7:f8:03:06:62:6f:9b:3e:4d:84:90:69:a8:e5:ec:
                    dc:aa:cd:a0:54:d7:8f:23:2a:fc:a9:93:ed:51:88:
                    8b:17:2e:9b:c4:2b:0d:99:7b:3c:be:c0:00:36:bc:
                    a2:53:db:5f:b1:37:46:5c:90:ad:5c:dd:92:7b:bf:
                    ca:ca:6d:f8:95:5e:3f:e8:5f:85:06:9a:46:5c:4e:
                    be:70:73:1f:17:6e:03:43:58:4e:66:ac:4e:1d:44:
                    8b:d7:c5:1a:e0:5b:44:a5:65:ac:c9:46:74:2f:aa:
                    98:92:18:b0:87:54:82:4d:6a:85:01:c9:53:7c:83:
                    7c:3c:8c:18:36:af:07:92:b4:ce:83:d6:f3:f3:a7:
                    66:39:d1:93:81:0d:42:63:af:d7:0f:7d:bb:5d:4a:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:52:53:EE:67:42:40:85:7F:7B:2F:81:6E:08:64:65:A4:5C:43:C2
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:8b:cf:6c:a3:13:79:1c:f0:1c:e8:4d:b8:b6:74:1c:b1:
         71:57:9e:d7:50:c4:6a:32:4c:49:8a:ad:8f:e5:b3:f4:b0:ab:
         87:a3:8c:2c:ad:19:d7:5b:01:a0:42:6c:b5:5b:5f:89:57:54:
         6c:70:50:11:89:9f:3c:72:1e:d7:e2:e2:25:3d:f8:ed:fa:8c:
         78:75:88:99:96:9e:8f:a5:39:e0:0b:db:44:36:55:5f:d7:a8:
         a5:38:70:65:11:c1:8d:09:6a:41:72:44:be:a2:33:2c:3c:e1:
         74:a6:af:cc:b4:3f:e1:a1:03:22:66:80:69:d0:d1:10:75:c1:
         13:30:57:10:8f:5d:f4:76:0b:be:83:ab:c7:5d:02:8e:67:71:
         93:1d:4f:31:7c:1b:29:1b:c6:3c:63:d2:2a:94:1b:61:18:a7:
         57:cf:c1:77:be:0e:47:a5:18:ac:01:2b:f9:0b:37:6f:7e:d8:
         67:83:f2:d6:dc:20:ad:e5:07:b3:cc:51:c0:d3:8e:af:d0:1f:
         62:5d:63:a9:df:d5:02:a5:ca:8b:cd:31:3a:f2:37:26:fa:b8:
         a4:a9:be:48:07:a4:37:c1:c2:a7:f2:1b:ca:5d:29:21:a6:8f:
         0e:e0:21:92:d0:08:c1:2a:10:18:c4:38:e8:ac:10:5d:07:dc:
         a3:dc:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:32:01 2024 by rpki-client on console-fra.rpki-client.org